Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/43da4a32-79b1-3d3f-94d4-1bbe62f2694f.roa
File: 43da4a32-79b1-3d3f-94d4-1bbe62f2694f.roa (raw, json)
Hash identifier: rRENXua3BiCXVfme+HU+rH3fxHMOeDkhNT0V+ku38aQ=
Subject key identifier: 53:61:A4:38:E7:43:AB:48:4D:AB:CA:36:22:11:12:B2:19:DC:A3:4B
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143FC3B30F8425BC329CDE20
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/43da4a32-79b1-3d3f-94d4-1bbe62f2694f.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33662
IP address blocks: 2603:300c:200::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3f:c3:b3:0f:84:25:bc:32:9c:de:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=117b694b-9d15-4662-af25-af3225cdd566
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:81:7a:01:ba:9c:ea:4d:04:58:3b:e2:58:f0:
1d:b5:a0:69:3c:33:bd:83:c6:a9:a3:6a:10:bb:92:
75:e3:5d:42:bd:6f:8c:a4:af:f7:55:0d:34:20:9b:
c3:1a:7a:a9:9f:fe:23:0a:ae:cf:20:5e:8d:fc:ab:
70:70:94:d6:5f:7e:e0:19:93:59:0f:56:42:3f:d2:
79:fb:50:41:61:d4:85:78:21:97:48:dc:13:8a:12:
f2:ac:23:5e:5f:6a:21:50:98:00:11:49:7b:00:c6:
ee:9d:b9:1d:18:80:2a:47:f6:ec:4d:a3:66:7c:88:
2a:14:20:e2:c6:45:75:38:dd:ac:59:67:1b:ec:2e:
fa:28:4a:ff:b1:b7:b9:8e:7b:86:e9:3b:f2:30:03:
d9:9d:52:ea:7a:16:77:2f:15:19:09:5b:3d:9f:a5:
f9:2e:eb:8c:a9:7d:0f:65:df:7f:91:46:24:17:d5:
8c:c6:4f:5a:c8:be:3b:c5:af:ad:81:56:2a:49:b1:
64:86:c4:8f:dd:a4:48:25:1b:bb:0e:c0:37:fb:da:
a3:39:7f:8a:62:2b:7e:20:81:33:ab:95:1e:4e:f8:
8b:fa:38:16:7c:3f:e1:9d:54:86:27:ef:8d:a3:3c:
e8:bc:cb:f2:5a:5a:08:a0:36:d9:b1:00:8b:09:bf:
56:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:61:A4:38:E7:43:AB:48:4D:AB:CA:36:22:11:12:B2:19:DC:A3:4B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/43da4a32-79b1-3d3f-94d4-1bbe62f2694f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv6:
2603:300c:200::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
04:ec:6d:69:6e:54:47:9f:ba:c4:8d:7a:80:3f:fa:0f:c0:e7:
ff:4f:22:9d:c7:c5:be:db:ec:f2:16:a8:b5:7f:ca:2e:0a:d3:
81:fd:16:d2:7f:df:e9:da:49:7e:d3:ec:19:6b:6b:be:71:3f:
98:d4:8d:0e:b6:6f:74:c8:01:fc:08:a6:f3:99:96:d0:11:3a:
b3:fa:f5:29:f8:df:64:a0:40:d7:59:08:f9:57:a0:e4:aa:66:
ee:0b:a8:e2:2f:f4:7d:94:86:47:de:9b:6d:5a:e3:3e:f6:ce:
80:2d:16:5e:34:d5:5e:82:eb:4d:31:9c:19:a8:b0:a7:89:6a:
8b:0f:07:8d:c2:f5:86:e0:fc:77:ae:e8:aa:c9:6a:f0:fc:26:
02:98:94:d2:71:e9:bd:db:3a:d2:03:27:60:a2:c6:dd:aa:56:
c9:61:ee:b5:86:13:3b:4e:5c:f7:d4:a4:bf:0b:e4:d4:75:c0:
a1:43:03:21:5b:13:bf:bd:5e:a0:51:57:8f:d9:76:f1:89:8d:
91:80:46:55:1b:71:b4:3c:2a:41:84:f6:5f:35:cf:c1:79:ea:
57:a4:7a:66:48:ef:2f:aa:d0:e8:b5:94:a1:f9:46:73:d0:02:
dc:c2:bb:d6:19:6b:2c:a7:fe:cd:50:9b:fd:81:3b:ab:34:7b:
82:d1:a7:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 11:46:24 2025 by rpki-client