Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d9b1e1af-b43b-32c4-8bac-eb11930846fc.roa
File: d9b1e1af-b43b-32c4-8bac-eb11930846fc.roa (raw, json)
Hash identifier: oC3czw9ujL37LwtvZf5oUQNnYgB7Uf7FSmAyhG5bpiM=
Subject key identifier: EE:F0:DD:80:A8:C7:21:3A:71:CD:A5:6F:BD:7A:75:C6:E7:C1:76:74
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285849203C9038E1DCEFC539AFD960
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d9b1e1af-b43b-32c4-8bac-eb11930846fc.roa
Signing time: Sun 09 Mar 2025 02:00:39 +0000
ROA not before: Sun 09 Mar 2025 02:00:39 +0000
ROA not after: Sat 07 Jun 2025 01:00:39 +0000
asID: 7725
IP address blocks: 2603:20c6::/34 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:20:3c:90:38:e1:dc:ef:c5:39:af:d9:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 9 02:00:39 2025 GMT
Not After : Jun 7 01:00:39 2025 GMT
Subject: CN=848c9127-63e7-4e19-89f5-3201b0f9fdf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:7d:44:77:ee:56:d5:92:94:3c:a2:87:16:a4:
50:22:34:65:de:b5:54:63:cb:c5:a0:4b:e8:78:10:
bb:5c:2f:f3:53:39:6b:2d:02:1f:c5:ca:98:66:83:
ec:a9:ad:fc:6f:77:9e:76:7f:cb:50:cc:40:d9:a6:
70:cd:d0:cd:10:b8:c5:19:e7:70:6b:7a:da:c3:f3:
5c:6c:c2:2d:8b:46:b3:ce:c7:e5:56:d3:df:1b:5f:
df:09:c1:85:ea:84:1b:6d:da:0d:fa:f2:53:eb:6c:
13:1b:8c:e6:c7:81:60:00:c6:85:05:59:3d:c8:59:
f4:0a:f0:cc:69:70:e7:88:a1:54:a0:72:93:41:ea:
2b:22:67:03:ac:ac:99:70:ac:c7:eb:69:c4:28:d8:
69:11:cf:c3:54:64:c2:cf:ba:f0:56:cc:3a:c2:f1:
e4:fa:8c:6f:20:06:f3:a7:be:60:ea:70:29:41:1e:
73:d4:5f:ec:9c:0b:9b:d9:72:29:e2:6e:47:6d:6c:
11:9a:bb:40:58:c1:24:c6:a4:74:44:c3:d7:8a:51:
86:1a:58:70:f0:c5:bc:56:cd:db:ff:02:c3:2c:9f:
20:ea:a7:8b:07:bb:7f:6c:82:53:2f:e8:72:3f:e1:
07:6f:e5:86:9a:06:fa:62:93:5b:d4:c0:46:0e:c1:
d4:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:F0:DD:80:A8:C7:21:3A:71:CD:A5:6F:BD:7A:75:C6:E7:C1:76:74
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d9b1e1af-b43b-32c4-8bac-eb11930846fc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv6:
2603:20c6::/34
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0c:d4:1d:a8:a8:ca:ca:d2:38:c7:bb:23:75:45:fe:d8:ab:1c:
7e:9b:47:10:aa:e7:a2:ea:81:72:1c:71:22:df:44:39:9a:3c:
16:11:6c:a4:58:04:67:00:dc:b5:3f:41:58:12:18:58:2e:42:
03:c3:8e:f6:57:fa:b3:9a:37:7b:2f:d6:d3:1e:50:45:5e:59:
a7:35:68:fd:e0:40:8f:76:75:e4:22:55:62:39:b9:6b:93:94:
e7:3a:26:50:b5:6d:a2:f5:3c:fd:cc:26:1b:31:96:e2:6f:a0:
c2:5f:cf:f8:d9:4a:0c:08:b1:3d:a6:1b:24:5b:1b:a3:ee:08:
60:0d:1d:5a:da:7a:e9:50:11:6e:02:5f:2e:86:f0:3c:cf:db:
97:f8:ee:4f:8f:30:9f:d2:56:86:bf:a4:3c:13:27:71:bc:45:
38:96:41:57:f2:91:f8:31:60:a3:f2:88:24:6b:50:c0:eb:db:
9d:b4:55:71:95:ab:1a:5e:fb:45:93:81:64:24:0f:20:8c:95:
e0:99:6e:b6:3f:a0:4f:8a:55:6e:ee:2a:88:5f:62:3d:a6:98:
72:24:bc:15:20:35:b8:c2:e5:2f:3b:a1:2e:ef:25:db:22:3a:
3c:4d:c2:3d:2e:92:c3:b8:eb:7f:ff:0f:fb:c2:b0:af:7b:31:
41:bd:29:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:38:37 2025 by rpki-client