Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/47bf5d33-51dd-3c34-a11c-252123b2256a.roa
File: 47bf5d33-51dd-3c34-a11c-252123b2256a.roa (raw, json)
Hash identifier: EymVMNkoxuv0mRMl3LItkAwbCKpbrqk+xuu7pjz2tkc=
Subject key identifier: 7F:5D:51:0A:02:87:D5:5B:D9:48:F7:D2:43:A6:4F:DD:6C:1B:13:68
Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
Certificate serial: 010D0C9F432858488815EB07CED56A3F0B466AC0
Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/47bf5d33-51dd-3c34-a11c-252123b2256a.roa
Signing time: Mon 13 Jan 2025 14:00:52 +0000
ROA not before: Mon 13 Jan 2025 14:00:52 +0000
ROA not after: Sun 13 Apr 2025 13:00:52 +0000
asID: 9009
IP address blocks: 2607:740:5e::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:88:15:eb:07:ce:d5:6a:3f:0b:46:6a:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
Validity
Not Before: Jan 13 14:00:52 2025 GMT
Not After : Apr 13 13:00:52 2025 GMT
Subject: CN=66a2bd29-2256-43ff-8d4a-ac3395fc0c57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:91:6a:80:fe:02:f1:37:4e:fa:5e:10:30:cd:
74:0a:6a:1c:95:ca:de:28:34:50:b1:5f:16:dc:92:
fb:f6:3a:ec:bc:82:62:10:d4:99:e2:e3:3f:86:ab:
18:8c:a8:f9:59:ae:a7:5a:14:75:a4:d6:26:7f:76:
78:e9:56:21:f5:40:ff:97:e6:80:96:c6:13:9f:b0:
10:2e:43:63:26:ab:b5:c6:fe:6c:e1:e9:b3:a9:43:
5b:bc:13:a5:d4:80:89:41:d4:72:36:ba:9d:7c:33:
36:0d:ea:6b:5c:23:c7:89:0c:cb:2a:6c:a1:ae:62:
c9:bb:68:b0:e9:76:9a:d5:b0:e9:89:00:31:e5:20:
03:70:d1:20:1f:4f:46:15:3c:50:82:5e:eb:6d:0c:
bb:10:df:db:79:52:d5:fa:56:96:df:aa:0b:13:85:
0f:72:06:6e:45:54:fb:53:e2:30:60:9d:fb:49:6c:
64:47:27:64:a2:af:06:69:a7:5a:44:9c:84:52:e4:
ac:f1:d0:0b:33:c4:41:7a:91:72:fb:59:93:48:45:
55:eb:95:cb:f7:f9:bf:27:e4:dc:82:99:60:2c:12:
10:38:52:db:fc:5e:66:40:04:9c:1c:21:72:0f:bb:
75:62:e8:2c:d3:c2:03:7e:e4:94:14:ca:5a:5b:b7:
41:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:5D:51:0A:02:87:D5:5B:D9:48:F7:D2:43:A6:4F:DD:6C:1B:13:68
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/47bf5d33-51dd-3c34-a11c-252123b2256a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl
X509v3 Authority Key Identifier:
keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:740:5e::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
47:35:f8:a0:6a:d2:1e:5e:75:68:49:b0:8a:84:72:49:2b:73:
74:02:c6:35:88:a9:93:e0:ff:68:73:90:14:2b:63:e0:08:f2:
be:b8:63:ce:84:1a:31:44:83:2e:b3:86:25:93:12:25:5e:73:
49:24:12:10:5d:df:38:72:7e:2c:88:2d:a7:5a:10:12:3a:b4:
c9:3f:77:05:af:3d:6e:a9:ba:bf:c5:50:1d:c5:5b:d8:fc:5f:
23:5a:8d:af:dd:dc:a2:a3:03:d5:d2:6c:a8:50:c5:fb:50:8a:
58:4a:d9:e2:ab:20:9c:8a:f7:a0:a0:46:c1:7d:ad:b4:44:85:
c6:7b:e6:70:0b:7a:8b:b1:6c:15:0e:db:8c:44:06:87:57:e4:
60:b1:c7:25:64:38:2c:e6:b9:94:fc:28:1c:7b:e3:9d:5c:3b:
12:82:ab:39:a9:6a:d0:d0:88:97:ac:b9:cf:36:fd:4c:a8:24:
f9:bb:9b:86:e2:32:76:6c:91:f4:e4:68:52:6d:b4:1d:f5:2e:
5a:74:c3:1a:64:ce:82:05:2a:b5:84:5b:6e:c1:9b:e0:6e:e3:
dc:4c:9a:fa:36:e8:23:39:bf:7d:ab:3e:35:4f:3f:7c:1f:21:
cc:4d:2e:f0:84:d6:1e:f5:b2:30:0f:1a:76:10:05:e4:f9:33:
a5:5b:23:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 12:01:04 2025 by rpki-client