Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/509422a4-60a5-3df7-b868-a08b29ddfbc7.roa
File: 509422a4-60a5-3df7-b868-a08b29ddfbc7.roa (raw, json)
Hash identifier: fagqpulQzAETjMmgjQRAPWEBAF++3BL/smFQvf1HZHE=
Subject key identifier: E9:7B:51:CC:D6:1D:F6:BD:D3:7D:8E:DC:4C:5A:13:45:7D:4D:DF:4B
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143B451E9CD653667C30F0C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/509422a4-60a5-3df7-b868-a08b29ddfbc7.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33668
IP address blocks: 2601:407:c000::/34 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3b:45:1e:9c:d6:53:66:7c:30:f0:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=013e121e-1cf8-4495-8622-631c7d7b9edc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:34:c7:9d:d7:75:68:6a:52:3c:47:dd:e2:1b:
c0:7b:0f:98:10:1a:e9:68:e0:41:20:0e:f7:03:ad:
ff:d6:23:4e:18:d2:c4:cd:1e:75:9a:cd:27:4b:e3:
61:3c:ad:51:5b:7a:4a:f5:74:a0:2c:b3:ad:17:0b:
77:ed:6c:50:f4:fe:68:07:ea:df:0f:ae:d5:d0:17:
23:9f:3b:39:5e:17:85:a2:c7:42:35:46:1b:2e:eb:
bf:70:c5:14:19:79:4a:13:70:bc:69:07:77:c7:39:
50:09:b8:80:b9:ca:13:47:09:33:37:b2:c3:69:47:
22:2c:85:02:89:82:a9:eb:3b:78:2b:34:57:22:b3:
90:1e:2d:87:af:92:3a:68:07:f7:55:a9:52:d0:5b:
3b:b9:ec:a3:3c:27:10:2e:a9:20:3a:52:a7:2b:56:
55:b0:74:04:40:da:2d:55:7b:c9:ca:01:b6:70:05:
23:db:a5:a7:45:f3:d0:b9:64:b9:ec:b1:b5:c2:12:
69:5e:51:03:3a:86:85:4e:4d:9a:9c:10:51:32:1f:
23:01:87:da:0a:fa:ba:df:b6:52:ac:f5:8c:1b:54:
14:98:77:66:73:3b:53:23:5c:f5:d0:ee:a8:1c:5a:
03:d4:00:b3:fd:25:2c:cd:87:fe:70:8a:8d:8d:bb:
f5:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:7B:51:CC:D6:1D:F6:BD:D3:7D:8E:DC:4C:5A:13:45:7D:4D:DF:4B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/509422a4-60a5-3df7-b868-a08b29ddfbc7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv6:
2601:407:c000::/34
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
49:71:ee:dd:3f:e4:72:bd:b1:16:2c:5a:3d:c2:8a:5a:84:b8:
76:4a:07:b4:1c:32:9a:4d:1d:60:2a:ae:dc:ad:cc:42:e0:f0:
d0:07:d6:2f:4a:88:60:86:69:ac:54:18:85:6b:db:a8:0b:1d:
f1:a6:b7:ac:14:30:03:96:eb:4a:27:ff:ad:e3:5e:af:d2:9b:
f6:71:6a:ce:b9:74:0e:5f:3e:f7:d4:99:e4:00:ba:06:51:6e:
fd:3b:36:7e:ee:41:97:45:1e:f7:3a:3a:d1:a9:9d:41:78:38:
97:a6:e9:6d:36:50:25:1f:1f:df:9f:cc:b0:9b:2d:6e:70:48:
43:cf:05:1b:d0:ce:95:4b:19:58:ee:f5:06:a1:06:e9:da:ce:
be:48:3d:22:6b:11:fa:3d:26:21:51:7b:af:b2:b2:7a:3e:27:
90:a2:e8:df:53:9e:ba:8e:d5:c3:90:f5:e3:3f:80:c9:db:2d:
9f:d4:61:58:cf:b2:74:b3:a7:d2:69:b0:f2:69:61:7c:6f:ba:
05:fc:1e:af:7c:db:0b:bb:1a:75:67:9d:47:95:c9:99:47:0d:
a9:f8:de:ed:b4:6c:0f:7f:4f:db:09:1f:09:a2:77:b0:62:1f:
21:b1:fe:20:f2:ea:bb:fd:bf:e6:fc:1d:d0:f3:78:66:a2:e4:
6d:09:ad:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:43:43 2025 by rpki-client