Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/570aaed1-e902-32d0-a727-8a9e52bc2e78.roa
File: 570aaed1-e902-32d0-a727-8a9e52bc2e78.roa (raw, json)
Hash identifier: cVHrbIdgmCedL85CxIeC3MR2L4SncJd7wYB1gR2KkAg=
Subject key identifier: DC:CE:D5:C4:FD:23:DF:18:63:FE:1F:86:81:42:8E:6B:D8:8E:F6:51
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858492CB0B4C8ACDAC18A30B53800
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/570aaed1-e902-32d0-a727-8a9e52bc2e78.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 33287
IP address blocks: 2603:301d:2200::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:b0:b4:c8:ac:da:c1:8a:30:b5:38:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=022dfff3-6fce-40ef-a8f6-66fcf082bc8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:29:41:82:28:bf:26:62:03:5e:c0:90:3e:ce:
73:0a:7c:42:68:a7:f9:3e:5b:87:42:82:18:a5:e4:
6a:42:c2:35:cc:4c:dd:82:7e:04:d2:ff:27:7e:aa:
c6:b0:72:dc:91:7f:8c:7a:4f:7a:17:09:84:2b:3f:
e7:ed:66:f0:90:b4:cf:e3:3b:e7:51:4c:60:58:9f:
1c:81:35:52:1c:bd:a7:e8:0c:2d:c6:06:8b:db:4f:
59:d2:e9:52:eb:dc:8c:83:36:fa:b4:4a:c3:13:ac:
81:2c:46:9a:45:df:ef:55:d9:c5:b3:ab:0f:92:d2:
bb:47:25:24:12:76:ff:b6:6b:cc:e8:05:dd:56:a3:
77:46:39:60:9d:a3:4e:6c:98:a5:96:1c:ea:9f:66:
02:38:ba:ce:a9:4e:bc:de:43:d0:18:a9:e7:51:b3:
85:d2:af:d4:c1:32:e4:ae:4c:c0:37:b1:51:f2:10:
63:cf:ff:bb:7b:33:26:19:f9:bc:5c:b0:43:cf:15:
66:4e:7e:15:c0:a5:49:c7:8b:f5:7f:ce:a3:15:c8:
50:09:1b:95:44:67:8a:5d:f7:72:05:c9:86:a3:ae:
39:4f:98:1d:3d:57:04:72:02:98:57:79:d7:3a:2d:
bd:07:cb:fa:29:43:c7:84:82:9d:6f:53:78:95:f6:
4d:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:CE:D5:C4:FD:23:DF:18:63:FE:1F:86:81:42:8E:6B:D8:8E:F6:51
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/570aaed1-e902-32d0-a727-8a9e52bc2e78.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv6:
2603:301d:2200::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1a:a5:da:8d:20:f2:e3:79:69:e9:71:9e:53:53:e8:c8:72:3e:
4d:62:26:cf:7f:c8:74:4d:dd:04:84:b2:3b:dc:5c:80:57:57:
81:20:ad:d5:8a:3d:68:57:b5:f2:8f:88:39:c5:6d:25:7d:d3:
94:d4:0a:a1:87:7f:35:c5:72:ba:d5:dc:cf:79:eb:22:75:2a:
39:21:dc:69:59:d7:18:85:da:fd:75:69:19:e2:0b:c6:4e:b2:
36:c6:ea:dd:ba:94:bb:b7:49:05:6b:7c:22:ff:f8:7a:8a:df:
9d:c3:65:92:4d:f1:54:28:0d:fc:1d:82:91:43:7a:4f:40:72:
ad:c5:a3:45:a8:c9:ae:ee:17:db:93:b0:cf:84:d5:25:c3:37:
e3:15:78:31:52:ea:8b:fe:75:36:52:a4:46:40:fb:62:4e:93:
e3:bd:15:4b:a8:d0:c9:8d:55:30:9f:cb:51:89:10:d4:32:bc:
2b:02:d1:77:6d:45:33:25:60:d4:d9:93:22:59:a0:a8:77:cf:
42:2a:37:40:0c:31:b7:cc:5f:55:5d:5c:27:f3:a5:21:ee:1b:
68:fd:05:a7:06:fe:bb:b1:c7:f3:ca:5b:72:2a:7f:b5:41:79:
8b:2d:ee:9c:36:63:59:63:a2:75:fb:6f:8a:a3:55:63:47:d7:
8e:20:b6:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 18:18:52 2025 by rpki-client