Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cbfa4cdf-5ec7-30b7-ba1c-c33eb59aa5ab.roa
File: cbfa4cdf-5ec7-30b7-ba1c-c33eb59aa5ab.roa (raw, json)
Hash identifier: LBhaqWvOWuOwLljIvzYhHD+73y6BRsBCb3o5grgwLjc=
Subject key identifier: A2:0B:2C:EA:CF:99:85:FA:35:2B:73:DE:7B:3D:5F:B4:67:E4:1F:EF
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143AD8BEFAE1F1F2E4735540
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cbfa4cdf-5ec7-30b7-ba1c-c33eb59aa5ab.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 7015
IP address blocks: 2603:3005:2400::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3a:d8:be:fa:e1:f1:f2:e4:73:55:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=d085d76b-9e30-4b11-9bae-0430740ce1f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:a5:1c:2e:60:36:ca:2b:c2:49:95:0b:54:65:
3d:54:c2:f1:35:8f:5b:0f:b2:a3:96:b5:07:f0:b3:
e8:61:59:a6:eb:f1:ad:2d:05:29:19:f8:5d:7f:9f:
25:7c:5e:5c:2d:e4:df:93:fa:e7:1b:f5:09:9f:39:
63:a3:5a:fe:19:bc:87:01:6f:12:66:5d:f3:a7:54:
3b:64:8e:a6:84:0f:9b:a5:8f:72:e2:70:72:a0:a5:
54:8e:45:04:7f:c5:a2:3e:0f:87:05:8c:16:3a:f1:
2f:18:60:de:bc:07:b4:9d:84:97:ff:9c:7e:1c:ba:
34:cb:b1:d4:96:f5:30:c3:20:1a:a2:20:8e:93:9b:
46:62:ab:48:8a:01:34:44:1b:43:91:ff:51:6b:5a:
15:9a:72:6f:08:5c:59:fe:21:70:9f:a1:d5:fe:91:
ab:b2:6a:79:2a:74:74:ff:4a:55:a1:17:ba:fd:c1:
f2:0b:cf:f1:81:12:ef:90:2f:90:4e:ef:61:04:f9:
84:b1:c3:98:48:23:c7:0f:68:dc:72:6d:64:09:3b:
5f:9c:c4:eb:86:ba:e5:a6:13:96:bd:d2:63:25:73:
ec:34:10:98:4e:f2:5b:e2:22:15:1f:40:de:81:f7:
5e:69:a6:d7:1d:b2:7f:c7:50:78:b4:dd:47:33:03:
f7:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:0B:2C:EA:CF:99:85:FA:35:2B:73:DE:7B:3D:5F:B4:67:E4:1F:EF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cbfa4cdf-5ec7-30b7-ba1c-c33eb59aa5ab.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv6:
2603:3005:2400::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
95:66:a3:51:88:ec:ff:b0:12:1a:70:a6:80:be:b5:cb:82:41:
19:b7:97:20:77:99:55:84:d0:bf:a4:f3:c8:00:f4:81:06:1d:
2b:05:b1:f0:3d:83:43:ce:4b:c1:aa:50:9d:dd:cd:a5:93:90:
7c:bd:ca:b6:7d:62:36:2b:b3:29:95:ce:c3:17:90:d2:7d:4f:
31:8b:52:02:08:10:de:78:7d:f7:f4:2f:16:64:45:3f:11:a9:
0e:d8:ae:e1:7d:5c:89:1a:0d:58:31:d0:fb:62:cf:70:7c:3c:
f6:3e:86:0d:33:b3:dd:bb:c5:3c:4c:f9:8b:81:41:28:ca:0c:
de:ab:46:9d:35:46:1e:08:04:ca:6a:49:d7:57:e4:87:23:d6:
29:f7:d1:c1:03:a3:33:db:9f:1b:66:7f:ae:82:25:b2:d9:21:
40:58:76:ef:f6:ed:f2:49:46:cb:ca:15:15:33:37:54:16:92:
7b:3f:4f:5b:10:0e:c2:5e:2c:45:88:87:24:97:90:a7:09:97:
bc:db:2f:48:3e:a2:0e:16:5a:d5:cd:16:52:3f:95:55:2c:91:
65:f1:9e:29:b6:d8:ce:e3:ba:d5:5c:c1:f6:11:e8:a9:23:c3:
4b:d7:65:4f:fb:69:fd:46:37:23:4f:37:f2:8f:33:bd:cd:7a:
f7:ce:4e:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:28:44 2025 by rpki-client