Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0fafcf7c-b78d-3bde-944c-6fe6daf1e89a.roa
File: 0fafcf7c-b78d-3bde-944c-6fe6daf1e89a.roa (raw, json)
Hash identifier: rFK9se6+CLji3Tdx4TMMaeBTz/DH5IfbtApZ3DIT9wo=
Subject key identifier: D3:A9:37:18:0F:1B:45:AF:09:5E:E0:9C:D6:9E:78:33:BE:37:CC:7B
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848F4F86314481A0948454A1B40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0fafcf7c-b78d-3bde-944c-6fe6daf1e89a.roa
Signing time: Fri 21 Feb 2025 14:00:50 +0000
ROA not before: Fri 21 Feb 2025 14:00:50 +0000
ROA not after: Thu 22 May 2025 13:00:50 +0000
asID: 7015
IP address blocks: 2603:3005:6b00::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f4:f8:63:14:48:1a:09:48:45:4a:1b:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Feb 21 14:00:50 2025 GMT
Not After : May 22 13:00:50 2025 GMT
Subject: CN=2cf61cec-1e64-49dc-861b-ce86da93e147
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:29:ae:0c:6e:e0:44:14:9d:2d:8e:a2:f4:ed:
10:3c:e2:3b:b5:6c:46:fd:3d:2e:71:45:bb:b0:a2:
66:28:40:10:75:c0:df:04:87:88:36:59:b7:a7:73:
f3:a5:54:44:2b:12:28:b2:7b:73:00:bd:72:dd:f8:
00:81:eb:44:a8:19:54:b2:c4:fe:58:51:8d:83:63:
d5:37:15:18:20:3a:25:18:27:b8:f3:f4:bf:7d:bd:
00:ec:4d:7d:11:8d:48:90:c9:09:28:45:76:fe:49:
68:30:71:c1:f2:50:3a:57:93:57:3c:0c:d5:ab:8a:
7d:9c:67:fe:18:4a:d2:c9:6c:59:c8:d8:11:8d:c8:
76:07:6b:10:43:3c:1d:27:80:6e:7d:77:2d:42:43:
73:78:88:b8:c0:ed:4b:75:51:8a:bd:94:39:56:0f:
8e:d4:24:a3:51:6f:b8:88:07:a6:77:ec:95:56:9e:
22:a6:66:54:f2:f2:db:0a:fa:a4:95:bc:f4:c1:6a:
ee:2c:4e:8b:3f:19:0b:66:4e:84:6f:d1:b0:45:d9:
66:15:dd:25:cc:83:18:81:9c:a7:c4:58:08:1f:6d:
8e:23:a0:0f:2a:eb:8d:2c:ad:a7:05:ad:00:ba:2d:
de:0e:aa:b9:7c:d1:a4:bf:19:dd:0c:a9:e6:42:f7:
8a:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:A9:37:18:0F:1B:45:AF:09:5E:E0:9C:D6:9E:78:33:BE:37:CC:7B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0fafcf7c-b78d-3bde-944c-6fe6daf1e89a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv6:
2603:3005:6b00::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
69:bd:66:40:ed:e6:d5:da:6c:77:c6:b6:61:7f:17:c0:56:36:
7c:52:da:47:ce:15:cf:65:78:94:b6:e5:b6:72:48:f5:da:0c:
bf:dd:55:3c:41:5b:36:fc:57:7e:c1:40:7c:1b:34:f2:5c:6f:
20:86:82:15:d5:80:e1:fa:49:01:5f:43:2d:eb:6c:46:16:23:
d3:84:14:44:26:5c:0a:e1:15:1a:43:05:a9:0f:a4:e4:b6:1c:
62:c5:cd:d0:12:ad:cc:fd:9b:81:74:4b:f8:9f:c3:a6:3d:d2:
fe:9a:67:bb:ca:d4:0e:16:d1:82:c7:dd:46:c4:3b:31:77:3f:
a3:7c:14:d6:2a:f6:93:90:60:24:a3:f5:94:88:c1:2a:53:40:
db:44:66:15:59:82:24:f2:d1:6f:d8:20:00:26:c9:eb:e6:fe:
39:a2:01:dd:e3:60:dd:e0:e2:19:36:b7:34:aa:58:3d:af:e4:
54:90:da:93:ac:99:4f:ba:e5:9a:86:3d:35:82:b2:c0:5b:8f:
2d:f0:09:65:3f:32:f2:80:43:88:f3:2d:bd:16:cb:2d:0e:8e:
ad:80:d6:fa:33:95:f1:fa:78:90:16:f7:be:f3:9a:11:49:e7:
f2:c9:e3:d7:a8:69:3c:c5:a3:00:4d:01:41:ab:58:2c:ad:7a:
66:e7:b9:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:24:26 2025 by rpki-client