Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/24a81b68-ef8f-3567-bacd-1e75c6b51fc7.roa
File: 24a81b68-ef8f-3567-bacd-1e75c6b51fc7.roa (raw, json)
Hash identifier: 47RVMZev7b98PsKkVXmWCykQC1rNnF+9BxXErvO8fwo=
Subject key identifier: 71:73:6B:4D:8C:98:3A:5C:3F:CD:F0:39:34:D9:69:4B:3F:2E:67:6B
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858492CAF265E7F6360CC50340A80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/24a81b68-ef8f-3567-bacd-1e75c6b51fc7.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 33287
IP address blocks: 2601:46::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:af:26:5e:7f:63:60:cc:50:34:0a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=fa6d4f9f-301e-4148-9528-d6d9abf753c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:8a:0f:3c:4c:39:df:7d:19:fd:e0:6b:98:be:
05:22:62:e7:7c:25:8e:71:cb:b4:a8:5c:03:4d:6d:
a2:93:ab:0f:30:ec:d9:ce:08:53:30:ae:a5:7a:96:
ee:c9:6a:04:49:8c:d5:26:20:46:b6:c3:68:9d:15:
5d:52:4d:4e:34:ad:8b:25:f4:7f:32:d4:7a:e7:5f:
96:ea:bc:1c:0b:e4:b3:8b:5b:20:b4:7a:45:43:f2:
14:e9:8b:03:88:4a:44:31:dc:e3:d3:9c:2c:49:42:
7d:4e:71:26:0d:cf:06:a5:9c:99:18:94:d9:3d:07:
76:e4:76:bc:ec:c5:2d:b9:8d:d3:05:ef:d9:95:ae:
c7:72:5a:61:8d:35:98:9d:d5:3e:52:8e:53:1e:96:
d7:7f:bf:d3:7d:0c:1d:28:11:a1:82:b3:18:ca:92:
0e:70:90:2e:1f:d6:88:9a:7c:a5:b7:9c:c5:96:7b:
58:7f:20:16:c2:94:a5:d6:85:e7:c0:52:04:1d:a7:
0c:32:28:29:89:2e:41:12:63:1b:19:ac:70:9c:2b:
24:64:31:0d:ab:96:e2:e6:cb:f2:64:40:09:33:cc:
fa:b9:d7:28:66:ae:0d:88:15:5b:45:f4:e5:30:99:
e2:28:ab:3d:0f:23:9a:d2:59:9f:8b:c8:44:19:98:
cf:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:73:6B:4D:8C:98:3A:5C:3F:CD:F0:39:34:D9:69:4B:3F:2E:67:6B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/24a81b68-ef8f-3567-bacd-1e75c6b51fc7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv6:
2601:46::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ad:2d:6d:21:f0:b8:25:78:6f:a9:35:8f:21:a7:3e:9b:ae:01:
cd:3c:e1:40:37:29:05:29:f0:8f:8d:b3:c8:a3:bb:3e:46:0d:
63:1d:22:8d:b6:87:82:2b:64:06:43:73:6d:d6:6b:cc:ec:b5:
be:c2:95:4c:1f:86:74:40:67:87:71:94:2c:e3:f4:e3:76:60:
b0:a1:63:da:4f:47:5e:94:c4:87:7c:c5:b1:f8:7e:19:93:68:
4a:4b:98:63:19:5d:68:0f:6f:74:a9:22:6b:ad:52:38:ca:12:
31:54:58:53:99:ff:a0:09:6f:f1:da:36:07:14:c6:4b:ad:e8:
b6:08:90:eb:ec:89:24:bc:42:e6:7a:2d:50:72:fb:6f:79:a8:
d3:82:b9:84:94:67:64:a4:f4:47:4d:aa:92:41:86:bc:ca:3d:
ad:fb:ed:c9:84:cf:2e:1d:0e:48:77:8a:b4:13:18:99:5f:e6:
5c:1e:88:40:7a:74:ba:8e:d4:8f:e5:78:15:fb:5d:47:5b:1c:
fa:e6:30:e3:a5:19:3b:6f:71:8f:13:a8:cc:5b:5e:8a:bd:2a:
d3:31:f1:e8:32:12:09:14:48:72:9b:75:39:3d:d7:fa:fb:d8:
c5:be:35:5d:f0:55:ae:2c:89:db:e1:a7:6d:7b:2f:73:ab:24:
19:7f:e4:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:10:44 2025 by rpki-client