Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/165deabf-22e9-353f-b895-dadde6e0efa3.roa
File: 165deabf-22e9-353f-b895-dadde6e0efa3.roa (raw, json)
Hash identifier: +dfa/mxKo6YBfxn3v9i7KZtivD5RVeJEvHSPjE8Luw0=
Subject key identifier: E9:D5:29:B0:1C:A8:42:41:7D:F3:F6:5E:E5:3F:F3:FE:93:E1:28:F3
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848116FCAFE1813C603207CF280
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/165deabf-22e9-353f-b895-dadde6e0efa3.roa
Signing time: Mon 02 Dec 2024 02:00:40 +0000
ROA not before: Mon 02 Dec 2024 02:00:40 +0000
ROA not after: Sun 02 Mar 2025 02:00:40 +0000
asID: 7016
IP address blocks: 2603:2988:8000::/34 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:11:6f:ca:fe:18:13:c6:03:20:7c:f2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 2 02:00:40 2024 GMT
Not After : Mar 2 02:00:40 2025 GMT
Subject: CN=5fd05bfb-c3e8-4042-9e91-3141641f5967
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:f2:cc:1a:84:08:80:02:f5:77:63:0a:09:b7:
f1:fa:70:06:4f:d9:49:cb:db:25:7b:0d:94:52:0a:
bd:a8:5b:d4:97:71:2f:f7:1b:5a:53:f2:6b:9e:97:
72:28:7d:a1:87:97:96:d9:99:1c:bc:4d:ab:c7:4d:
53:82:83:96:a3:8c:fa:7a:b1:3a:e8:fc:c8:97:fd:
9d:12:a4:99:84:b9:65:44:18:29:d6:6b:2f:d4:e4:
6e:68:5f:62:b5:a3:6b:79:d0:6c:9a:4a:97:bf:06:
eb:08:5e:94:d8:84:d0:92:08:cc:e4:10:ce:27:e9:
3b:24:e0:e1:39:eb:d4:3e:b0:de:45:7c:3c:5b:dc:
4e:8f:fc:20:78:0a:e7:57:60:5e:08:3d:e1:a8:bc:
0a:46:2e:97:47:0f:36:4b:ad:a9:6d:7d:59:ab:8a:
de:b5:b6:59:3c:e3:05:b5:76:3a:da:46:ff:0a:c5:
94:54:dc:71:47:18:1f:22:82:3b:13:b5:aa:f2:9f:
75:b9:24:8b:70:6d:5f:46:ad:4f:86:2f:ef:bc:a5:
a6:be:dc:c4:9c:6b:31:0d:a6:7e:50:7d:ff:ad:bc:
19:a3:fb:87:a6:f2:e5:ac:9f:a3:80:07:53:a7:09:
8d:31:4d:f0:ba:b1:00:c3:51:89:6b:a6:48:60:d0:
fe:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:D5:29:B0:1C:A8:42:41:7D:F3:F6:5E:E5:3F:F3:FE:93:E1:28:F3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/165deabf-22e9-353f-b895-dadde6e0efa3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv6:
2603:2988:8000::/34
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b1:3c:a1:cf:de:d7:30:bc:bf:b0:7a:e6:b1:57:d7:0a:24:1d:
1c:80:2b:62:30:c6:5e:09:42:67:b8:74:a8:f7:4a:42:6e:15:
03:eb:36:e3:5c:a5:6b:37:ac:ed:14:40:61:45:e5:6c:f7:28:
db:b3:f4:ca:65:c0:d6:93:06:a1:9b:77:03:a2:98:d3:c2:bc:
e0:3b:3c:13:73:b2:db:b0:ab:23:6b:b1:28:bb:bd:aa:4a:cb:
3c:b1:f7:aa:eb:aa:bc:31:62:d1:72:11:b1:41:18:dc:3e:57:
20:19:31:20:79:82:09:d2:a8:51:26:5b:5b:25:f1:e4:ba:78:
2d:ab:88:c6:5c:96:a4:87:f1:86:8d:36:6a:96:15:13:fb:d9:
f6:e3:0d:7f:a0:18:0f:8a:c9:d9:21:5d:98:31:16:6f:2c:3b:
4c:43:54:8b:7e:b0:ab:4d:97:02:4e:db:7f:68:3c:16:ab:33:
6f:2a:69:4d:f0:27:2d:62:8b:8c:b8:63:a6:2b:8b:bc:d9:f2:
fa:44:35:88:f5:af:91:49:67:0d:cc:29:fb:28:1a:1d:f5:d7:
0c:3d:b6:e9:c7:e4:de:f2:7c:29:b7:af:b8:8f:a8:af:ab:f1:
b8:9b:df:ab:18:ba:7b:44:f2:e2:14:6a:59:6d:5f:a3:a6:04:
70:2c:11:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 01:20:07 2025 by rpki-client