Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8788639d-3c9e-33ff-babe-191b5d6860dc.roa
File: 8788639d-3c9e-33ff-babe-191b5d6860dc.roa (raw, json)
Hash identifier: lGB9Yf29WMNIS4aTghgXCIql72e2XaFMgc6bQjuXOZQ=
Subject key identifier: 82:EB:B4:A1:10:7B:7D:43:B3:DC:A5:3D:C1:F5:19:63:7D:47:76:CB
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C10BEAAB9CD4EE00956E880
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8788639d-3c9e-33ff-babe-191b5d6860dc.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33287
IP address blocks: 2603:301d:1900::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:10:be:aa:b9:cd:4e:e0:09:56:e8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=a5baefb9-b00a-4ff6-9818-9940db2949b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:05:b6:ce:9f:35:31:2e:17:9b:5e:c0:9d:8c:
ce:4d:82:e6:a0:c3:4d:1b:67:4e:c0:0c:81:bd:79:
56:86:5e:88:eb:8d:ff:b6:35:f5:c1:de:14:66:40:
8a:93:c1:40:32:f4:c8:86:5f:17:46:f3:7d:76:41:
c8:03:cd:a8:09:4a:9b:94:fe:dc:94:ad:2a:da:2b:
e7:c7:45:ac:f7:eb:58:70:e9:c4:50:06:aa:c5:97:
49:62:00:b4:b0:e3:49:3a:d4:e5:43:94:2c:30:3d:
7d:ca:f8:07:7d:40:3a:49:2e:d1:8c:bc:8d:25:0d:
31:8b:ab:62:fb:0f:1c:0a:e9:89:6b:96:e0:f7:58:
fe:3a:5f:a0:d4:c6:24:5b:18:41:78:1a:c9:59:11:
ba:12:c7:ae:f5:3c:19:65:fc:93:9e:6d:1b:03:2b:
f0:d7:22:12:be:90:0e:1c:45:8b:5a:ac:2a:37:37:
60:78:63:77:ee:74:75:09:9f:90:5c:49:8f:5e:67:
39:3f:f3:92:0a:7a:64:7e:fb:27:fb:d7:16:f5:b2:
1b:59:0b:7c:f9:11:91:3d:3e:2d:45:1b:a0:99:68:
fe:f7:ab:32:d1:2d:3c:59:e0:09:bc:c5:07:00:c0:
45:76:ac:1c:98:20:f9:ac:36:54:03:25:d1:75:e9:
03:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:EB:B4:A1:10:7B:7D:43:B3:DC:A5:3D:C1:F5:19:63:7D:47:76:CB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8788639d-3c9e-33ff-babe-191b5d6860dc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv6:
2603:301d:1900::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5c:fe:3c:aa:62:f0:5e:9d:97:ea:16:6d:5a:0f:f7:1a:cd:3f:
81:ee:09:64:4d:8e:c7:e3:2b:6c:64:7f:b9:54:d8:d4:2b:53:
ec:40:b4:da:ba:ed:38:b3:39:0b:ff:88:cc:b8:78:55:aa:7a:
e9:55:21:70:a7:d2:54:06:57:6c:c9:59:35:22:b6:88:c0:db:
a4:d1:72:db:99:9b:4b:b2:8d:26:79:de:82:5d:d7:22:20:2a:
10:fc:8c:c8:e0:cf:f0:c0:7e:e1:1f:85:8a:07:fb:4f:2e:94:
50:c5:90:dc:1b:ae:6c:4b:28:4f:81:4c:23:3d:71:33:22:13:
83:60:90:67:0d:c7:fa:c2:b8:40:eb:8e:cc:2b:34:26:72:40:
bd:2c:cb:95:19:9e:c6:e1:62:9e:c4:19:16:d0:a0:b9:44:e2:
31:49:d7:46:1b:32:b8:ba:0c:7e:8f:ab:43:14:c7:d0:f7:e0:
f1:14:c8:da:bf:74:29:96:5b:32:34:63:07:63:60:fe:dc:59:
2a:b0:bf:53:c1:05:b4:ee:39:7a:7e:0a:68:af:aa:26:c7:7f:
ea:e5:b6:41:c7:8f:dc:1a:b5:5a:8b:0c:4f:1f:b6:be:e2:eb:
d9:2f:38:91:cb:d2:04:f8:d3:fe:86:57:cc:c2:f8:79:13:53:
12:06:5c:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 13:12:12 2025 by rpki-client