Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a1efd0d4-f845-32ab-842d-76c2b9ef1eeb.roa
File: a1efd0d4-f845-32ab-842d-76c2b9ef1eeb.roa (raw, json)
Hash identifier: QfqtBKQ53+9RJzywI7L/psQc79QZEdYGDc3rR58ydgU=
Subject key identifier: D0:C5:62:60:D5:FC:16:E4:E9:6D:DF:B6:44:AF:6F:40:B1:FF:28:4E
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848B1F64F77D8490769C6C93890
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a1efd0d4-f845-32ab-842d-76c2b9ef1eeb.roa
Signing time: Tue 28 Jan 2025 14:00:52 +0000
ROA not before: Tue 28 Jan 2025 14:00:52 +0000
ROA not after: Mon 28 Apr 2025 13:00:52 +0000
asID: 7922
IP address blocks: 2601:ac0::/26 maxlen: 26
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b1:f6:4f:77:d8:49:07:69:c6:c9:38:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 28 14:00:52 2025 GMT
Not After : Apr 28 13:00:52 2025 GMT
Subject: CN=1c00c87d-5bc4-4d73-bc1b-b80fdc86a471
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:d4:4d:43:ea:95:ab:52:e9:da:7b:e8:fc:32:
3a:9d:b2:ed:3e:00:e1:24:c2:43:7e:c4:c4:0c:eb:
ea:d5:cf:e5:7c:8f:5a:19:77:b2:2a:9e:b3:0c:f2:
a1:4e:03:25:34:1c:9d:34:e4:41:68:a1:90:b5:e6:
dc:08:ca:2a:62:a5:a3:46:da:02:49:15:11:4d:8c:
8b:cb:2d:8a:b7:95:06:46:78:fc:fb:37:be:31:6f:
3a:cf:eb:11:e7:0b:f1:61:f7:ec:65:b3:0e:cd:04:
ce:77:f6:01:41:2e:59:33:50:6d:7c:85:e5:f4:bc:
ad:cf:e4:f1:3b:e2:82:57:d2:73:5a:a6:4c:cd:26:
4d:71:d5:8c:7c:9b:48:fc:8d:65:77:d4:74:d5:53:
c1:98:71:6c:1f:9d:3f:eb:16:b1:fd:ec:1f:2a:87:
37:83:75:be:3b:b0:63:4c:b1:c5:4c:c5:49:a8:19:
76:53:46:ef:cd:16:fc:c3:f7:ea:c5:fe:c6:4c:24:
f9:eb:e4:29:e6:73:b2:f6:f4:e6:25:d0:1a:64:02:
f3:d0:d8:eb:47:f9:d5:2d:b2:b0:84:2e:f6:f3:00:
ac:a0:39:af:4b:84:a3:c0:1f:7c:0b:bb:fa:ba:42:
e9:a6:82:cf:8a:ad:26:60:d4:ab:54:7f:22:fc:9e:
9c:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:C5:62:60:D5:FC:16:E4:E9:6D:DF:B6:44:AF:6F:40:B1:FF:28:4E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a1efd0d4-f845-32ab-842d-76c2b9ef1eeb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv6:
2601:ac0::/26
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
cf:fa:10:51:3f:cf:dd:a2:b5:b0:09:81:73:60:39:c8:ab:25:
d2:ed:29:20:f0:ff:84:23:97:fb:1c:5f:3c:6e:6d:10:78:1c:
44:94:2e:3b:6b:5f:ec:57:21:17:3b:14:d9:93:6e:3d:ae:72:
67:cc:01:a6:33:64:a9:b3:3f:81:ad:b9:85:06:13:04:3e:2e:
7b:a8:fb:88:ba:53:52:e7:3f:51:0e:ee:a4:da:d1:77:93:d7:
98:71:a2:67:91:30:75:21:c3:ad:79:a5:a1:c1:96:67:d2:28:
6c:bc:0b:a9:71:5e:54:cf:e5:62:15:3b:36:c0:51:be:34:21:
e3:a2:91:ea:1f:d1:29:d4:dd:a4:e9:99:be:42:f6:a7:7b:9c:
8f:df:29:5d:fd:24:9f:98:5f:d9:d9:07:ed:83:d1:36:e5:0c:
cc:a0:77:a6:aa:ed:b8:91:ae:35:09:b2:fc:92:06:9b:cd:94:
15:b8:d6:84:b4:81:63:d6:d9:71:ff:15:c0:a5:85:6e:e6:44:
14:fd:23:ab:9b:24:5a:43:84:e1:14:92:da:21:20:68:6e:af:
8b:bf:da:b5:12:16:22:74:4f:7c:eb:ed:18:1b:a5:49:45:d0:
72:be:42:f8:a4:35:b7:00:0f:90:81:9c:e5:a5:e5:0b:34:df:
55:a9:8e:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:11:38 2025 by rpki-client