Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/35d64afc-4f17-3e1e-9d74-d5cfee01a57b.roa
File: 35d64afc-4f17-3e1e-9d74-d5cfee01a57b.roa (raw, json)
Hash identifier: i5BIXLK9foHyP/Jtkqp/opEup1WXkYtivEYteHCT8Ek=
Subject key identifier: 19:1A:52:72:45:DD:CD:C1:40:EE:56:AF:7D:78:0E:20:05:E6:E1:4D
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858492CB0B407A8A6555A3D39EA40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/35d64afc-4f17-3e1e-9d74-d5cfee01a57b.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 33287
IP address blocks: 2603:2047::/34 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:b0:b4:07:a8:a6:55:5a:3d:39:ea:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=7f0f6bc6-bd86-458d-955d-ee541c0d252a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ad:26:9b:1d:b2:9b:f3:de:77:c1:c5:00:e7:
eb:f9:d9:6c:c4:97:ca:00:af:34:3c:aa:ff:bc:73:
04:85:b0:f6:68:cb:58:60:a6:f7:30:e3:e2:00:3c:
be:27:9a:47:a0:28:76:23:c3:dd:31:39:7a:08:f9:
0f:34:86:55:ca:74:bd:06:f9:12:9f:e2:cb:76:53:
49:74:4c:98:27:18:a4:a3:2f:44:c6:f3:bf:97:42:
3d:72:7f:3c:9b:e0:de:93:6a:38:c7:a0:49:7e:a3:
ae:cc:7b:8a:17:b0:d6:89:f9:8d:d7:93:e1:ad:a0:
ea:74:ee:06:5b:1d:f2:62:95:0b:bd:4e:87:58:a0:
6c:2a:5a:c6:dd:6e:c2:ba:07:fe:92:a8:c9:fb:89:
f6:01:ab:34:ad:a8:7b:87:2b:1e:cc:57:16:16:63:
44:19:f7:16:23:96:1a:5e:4c:0f:da:f5:13:f2:b6:
31:81:7d:56:31:31:b6:8a:f1:36:03:64:d8:67:d8:
f3:4f:df:52:16:03:0e:45:d3:ae:e7:45:f3:e5:ed:
be:66:30:f2:9b:40:d0:fe:11:6f:17:14:38:2e:b7:
13:d6:57:43:4a:1a:ed:9e:f5:1d:42:4d:cc:4a:0e:
56:f9:0c:09:4b:ce:96:d0:5f:e3:aa:4b:4f:dc:50:
a7:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:1A:52:72:45:DD:CD:C1:40:EE:56:AF:7D:78:0E:20:05:E6:E1:4D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/35d64afc-4f17-3e1e-9d74-d5cfee01a57b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv6:
2603:2047::/34
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
63:46:37:6f:da:1e:99:1f:fc:3c:5b:24:90:69:c4:05:cc:ff:
0d:53:0b:0e:be:5f:b7:2e:b2:7a:15:9a:a5:4c:bb:6d:34:35:
bb:e9:dc:92:8b:b9:05:08:58:db:19:4e:e9:7b:50:fd:e6:aa:
00:81:84:79:cc:28:c3:f6:9c:57:68:3e:6e:8e:81:7b:ed:5e:
0f:60:c9:40:51:8f:d5:68:a3:3f:53:bc:86:36:4c:85:09:67:
c8:4a:57:25:bb:c1:b9:83:0a:06:87:99:99:cc:a4:23:1f:1d:
f8:ee:63:b3:79:75:25:09:0e:dc:89:87:7c:a9:ce:4b:3e:d7:
e5:b2:a0:72:69:7a:e0:3c:36:dd:47:84:ff:ec:3e:f6:68:23:
21:15:ae:f8:2b:da:69:60:11:2e:6c:62:0e:26:d0:74:9d:73:
1c:97:ef:7b:96:8c:09:e6:b6:42:b7:c9:fd:d3:2b:dd:72:03:
db:0e:65:d4:8d:d8:b8:8b:b3:41:27:e5:d7:78:ce:bb:5f:3f:
9a:33:a3:ad:fd:ba:4a:f5:aa:10:fa:1f:3e:6d:33:76:2c:d8:
33:83:24:7e:4d:84:83:08:e1:25:65:c2:39:b2:ce:88:8a:3c:
89:d7:63:03:c3:72:cc:87:87:44:84:96:e7:b0:43:ba:66:31:
74:76:f4:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 20:14:24 2025 by rpki-client