Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8d66ae3f-c55e-3373-8f3e-13adf1bac592.roa
File: 8d66ae3f-c55e-3373-8f3e-13adf1bac592.roa (raw, json)
Hash identifier: 3db1sW9PRNhUmt4Y8EztJr2mZSzV+s+RZwdaj7F8/gY=
Subject key identifier: 51:96:2C:2A:CF:46:C1:25:DF:4B:47:32:35:15:37:74:BD:FD:20:77
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C10CC9E16106D1679046580
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8d66ae3f-c55e-3373-8f3e-13adf1bac592.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33491
IP address blocks: 2601:802::/34 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:10:cc:9e:16:10:6d:16:79:04:65:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=f3edf36a-73f5-4dbf-906c-3167b5fa4e3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a8:8c:3a:af:a5:65:54:4f:4e:b0:1e:42:6c:
65:ab:bf:5b:f6:5c:eb:41:f5:93:df:88:8f:13:f5:
b3:0d:36:f5:1f:44:dc:91:72:c7:23:07:37:d7:a0:
d3:b7:44:cb:78:a9:4e:83:2c:f7:b1:5b:9a:d0:ca:
3a:e3:2b:a7:d9:f2:3b:bf:4d:48:ee:25:a7:94:97:
8b:a8:2e:bf:fd:50:77:0c:02:4e:cc:1e:95:32:5e:
11:e0:c3:4f:88:27:b9:cf:c8:5d:36:5f:cf:09:9a:
33:cd:15:d9:a0:a3:7e:3a:be:60:0a:17:55:7f:6f:
13:21:47:eb:5a:a8:4a:77:cb:83:fb:bb:ae:f8:82:
a8:32:67:27:57:fc:e4:6c:91:ae:7d:c0:6e:84:20:
62:e0:97:bc:68:d2:64:58:46:dd:61:5c:db:69:ae:
47:87:10:68:b8:50:06:a5:31:60:de:e4:8a:a2:97:
68:2a:1a:42:ff:f3:a0:0d:de:d2:30:45:0d:f3:68:
14:a7:ed:00:9a:71:2d:2d:7d:1d:8a:0b:76:0a:93:
82:cb:f2:01:ea:24:4c:03:44:b8:d2:ed:6e:8b:0a:
cd:01:51:36:e1:6d:38:59:36:85:f6:38:a9:e2:2d:
31:4e:81:98:25:ac:0e:04:f8:2b:7a:c5:ac:ff:30:
c7:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:96:2C:2A:CF:46:C1:25:DF:4B:47:32:35:15:37:74:BD:FD:20:77
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8d66ae3f-c55e-3373-8f3e-13adf1bac592.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv6:
2601:802::/34
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
de:4f:3c:07:f3:1d:f5:0a:c9:7e:aa:1a:ae:dd:b4:f3:34:af:
24:49:43:af:a7:18:ab:cd:42:a9:ab:ae:2d:60:35:86:f8:02:
d4:f9:20:03:44:30:bf:66:06:65:4a:8f:cf:11:94:12:dc:50:
5d:3c:2e:83:7b:b0:e8:28:c2:e1:35:e6:51:79:36:a2:58:85:
b5:b8:33:93:6b:b2:b4:97:5c:98:ff:4a:0c:ea:6f:4f:65:48:
c5:0f:d0:3a:21:34:e0:61:89:6b:76:38:e5:fd:fb:03:35:bd:
94:89:9b:28:7f:2c:f4:38:4b:89:49:58:ee:6b:75:f2:46:1e:
64:0e:96:57:9b:f7:bc:d9:43:8f:7c:04:ec:4f:46:e5:8a:67:
58:c2:f8:ca:bd:27:46:74:bb:58:01:c7:62:50:10:fa:79:b0:
c2:e3:71:74:46:ae:17:af:ec:e8:5c:f9:21:be:eb:32:22:f0:
b4:c2:22:04:02:b6:0b:21:a1:7b:71:0b:21:49:a5:97:a9:d8:
49:54:dd:42:7b:d6:9e:06:91:bd:dc:5b:2d:bb:a0:52:b6:be:
60:64:f1:71:2b:6d:c0:18:56:b0:a3:0d:0d:cb:19:03:fc:a1:
53:0e:f1:48:d7:c1:cf:4f:ea:c2:e7:f9:93:67:c0:69:b6:be:
2c:ca:2c:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:38:04 2025 by rpki-client