Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/21387c88-a227-3084-ac1b-d76461b1d005.roa
File: 21387c88-a227-3084-ac1b-d76461b1d005.roa (raw, json)
Hash identifier: n5uryUW5H7AVdB3fGdyaJ9tcEdN0hWi1AkgtbrwpGIw=
Subject key identifier: 34:8D:FD:20:93:1B:75:A5:C2:28:66:A8:B1:9B:59:E7:13:A7:B3:36
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C125D700D2DF927DC304400
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/21387c88-a227-3084-ac1b-d76461b1d005.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33287
IP address blocks: 2603:2040:8000::/34 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:12:5d:70:0d:2d:f9:27:dc:30:44:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=0419aa38-10e5-4b20-ad76-d7b62b4adc67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:6b:28:50:82:67:7c:00:c1:9c:c9:11:22:ba:
09:75:ea:51:d2:53:48:b3:49:5f:8f:a0:14:44:c5:
e0:3b:e2:e3:64:cb:1f:36:9a:18:e0:1b:83:02:de:
3e:bc:2d:66:00:28:e3:35:9e:5b:3b:a8:bb:6f:82:
06:ae:7e:ee:ac:7e:4f:dd:14:b6:b7:cb:35:1d:62:
24:75:eb:9a:a8:a2:c5:36:40:a6:b1:8c:21:c5:39:
1c:d1:c3:1f:80:d6:42:cc:16:2f:c0:6a:33:7c:d2:
54:f2:ec:ca:af:ec:6e:35:d1:1c:32:a3:02:fc:ff:
fd:32:6b:8b:e5:83:65:9e:ba:7b:b4:b0:12:b1:d8:
ae:53:5e:a8:46:71:aa:67:4b:a1:77:6b:e0:f7:55:
6a:a9:ab:c7:c6:b5:4b:97:91:79:6c:65:83:c0:7a:
83:fd:3c:8c:16:30:05:b2:41:88:dd:3d:8f:4d:b3:
39:e8:ae:68:42:b3:c2:40:aa:86:0f:da:52:c3:3f:
81:d9:be:12:56:2d:2b:d1:00:43:c9:7c:77:22:75:
8f:c4:90:0f:e6:61:05:18:86:e6:82:58:cd:ad:fd:
37:d8:2a:4d:55:f5:7a:82:38:6a:2a:ed:06:32:33:
d6:9c:75:82:be:ff:b1:26:46:9d:33:f7:5b:98:b1:
67:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:8D:FD:20:93:1B:75:A5:C2:28:66:A8:B1:9B:59:E7:13:A7:B3:36
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/21387c88-a227-3084-ac1b-d76461b1d005.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv6:
2603:2040:8000::/34
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
97:31:18:48:5e:70:3e:e8:02:22:01:b2:bd:60:b6:8a:13:ea:
3e:01:83:29:10:b2:b5:c5:96:6c:1d:80:00:58:5a:87:73:e7:
a9:b7:3f:c0:84:d4:6d:b8:1f:63:7d:c1:ad:0f:00:a4:52:11:
24:5c:6a:5f:1e:9b:49:46:79:d4:58:66:16:70:97:de:f8:4f:
18:1f:e4:6c:02:5d:28:bf:bb:40:38:d7:5c:ef:b6:8a:49:7d:
d7:a1:de:40:97:79:1c:7b:58:12:a0:4e:4c:dc:ec:37:a0:48:
ea:75:79:57:a5:57:91:8b:26:a4:18:97:22:7f:e5:d6:57:2d:
75:c4:fd:63:cd:82:8f:6b:8c:eb:fb:34:11:15:87:bd:b1:af:
ec:ee:4f:44:56:01:12:f8:7b:bc:6f:3b:bd:77:57:31:b3:1d:
e0:a6:af:af:36:26:69:fd:55:79:fd:49:72:c9:1c:5c:83:76:
66:55:70:55:c1:31:b1:a6:96:7b:3b:c7:2d:fd:f7:54:c7:f4:
e2:92:90:f6:02:e0:57:5e:db:95:90:8d:9a:05:44:4c:3c:8d:
da:da:22:2b:c7:68:57:4a:e7:0a:a2:2e:66:a6:65:c1:fb:5c:
6a:03:62:e7:56:07:ef:92:73:22:0b:19:62:61:e0:b4:b3:7a:
57:e6:6d:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 13:11:30 2025 by rpki-client