Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0fafcf7c-b78d-3bde-944c-6fe6daf1e89a.roa
File: 0fafcf7c-b78d-3bde-944c-6fe6daf1e89a.roa (raw, json)
Hash identifier: R5/h/RtWO3Dc4yk3uxQp9BtfQmf2gl3qbnv9QMA1Nlw=
Subject key identifier: BF:83:E8:5D:5A:9E:F4:0C:13:18:FD:D6:F1:B3:7F:D1:5E:95:33:B9
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143DB90E9338C03A42501B40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0fafcf7c-b78d-3bde-944c-6fe6daf1e89a.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 7015
IP address blocks: 2603:3005:6b00::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3d:b9:0e:93:38:c0:3a:42:50:1b:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=de228674-a09c-4c59-a3e7-bc3ba8decced
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d4:9f:e8:13:2c:73:dc:2b:12:a8:5e:c2:59:
2c:03:f0:4c:73:6d:1e:1c:34:12:0e:7a:b4:8e:f5:
62:3c:56:69:4e:94:88:2f:cd:fb:7a:69:b6:62:83:
e8:94:c6:53:fe:4d:cf:1f:0d:25:cc:44:44:76:21:
82:f2:a3:93:d6:7a:8e:8b:af:4c:2f:9d:10:e4:c3:
8b:fb:b5:00:f5:77:ac:fe:28:70:93:30:38:da:7b:
ec:ba:74:33:51:ff:a1:77:59:51:e6:2d:7f:15:0b:
be:d9:f1:9a:44:6a:9c:17:2e:34:0d:3f:59:6c:b4:
56:31:46:4a:7c:99:d1:05:09:91:71:5f:77:bd:25:
5e:32:57:e1:54:e4:90:71:d7:a1:18:58:c1:9c:49:
76:bd:bd:39:65:59:e6:2c:77:56:24:9b:38:04:fa:
87:e9:81:2a:3d:b3:08:b7:47:cf:5d:ea:6d:f5:6f:
69:9b:e2:79:49:74:d1:52:af:fb:75:7d:93:0f:6b:
b2:2f:68:be:4e:79:b0:24:2b:71:f0:b2:5e:e4:ec:
03:bd:4c:47:7d:02:30:71:65:2b:9c:3a:01:79:cf:
3f:61:7c:10:ac:76:56:b1:72:25:a5:e6:b9:d8:46:
95:08:c1:6d:05:66:c7:a1:f8:e6:69:f6:c2:59:ea:
49:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:83:E8:5D:5A:9E:F4:0C:13:18:FD:D6:F1:B3:7F:D1:5E:95:33:B9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0fafcf7c-b78d-3bde-944c-6fe6daf1e89a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv6:
2603:3005:6b00::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b2:df:f6:66:63:1d:74:7b:8e:31:66:f8:f4:5d:da:50:51:9e:
92:0b:9f:c7:f7:70:e0:2f:1e:d1:99:2b:46:c3:8c:50:8f:0d:
4e:e1:f3:09:00:11:1d:fc:03:95:19:21:94:45:92:78:07:c3:
07:00:d8:74:44:b3:7c:25:3a:69:35:f8:91:53:0a:c1:64:d8:
23:4c:24:76:b1:58:f7:c5:7c:f0:70:bf:46:a5:80:55:a5:f9:
06:83:25:75:fa:dc:b0:d9:c5:f1:3b:13:f4:37:22:4e:4d:c3:
58:19:21:00:33:10:e1:86:3b:06:37:c9:b1:e2:4b:cc:17:3b:
11:d9:cd:49:29:25:fd:de:ed:c3:87:61:83:ff:33:5e:a7:2c:
a5:c6:a3:d5:7c:7b:b9:3b:88:96:c7:3a:03:6e:f0:28:b4:6f:
3a:3b:59:6b:55:7c:e5:7c:82:e7:af:cd:a1:f0:bd:4e:0a:50:
8a:46:cd:06:06:18:e3:cd:d8:3a:c7:19:8d:5a:52:57:4f:1e:
03:44:7a:6f:4d:52:5d:d6:1b:a0:79:e6:bb:25:ca:d4:e3:1a:
f9:e0:de:cb:7f:4e:19:03:a4:c1:e0:06:59:ae:3f:70:68:f3:
59:a4:b5:bc:43:88:20:f1:18:8e:8d:e9:cb:87:c8:b3:62:32:
d4:e1:47:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:00:32 2025 by rpki-client