Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4d6e7df0-d9d5-343f-82df-50f9349aa927.roa
File: 4d6e7df0-d9d5-343f-82df-50f9349aa927.roa (raw, json)
Hash identifier: Tlpzh7xU7AVRTFEBkdvWs99jAnjEbVbY/TGiBtTqNc4=
Subject key identifier: 81:9B:1A:44:AC:6B:48:C6:28:6A:4F:7A:7C:3A:B5:71:3E:3F:5B:DE
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C10CF513E633C1EB4B36340
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4d6e7df0-d9d5-343f-82df-50f9349aa927.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33491
IP address blocks: 2603:300a:300::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:10:cf:51:3e:63:3c:1e:b4:b3:63:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=0c41e92d-d401-49ff-8bd3-e66ae93718cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:b3:48:1d:37:65:87:9f:81:09:38:83:8d:21:
b4:d5:af:e0:30:40:4e:4d:9d:92:03:15:a8:90:d7:
54:58:56:a4:d1:dd:4a:9e:40:1f:7c:37:e6:04:e5:
27:dc:0c:fd:3c:20:2b:23:c8:d2:3a:6e:ad:dc:53:
c2:e1:01:14:d7:63:0e:f3:a2:9a:16:48:64:ca:14:
65:48:5c:90:b9:5f:72:9b:a1:7a:ae:cf:89:4d:5c:
39:27:b6:1a:2d:21:2f:21:82:dc:40:95:aa:e6:72:
ae:45:31:b8:a6:f2:8d:c2:3e:2a:55:e5:24:0b:76:
28:b8:c7:9c:e8:b2:6d:6c:d4:db:c7:a5:a3:18:6c:
cf:08:55:57:d9:7c:99:d5:e0:07:ec:d1:1f:f0:d8:
9d:56:84:91:ca:55:e5:52:83:97:2d:42:f3:72:fe:
c5:ce:cd:00:29:64:f3:70:e1:d3:5a:5a:10:34:b7:
e7:d6:46:ad:20:a3:60:7d:62:1e:b1:d5:36:5b:76:
fd:71:29:c8:cd:a8:af:58:97:aa:89:ac:66:2c:3f:
fc:70:64:9a:02:2d:fd:be:a7:f5:4f:a8:e7:b6:93:
bf:98:af:35:6f:aa:62:89:b7:4a:83:81:e7:0d:c6:
0f:d2:a0:1b:cb:e5:f5:d4:fe:1f:02:46:12:53:e8:
80:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:9B:1A:44:AC:6B:48:C6:28:6A:4F:7A:7C:3A:B5:71:3E:3F:5B:DE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4d6e7df0-d9d5-343f-82df-50f9349aa927.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv6:
2603:300a:300::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
15:d2:66:ab:87:14:3f:2a:d1:29:1e:df:e1:43:e2:8a:49:f2:
3d:29:79:75:4b:a6:7c:bd:ba:b0:2c:1a:ca:33:60:61:b4:7b:
61:67:05:0e:fa:1a:13:e9:43:fe:b6:a6:51:55:18:31:06:8d:
22:90:d1:c1:39:65:52:da:aa:3a:07:42:06:69:5c:21:7a:55:
0b:df:22:79:99:fc:06:db:50:78:b4:fe:e0:8d:df:30:48:1f:
90:43:dc:96:59:b7:5e:19:45:21:49:50:8d:d8:8b:fb:ae:18:
34:3b:8c:7f:5b:c0:62:1f:ec:70:99:2c:93:c5:3f:02:df:30:
45:c2:34:04:48:8f:90:0a:08:58:c2:fe:9b:46:bb:be:ef:be:
14:70:1c:f6:09:eb:e1:2f:31:f6:6b:71:09:5c:af:05:10:29:
c7:7a:e4:5e:ad:3b:2f:1b:f4:a3:24:9e:8e:37:a8:b8:4c:e3:
01:ce:c3:4b:29:40:1d:3b:82:51:97:8a:10:76:8d:ff:20:1c:
55:cc:ca:c8:ea:f3:f2:1d:25:f7:ef:b2:5f:ad:b4:fc:b1:d1:
af:a3:47:48:a0:c1:60:d7:9f:44:9a:af:af:25:94:73:8a:8d:
98:ad:fa:4d:ac:ea:01:bb:0a:7e:7c:57:45:84:ad:29:c4:0d:
18:9e:38:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:42:32 2025 by rpki-client