Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ab2e23e5-d4e4-343c-8a63-fa117c3b3326.roa
File: ab2e23e5-d4e4-343c-8a63-fa117c3b3326.roa (raw, json)
Hash identifier: 9BsiQZdt7kShJixIWK6MKsPJyR6opXdF6lZrnZ82ZWs=
Subject key identifier: EC:FE:84:12:D8:23:6A:A9:80:BC:1C:D8:73:E8:66:81:B2:94:A6:CC
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848116FCC47267907211CA99380
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ab2e23e5-d4e4-343c-8a63-fa117c3b3326.roa
Signing time: Mon 02 Dec 2024 02:00:40 +0000
ROA not before: Mon 02 Dec 2024 02:00:40 +0000
ROA not after: Sun 02 Mar 2025 02:00:40 +0000
asID: 7016
IP address blocks: 2603:3007:1a00::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:11:6f:cc:47:26:79:07:21:1c:a9:93:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 2 02:00:40 2024 GMT
Not After : Mar 2 02:00:40 2025 GMT
Subject: CN=263427a5-e10a-4d1b-9d2d-7131453714e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:64:a0:bf:e8:55:5c:ca:97:2e:70:f2:c1:17:
c7:ed:84:a6:f6:37:9c:7f:c2:81:c4:cc:b4:fc:8d:
63:8a:59:24:8e:a6:c6:df:f1:83:c8:a6:40:67:2a:
26:82:04:6f:f3:70:a8:7a:95:c2:be:97:78:07:04:
87:ce:d7:5f:e2:5f:ae:e8:84:11:c2:1f:4c:3d:80:
e2:1d:e5:82:24:37:f8:6d:df:38:0d:4d:a0:d5:02:
7a:99:c1:77:2b:5f:b9:83:51:20:04:9b:e2:f6:da:
ae:a9:3d:ab:00:9f:2d:8e:5b:55:37:4e:cb:2e:25:
b4:82:b3:ea:56:af:31:95:8a:17:d1:83:49:f1:63:
00:40:bb:15:12:1e:ba:0b:b8:64:c6:4b:f3:89:66:
c0:3c:9a:36:62:03:e0:63:44:44:16:2b:8f:12:59:
52:db:da:ba:67:a8:f2:d4:21:2a:0b:59:7c:b6:06:
76:66:1b:ba:8e:58:23:dc:7a:67:f9:86:9c:d2:90:
17:bc:bc:98:ea:a4:bb:f4:0f:ef:9b:56:a1:9d:2e:
83:da:97:4e:31:3c:64:f1:ab:53:4c:cd:d6:c0:0a:
03:52:d2:ed:78:84:38:64:90:e1:93:36:0e:d2:db:
9d:5e:31:87:20:af:eb:6b:45:e3:3b:ef:71:1f:bd:
9d:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:FE:84:12:D8:23:6A:A9:80:BC:1C:D8:73:E8:66:81:B2:94:A6:CC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ab2e23e5-d4e4-343c-8a63-fa117c3b3326.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv6:
2603:3007:1a00::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6d:ef:7c:cf:3d:52:76:14:f8:67:2a:b3:05:0b:6d:c1:da:5b:
3f:69:40:0b:66:c0:71:f9:3e:e0:4f:c3:a9:fa:d8:81:fc:00:
ec:33:6b:70:89:40:8b:db:b4:09:83:0d:08:ef:0f:de:7a:8a:
9a:45:d0:c4:d2:3d:ed:46:77:dc:57:b0:bf:2b:d4:56:1a:9e:
42:ab:b8:b9:8b:22:bb:ac:cc:e4:cb:51:8f:81:1f:c6:c2:c0:
49:3c:32:71:af:e9:35:37:dd:27:98:be:de:5f:0d:fc:d4:9a:
b7:2e:c8:c7:8e:55:09:a4:d6:9d:66:ae:d3:e4:b2:4a:3c:08:
97:cd:ba:61:97:bb:9e:0c:e8:13:3a:6a:15:23:0c:ab:70:37:
0b:22:0f:76:d0:0f:c1:e4:91:43:f0:c7:6c:b6:f6:9d:e6:e0:
ab:d4:21:3c:f3:89:32:d0:02:b7:fe:e5:76:4a:aa:f5:47:42:
d4:af:21:20:5c:0f:2f:43:4b:11:b1:fb:e1:f5:f0:08:42:5c:
aa:9e:f9:d2:4c:1f:c0:a7:3b:6d:b0:02:97:a9:42:95:7d:3e:
b7:52:3f:ab:f7:12:54:a0:cd:c8:6e:e4:33:23:2c:26:90:b9:
a8:39:36:b8:fe:7e:14:80:6a:30:db:f7:59:8e:18:fd:1c:b2:
8c:f0:30:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:33:02 2025 by rpki-client