Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/44a946db-4f2d-3b9a-b314-8c3cd1ca4b34.roa
File: 44a946db-4f2d-3b9a-b314-8c3cd1ca4b34.roa (raw, json)
Hash identifier: RYcXO6MoJyXviA4BVRhoSHN0tGVh+vbR3Z7aPveJ9bI=
Subject key identifier: 62:C6:2E:1B:EA:F3:C9:B1:29:10:9B:7E:D0:1A:B7:25:4B:8C:D8:BD
Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
Certificate serial: 010D0C9F43285848A9961A7B437DE518EE0DAA40
Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/44a946db-4f2d-3b9a-b314-8c3cd1ca4b34.roa
Signing time: Sat 25 Jan 2025 14:00:52 +0000
ROA not before: Sat 25 Jan 2025 14:00:52 +0000
ROA not after: Fri 25 Apr 2025 13:00:52 +0000
asID: 9009
IP address blocks: 2607:740:2e::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a9:96:1a:7b:43:7d:e5:18:ee:0d:aa:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
Validity
Not Before: Jan 25 14:00:52 2025 GMT
Not After : Apr 25 13:00:52 2025 GMT
Subject: CN=d511efd4-3015-4ce5-992d-e0649d683ffc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:5a:4d:89:58:6b:bc:7c:f1:08:11:18:f0:2e:
9b:89:05:09:41:d3:3a:c3:55:f5:96:56:e5:13:1d:
97:4d:bf:92:0c:64:22:87:99:0b:79:a6:51:c1:bb:
00:b7:0a:8b:75:71:c9:53:a0:15:7a:36:ae:e2:39:
9f:2a:a0:41:75:9c:4e:53:98:5e:ec:db:1a:9a:c0:
8d:9b:7e:b6:fb:0e:be:48:ae:6b:d6:12:00:d4:81:
b8:66:2a:60:a2:d8:25:66:64:67:8e:7e:37:76:2e:
6e:fd:c9:03:df:41:ba:6a:85:65:bc:be:45:7e:5f:
37:54:78:ae:15:e9:53:a3:ef:46:8f:71:86:9a:3c:
de:5e:12:ea:41:eb:fb:c0:e2:0d:ff:24:e6:9d:e1:
80:e6:25:26:f2:34:23:b5:f8:a5:e4:ee:d1:43:e3:
d3:17:22:87:f2:93:f7:0a:99:27:c4:9e:c7:b4:f7:
e7:75:aa:c2:10:83:4b:a3:b8:03:6d:02:01:04:b4:
67:16:01:3b:6f:4f:c6:88:6e:86:92:a5:d7:54:a6:
db:a9:29:b3:f8:35:af:eb:ea:ea:ee:5d:b0:70:43:
7d:f6:ff:ed:71:ab:d4:28:52:ea:d6:69:75:23:0e:
c5:d7:9b:cc:d6:4c:9b:66:7c:a9:af:bf:c6:08:d0:
5d:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:C6:2E:1B:EA:F3:C9:B1:29:10:9B:7E:D0:1A:B7:25:4B:8C:D8:BD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/44a946db-4f2d-3b9a-b314-8c3cd1ca4b34.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl
X509v3 Authority Key Identifier:
keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:740:2e::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
31:c2:9b:47:70:72:a4:d5:bf:86:53:75:28:5b:57:3b:37:22:
ea:34:d0:7c:1a:f9:90:c9:04:1b:a1:4f:93:85:be:9a:7c:a0:
32:aa:ee:c0:e4:36:f9:a9:46:99:e2:dd:e0:47:3e:fe:69:8c:
35:a3:ef:f1:5d:4e:11:1e:42:06:ef:80:90:26:dd:94:7a:e2:
a4:99:93:a1:68:1e:2f:05:73:d7:46:6d:0d:9e:c5:90:0d:db:
01:b2:b9:af:1d:89:91:14:af:ef:6d:2d:e4:31:2f:78:29:8a:
3b:0f:bd:b6:0a:e7:b6:d2:b4:6b:c9:ee:51:d7:9b:7b:a3:31:
2e:b6:fe:9a:a4:f6:32:61:f5:16:05:58:8e:6a:58:9b:09:29:
dc:24:06:a9:c8:0c:44:ff:42:ed:29:6a:f1:06:65:8d:e2:af:
8c:b3:49:2b:97:4d:07:e7:55:0d:cb:b0:6d:7b:c7:87:07:2b:
81:cd:a3:1f:58:05:bf:1d:85:86:f3:68:ae:c4:ae:53:9c:1a:
43:40:3b:fe:33:d2:92:79:64:44:2c:15:12:23:85:ef:6f:3c:
c8:53:39:9b:f0:0f:39:8d:1d:76:08:22:60:af:f0:d3:92:6a:
bb:5e:71:6d:cc:f9:a1:8c:86:7d:f9:fd:bf:fd:22:a2:a5:32:
e3:2f:d9:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 11:50:13 2025 by rpki-client