Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/03afd478-71fd-3a94-94f7-a22527ba37d2.roa
File: 03afd478-71fd-3a94-94f7-a22527ba37d2.roa (raw, json)
Hash identifier: a53zRaSB2fsWqHbgSId52sfpkTfPT8mmPX9a4vb/9Pg=
Subject key identifier: 2E:B1:FC:14:3B:A9:F4:C7:70:CF:4A:39:B1:15:6E:3F:71:BA:A9:3B
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143A8DDDBAAFAC2BEDCB49A0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/03afd478-71fd-3a94-94f7-a22527ba37d2.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33490
IP address blocks: 2603:21c2::/34 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3a:8d:dd:ba:af:ac:2b:ed:cb:49:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=3a35445f-581f-49c4-a122-ab4dcfd3deb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:31:32:03:83:13:5f:d6:64:53:f5:de:c6:a6:
41:0e:c7:81:ea:3d:10:00:d5:17:12:32:34:ac:a1:
04:2e:97:35:e4:54:64:cc:ff:14:75:6a:b1:03:b9:
63:c1:f0:36:94:10:21:36:a8:07:79:8d:97:67:7f:
28:7d:27:be:f2:26:b5:bd:f8:c9:5f:8b:35:85:4e:
54:77:b9:4d:70:36:c6:d2:3f:a6:7b:a3:d6:de:e0:
db:a2:23:d7:45:20:75:80:fa:12:4a:59:c5:00:00:
64:68:ed:a0:28:9a:76:a2:89:31:ab:d2:e3:f0:95:
10:0c:5e:bf:cc:d5:52:22:76:e3:b4:82:18:84:39:
94:38:8b:e9:8e:df:29:15:3a:71:ed:9c:14:7a:f1:
a8:b1:0b:c8:07:62:bb:fd:c3:ba:6b:54:38:e2:9e:
59:5d:df:9a:5c:d8:04:dc:5c:88:95:e8:f8:52:a4:
7b:e0:ca:42:0e:a8:74:66:a6:7f:e2:51:42:f4:0c:
e7:de:44:43:e5:2f:aa:fc:c3:1f:08:77:b9:d6:77:
ed:3d:f4:3f:6d:fb:f7:c7:48:f8:4a:ad:ab:36:96:
21:fc:db:16:cc:0a:15:41:d6:b4:da:00:69:a6:06:
ba:d8:07:b7:ff:ad:d3:4b:a8:48:fb:d5:9c:91:d2:
8a:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:B1:FC:14:3B:A9:F4:C7:70:CF:4A:39:B1:15:6E:3F:71:BA:A9:3B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/03afd478-71fd-3a94-94f7-a22527ba37d2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv6:
2603:21c2::/34
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b1:92:b3:8a:1f:37:cf:ee:a1:32:4f:2b:71:89:1b:1b:c0:6b:
72:80:d4:96:c8:c6:33:56:01:f3:54:54:a9:84:0a:e2:2c:9f:
82:8f:af:41:c7:f6:5b:cc:b2:39:a9:20:3d:ff:98:bc:c6:d4:
34:a1:48:c8:ac:e6:26:dd:bf:ec:61:04:f1:18:03:c2:ee:cb:
19:c9:51:b1:52:c4:47:5f:b7:d6:07:a3:fd:d6:27:86:83:01:
27:f8:d0:e7:dc:6e:f0:e0:7f:ae:c3:85:bd:7d:83:9e:90:d4:
2a:a6:57:0e:8f:2a:b0:b6:ac:b6:4a:02:80:15:61:08:34:b7:
a9:72:99:21:1e:c3:9c:fb:b6:e7:d3:8e:c2:a7:23:ae:2a:2c:
a4:e1:5c:47:92:97:e8:4b:13:f4:d3:25:3f:6c:76:6d:41:ba:
2b:97:6e:09:dd:8f:04:f9:c5:49:3a:76:6a:f9:7d:f7:0a:d9:
9a:70:2d:58:99:b6:0e:5c:bc:25:77:af:e1:71:ad:e7:a7:3e:
18:50:c3:70:c3:44:dd:d8:08:69:f4:d8:d6:a2:67:c8:80:3f:
88:49:18:39:43:e5:e2:2e:9a:21:a2:d3:fe:95:4f:78:66:c8:
a3:92:b2:9b:0d:03:9e:21:f0:7e:4e:58:60:85:7c:fe:e7:90:
fa:e6:24:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:24:07 2025 by rpki-client