Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/d3660bdc-e74e-3ee0-9473-1af5c969d839.roa
File: d3660bdc-e74e-3ee0-9473-1af5c969d839.roa (raw, json)
Hash identifier: ezPeAJQ+qpp3RE6xpBf+3PNmFptkXzq5wSDQVONzJC0=
Subject key identifier: 9E:EE:0F:A5:2E:E4:A4:65:2F:81:A6:4E:69:5D:29:2D:FC:D6:7E:08
Certificate issuer: /CN=3efd7529-38b1-472c-9d5b-d87382d088a0
Certificate serial: 010D0C9F432858486C2B188FB2B05F3F55C0F280
Authority key identifier: 5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/d3660bdc-e74e-3ee0-9473-1af5c969d839.roa
Signing time: Fri 03 Jan 2025 14:00:51 +0000
ROA not before: Fri 03 Jan 2025 14:00:51 +0000
ROA not after: Thu 03 Apr 2025 13:00:51 +0000
asID: 394285
IP address blocks: 2606:a100:b000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6c:2b:18:8f:b2:b0:5f:3f:55:c0:f2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3efd7529-38b1-472c-9d5b-d87382d088a0
Validity
Not Before: Jan 3 14:00:51 2025 GMT
Not After : Apr 3 13:00:51 2025 GMT
Subject: CN=34de0545-022f-44f8-8317-3f48c38b2884
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:93:47:bc:60:bf:40:60:fe:68:f3:d4:a9:94:
e6:b4:64:57:30:c3:40:32:b5:ec:4c:ec:14:87:04:
17:77:8b:ff:77:0f:87:b2:f6:f3:e0:00:55:92:09:
5f:2f:86:44:7c:6d:c6:25:ff:e3:6c:65:ba:e3:8e:
19:f1:0b:40:3e:bb:0e:a8:e5:d3:e2:e4:89:34:b5:
78:62:7a:a4:24:10:92:5c:17:79:3b:50:42:48:c1:
49:93:38:6d:79:82:c3:33:38:6a:c5:4f:ce:60:d3:
7e:f6:77:17:c8:f1:74:6e:7e:ea:87:d4:d3:41:c9:
a8:8c:9e:37:3a:2b:db:40:14:d1:2b:82:51:86:b2:
da:30:67:2e:82:0d:0f:44:c6:0e:28:50:57:be:62:
2a:2c:aa:c1:ce:9d:26:5e:2a:35:e2:01:55:45:0b:
22:5f:6a:66:25:a5:a9:f5:f8:57:28:e0:2c:1a:5d:
ad:db:da:06:bd:9b:f4:f8:20:8c:39:eb:a8:76:1a:
59:5a:2d:56:55:95:9f:78:bd:ca:63:c2:36:e4:26:
d6:0a:a3:47:f4:f6:57:93:64:1b:bd:e5:15:7b:b1:
3b:f9:3d:57:49:ec:28:6b:8c:40:43:28:2d:f6:09:
47:0a:00:da:3b:dd:11:06:a2:57:a6:1c:f7:ef:0e:
97:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:EE:0F:A5:2E:E4:A4:65:2F:81:A6:4E:69:5D:29:2D:FC:D6:7E:08
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/d3660bdc-e74e-3ee0-9473-1af5c969d839.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl
X509v3 Authority Key Identifier:
keyid:5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer
sbgp-ipAddrBlock: critical
IPv6:
2606:a100:b000::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
97:c7:d2:fa:69:3c:1c:df:82:1d:f7:18:85:54:66:ed:fb:fc:
b4:a8:d7:d4:ff:f8:b4:20:49:68:5f:0f:9c:f2:f0:d0:a2:52:
7f:54:c8:c7:8b:d4:0f:e0:57:10:ea:df:76:05:a4:21:57:0c:
31:37:ef:e7:86:49:fd:cd:b9:68:bc:60:dd:1f:01:d0:e1:a7:
f1:3f:14:34:5c:78:f6:aa:70:b5:ed:b3:cf:97:19:99:fd:06:
3e:4b:4f:c9:25:f9:e2:e5:22:f2:e6:af:b4:8a:bf:b8:78:74:
c1:67:dd:00:c4:9b:31:cf:8a:1a:3c:0e:f8:31:9e:a0:06:3a:
56:83:63:af:e4:10:71:67:a5:5c:a6:6b:95:fa:38:f8:63:de:
22:91:73:f1:a5:5b:aa:60:b8:80:7b:7a:4a:00:a3:a5:b9:ed:
62:a6:2e:07:23:39:81:36:a6:3a:d6:8a:88:64:c9:f2:62:ff:
4c:16:af:f6:7a:9b:c5:52:b0:49:74:37:c6:46:8a:ac:19:20:
da:a8:43:6e:40:ce:a5:84:a0:1b:c5:93:e7:8b:ae:2b:45:e7:
40:59:d8:a8:85:58:6f:af:c3:7a:1c:fb:ff:a7:68:5f:9a:36:
b9:f6:26:7f:25:8b:cd:05:10:bf:b7:87:52:b6:22:6e:72:20:
e2:18:0d:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 16:14:24 2025 by rpki-client