Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4fb371af-0477-34e7-a094-b410346a396c.roa
File: 4fb371af-0477-34e7-a094-b410346a396c.roa (raw, json)
Hash identifier: cDctzv9jCxMtZI4KI6Q6dw+8RZ2M+4x2qQ2nVMxGGMg=
Subject key identifier: 28:46:26:68:32:B6:21:A7:3C:34:7B:76:74:BF:22:6B:6B:00:D7:9E
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C10CDCD19EB2F23E0B414C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4fb371af-0477-34e7-a094-b410346a396c.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33491
IP address blocks: 2603:2248::/34 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:10:cd:cd:19:eb:2f:23:e0:b4:14:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=4ee3a018-de0c-4c42-8551-401084e44daa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:22:11:9b:34:4a:45:b7:77:53:b7:0e:8b:97:
5a:8b:3f:e2:91:33:65:e9:d1:36:12:1f:b4:9e:2c:
69:23:7a:8e:ee:e1:8d:6e:36:c3:2c:f1:85:da:40:
41:4a:b2:03:67:04:ea:ed:47:c3:00:59:c8:17:69:
04:03:3a:ce:5a:93:54:2b:49:8d:d2:29:12:b2:b3:
3c:ca:ca:db:a5:f3:d5:ea:1c:5f:52:ba:75:42:90:
c7:bb:33:d1:df:80:2c:ed:12:34:4c:57:1b:53:1e:
62:d6:4c:0e:ec:b5:f7:4d:67:c1:c7:49:8c:87:48:
b7:bc:ad:96:13:e0:bf:fe:2a:31:69:ea:30:af:58:
bd:b4:27:46:fe:40:2d:17:ad:19:25:65:44:d4:ca:
37:9b:d5:8c:b9:ea:5b:33:fc:ae:3c:d2:f1:81:bd:
a3:fc:c1:9d:ae:25:29:94:63:44:f5:c5:17:de:dd:
b4:73:9f:dc:c8:d5:8f:5d:d2:cb:41:09:3a:f0:83:
bb:17:e5:10:71:70:7f:e8:67:67:63:11:74:c9:7a:
73:bf:3e:a2:24:f8:9a:b3:76:a7:8a:fc:f1:b4:c8:
36:e6:1f:10:35:f2:1c:90:5a:21:4a:13:a6:73:09:
1b:42:85:cc:57:fe:7f:cf:73:53:35:65:dc:39:05:
34:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:46:26:68:32:B6:21:A7:3C:34:7B:76:74:BF:22:6B:6B:00:D7:9E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4fb371af-0477-34e7-a094-b410346a396c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv6:
2603:2248::/34
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2b:83:87:8a:e3:0a:65:80:03:8e:91:fd:8a:6e:bb:c4:a0:eb:
0c:89:84:0c:02:32:ae:2e:77:79:2c:0d:c3:57:f3:ba:3a:01:
43:ff:e9:b4:00:ca:57:ff:d5:92:fe:32:10:5f:8d:3b:98:f4:
82:05:52:1c:b0:1a:0b:62:b3:59:ef:40:b5:db:9c:63:19:55:
dd:68:7c:ca:9a:dc:0b:98:4a:cf:ee:35:27:d4:bb:be:d8:1f:
bd:c8:68:60:39:f7:e7:72:a7:a3:23:55:22:c2:ce:9f:03:98:
28:ca:e3:e7:0b:dc:eb:55:8b:03:30:69:45:45:31:8f:1c:14:
50:36:4d:73:93:48:81:fe:1c:6e:18:90:35:7c:45:c8:53:5c:
54:63:1b:7b:b7:b6:ea:51:f5:24:c7:50:28:91:af:89:be:ac:
62:4f:f4:db:6c:e4:65:18:07:5f:94:d6:0d:9d:f2:21:e1:77:
01:92:6b:db:87:6b:b3:a7:dc:4d:4b:06:8f:ec:88:4a:bd:38:
ac:9d:e7:5c:c4:1d:93:42:39:45:e4:0a:c3:6b:fe:93:5a:dc:
bc:bf:1c:97:e9:3d:85:e5:8d:12:1a:1f:6c:27:1b:94:80:63:
1c:36:1d:03:ae:13:bf:a9:61:db:7d:4b:ab:84:eb:29:87:12:
23:df:79:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:52:27 2025 by rpki-client