Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4d345719-e823-32d9-ad2c-e3b4c162f102.roa
File: 4d345719-e823-32d9-ad2c-e3b4c162f102.roa (raw, json)
Hash identifier: lNImX2MnL387vWkWymgDqNaa8K4iUMmAv8u/HmNTM9g=
Subject key identifier: 70:7F:B9:8E:E0:5C:52:C4:7F:C6:DE:BC:6F:38:7F:FE:DE:A8:49:D8
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143DB5E16D3C1ECFB19A26C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4d345719-e823-32d9-ad2c-e3b4c162f102.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 7015
IP address blocks: 2603:3005:400::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3d:b5:e1:6d:3c:1e:cf:b1:9a:26:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=2f54bace-9de4-422f-967b-81a6339f70f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:0e:72:4d:00:b2:cf:cd:e6:b4:21:5b:d1:06:
4e:ce:2b:16:0a:75:03:91:82:73:58:7d:2b:34:81:
57:f8:e3:03:d2:c1:30:32:99:8c:b9:7d:34:43:0e:
47:49:1c:6e:b7:88:15:03:04:eb:61:62:cd:19:53:
74:26:f6:67:f3:18:dd:8f:7c:35:bc:3b:88:4e:b1:
b3:49:7b:d3:6b:ac:84:24:30:ab:b3:90:19:61:7b:
33:de:46:75:80:7e:76:81:50:62:fa:dc:c7:d9:dd:
b0:8f:f0:77:45:18:d1:e8:97:82:48:aa:58:63:be:
d2:2a:9f:20:1a:65:a6:43:aa:a2:3b:bf:97:88:08:
90:44:fe:dc:60:53:28:41:84:03:d9:bb:67:48:f0:
6d:79:ae:a1:74:97:bd:4d:d7:74:de:33:3f:07:a0:
59:b2:d2:4f:a3:6f:a8:8b:68:01:a2:ba:26:28:8d:
20:1e:9c:52:8c:5c:57:15:48:07:31:39:c6:25:07:
54:5b:61:d7:c4:d6:d1:f7:da:21:af:ac:9c:ae:f4:
7c:08:b0:51:0d:c3:16:ba:8c:f7:f0:ac:d4:04:cb:
bf:47:c4:ab:cd:63:b9:55:b3:9c:4d:97:0e:b1:b2:
39:d9:b4:6b:49:68:bb:05:f4:b5:c0:74:f4:7a:65:
f3:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:7F:B9:8E:E0:5C:52:C4:7F:C6:DE:BC:6F:38:7F:FE:DE:A8:49:D8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4d345719-e823-32d9-ad2c-e3b4c162f102.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv6:
2603:3005:400::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
42:ed:43:fe:43:89:a3:f6:18:64:c2:a4:1d:e1:7c:09:e8:d0:
cf:c7:0a:47:a6:df:6e:56:c4:39:de:11:48:9f:9e:fb:43:9b:
d6:39:1c:b0:23:3b:74:78:5b:47:c4:43:a3:f5:0f:fe:34:cd:
f1:71:09:4d:27:1c:21:fb:0b:cf:56:2a:25:a7:eb:0f:2d:98:
61:cb:3c:10:e4:49:f7:9f:90:a7:1e:4c:e0:6a:a9:70:0c:a9:
d3:ac:7f:53:0d:2e:6b:95:40:51:47:27:2f:a4:5c:f7:3e:40:
9c:b0:d0:65:53:6e:ed:a3:3c:aa:16:6f:d1:0a:19:43:fe:c5:
3d:5c:ea:30:0c:5b:8d:9e:cd:97:78:bb:d6:61:d1:13:05:37:
68:86:f2:cc:a6:40:4b:fd:b0:56:2e:61:0b:05:23:44:d7:7f:
9c:34:ae:72:4c:99:24:51:ee:87:d0:85:75:36:27:87:4e:9b:
86:01:77:b1:a5:24:b0:fa:ca:80:3c:0e:3a:01:6b:fc:bc:16:
42:d6:57:30:1b:ca:81:f8:03:21:8d:87:9e:29:54:ac:17:fc:
58:88:66:13:f2:de:34:37:74:ec:f2:92:be:e7:17:78:24:37:
ac:42:14:01:a3:2d:e5:77:28:f8:1a:58:c6:34:94:b9:8c:28:
3f:72:29:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:59:28 2025 by rpki-client