Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/be35be49-c928-3787-b0ab-e6f4f232a893.roa
File: be35be49-c928-3787-b0ab-e6f4f232a893.roa (raw, json)
Hash identifier: 0ZSz7V3BeOTYOv2tQk2/kOCLvU17ltvwXddxY9yRUZs=
Subject key identifier: AE:BC:51:8C:AF:D7:63:BE:00:50:39:70:E9:A8:BC:4F:A0:F3:1D:D1
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C108F97D2657F4FC15CF680
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/be35be49-c928-3787-b0ab-e6f4f232a893.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33659
IP address blocks: 2601:8a:c000::/34 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:10:8f:97:d2:65:7f:4f:c1:5c:f6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=e09f344b-d9c2-4037-b099-57b177da2c97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:0a:7f:81:22:79:9a:56:cc:b5:e5:1f:05:42:
8a:2b:62:bd:40:8e:5b:53:7a:a9:bb:ca:ee:4b:2a:
7b:62:5d:7c:e0:24:b7:2f:cd:cc:76:91:ba:bb:62:
8a:dc:e6:f7:1b:13:6f:7f:af:e5:75:e9:f0:b7:d8:
31:4b:9b:7c:30:a0:d8:8a:e2:ce:e3:11:5d:10:b7:
c3:68:4b:b5:e0:ee:a1:d9:9c:04:a7:c3:6d:2b:b3:
0e:49:02:ec:23:4c:07:72:de:b1:92:6e:55:a7:e9:
84:6a:1a:c7:64:d9:59:58:2d:21:d2:21:08:1f:12:
47:17:ef:1c:27:72:35:39:f1:4f:5a:a2:09:6c:c5:
54:c4:8b:32:4e:f4:3f:33:47:5f:48:21:7f:0a:9e:
19:74:22:e5:84:c0:71:cc:c5:2e:46:81:1f:ed:86:
e8:55:55:c8:9d:67:35:d4:f6:02:20:a4:06:1f:95:
f4:e9:97:db:25:32:4f:18:93:13:b3:3b:6e:f5:5b:
ce:61:b2:bc:b6:8b:16:b9:c4:3e:45:ae:89:67:07:
25:71:0d:83:55:9a:07:93:99:22:c7:ef:6d:57:48:
88:50:55:ac:ea:9d:7a:47:8f:51:38:2c:e6:c8:1d:
e1:1d:ee:28:bb:30:f7:92:e3:a0:6a:83:0f:58:fd:
03:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:BC:51:8C:AF:D7:63:BE:00:50:39:70:E9:A8:BC:4F:A0:F3:1D:D1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/be35be49-c928-3787-b0ab-e6f4f232a893.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv6:
2601:8a:c000::/34
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a2:0b:0f:ba:eb:23:d2:b2:05:20:c6:d3:d8:e9:76:db:73:72:
5a:60:73:bd:17:35:ec:0c:f1:1a:59:27:d9:29:56:76:0e:51:
f1:77:0a:8a:88:44:c8:68:f3:df:97:2a:65:d8:9e:b2:4a:76:
fb:14:64:8c:48:27:e7:1c:1b:f9:27:fb:8d:94:8f:70:87:3b:
7c:a1:b9:32:ea:56:73:ae:5b:c3:61:78:f1:1f:e5:a5:76:98:
5e:ed:1c:a7:97:e5:f1:d5:c5:01:3a:2b:0a:73:55:5f:33:f4:
3b:33:ba:ad:ee:5e:d8:94:25:2c:68:1e:bd:0b:b5:d8:69:f9:
29:8c:54:9c:16:8b:22:e0:84:e6:2c:90:13:93:4a:5a:b0:19:
d9:6c:6a:69:87:89:a7:ff:f0:8f:22:19:c6:9b:c9:46:51:0d:
ba:44:b2:91:54:9d:cd:cb:4d:48:92:a2:1c:4a:45:51:93:6c:
73:48:99:41:4b:85:2a:96:42:46:ba:2b:46:2a:8f:35:40:a7:
37:7e:39:2a:5c:88:d6:48:2d:2f:d2:87:2e:4f:f3:8c:6d:df:
c0:18:b1:8e:97:80:8e:b7:5f:97:73:3d:5f:f1:b7:76:ba:43:
9a:54:1b:d6:51:e2:c2:df:d8:fd:17:18:da:45:ba:38:54:21:
67:ab:69:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 10:19:56 2025 by rpki-client