Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/35d64afc-4f17-3e1e-9d74-d5cfee01a57b.roa
File: 35d64afc-4f17-3e1e-9d74-d5cfee01a57b.roa (raw, json)
Hash identifier: wL9r0FMjqydcEsXUHvZf1dhUpSUe+n4hA040J/SMq+U=
Subject key identifier: 3D:23:90:DA:9E:29:F8:3A:1B:85:C5:82:69:F2:1F:9A:89:E9:66:09
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C125E42E8E8491CB435DC80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/35d64afc-4f17-3e1e-9d74-d5cfee01a57b.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33287
IP address blocks: 2603:2047::/34 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:12:5e:42:e8:e8:49:1c:b4:35:dc:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=df94542d-daf5-4c2a-9056-7a0b44e69891
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:84:87:be:c4:35:9e:1a:20:43:9f:13:34:90:
0e:c5:3d:26:9f:7b:ef:9d:0d:d0:1e:62:11:d8:e7:
d5:7b:e2:5c:25:33:f7:10:7b:b1:32:c8:7b:92:5c:
7e:23:d2:b8:05:2b:a4:87:ff:8a:89:10:83:a0:09:
fe:38:ae:d2:3c:92:81:dc:4d:3a:27:32:b0:13:11:
e3:73:c0:60:23:1d:f6:c4:05:4e:f1:4d:95:c5:de:
d0:98:61:19:b5:53:13:dc:f6:e3:a9:1d:9b:1b:d9:
4a:14:19:74:d4:8a:6d:68:c3:69:ee:45:c4:54:34:
c7:fe:b6:0f:07:b6:e8:72:49:84:c6:59:7e:a4:ff:
f0:6d:1e:43:7d:b8:26:94:37:f9:da:47:de:db:4e:
39:18:43:15:7c:60:df:9e:7e:dd:fa:ff:c9:94:46:
8d:ac:13:1d:d1:63:a4:7a:2e:a5:3d:02:ca:4e:ac:
c8:59:85:88:1d:de:8b:9f:48:a6:53:33:55:ad:3c:
c7:4b:28:6e:73:71:cc:42:78:e0:51:f7:c2:52:05:
ca:6a:f7:ef:ef:02:0c:69:19:f7:4b:a9:b8:2a:a3:
00:bc:65:b2:ab:ab:93:1d:ae:32:fc:35:2e:37:b2:
71:58:bb:1a:e4:2a:06:65:f1:aa:85:fa:51:b4:d2:
ee:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:23:90:DA:9E:29:F8:3A:1B:85:C5:82:69:F2:1F:9A:89:E9:66:09
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/35d64afc-4f17-3e1e-9d74-d5cfee01a57b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv6:
2603:2047::/34
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
54:66:17:ae:03:b6:99:17:03:c6:b1:12:7a:1e:c2:ea:13:fe:
53:f2:75:cf:56:b3:81:79:c2:41:1b:34:da:8c:b3:b2:4b:b5:
e8:f9:b9:3a:5f:bf:ce:d7:bc:45:42:6f:fc:86:af:11:99:af:
ff:7e:2f:5f:2d:2f:78:2a:1d:46:72:8d:3c:2f:1c:1a:ea:a3:
12:3b:e9:a3:93:ed:f5:c3:fe:06:68:36:56:4a:37:26:c1:b3:
b9:35:17:dd:db:90:ed:34:75:8a:47:d2:29:eb:2f:45:df:c0:
46:09:8a:fc:65:e8:dd:ac:53:11:47:0a:9d:f7:3e:20:c1:fa:
fe:0f:88:2e:e2:a1:ad:d9:8a:3f:0d:4c:44:68:b7:57:cc:df:
0d:8c:51:ef:81:9a:9d:89:63:88:47:11:b4:b8:fa:77:1e:8a:
0f:e5:19:44:48:b8:84:50:63:30:0e:1c:eb:e5:8f:0d:68:e0:
b9:d0:58:cd:e1:42:e0:7d:9c:14:f2:b3:d5:73:59:53:88:f3:
e0:85:3b:af:71:cc:cd:a2:d1:05:63:78:86:04:9a:95:d3:43:
d3:cd:d3:d3:32:a9:6d:71:b7:a8:d3:3f:ca:35:97:d8:6b:e6:
cb:e0:a9:7f:14:63:a4:c0:50:8c:e9:d8:b5:ef:97:8c:e6:e4:
29:db:51:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:14:49 2025 by rpki-client