Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/99e80352-28e0-3280-b087-90da68e9840c.roa
File: 99e80352-28e0-3280-b087-90da68e9840c.roa (raw, json)
Hash identifier: 30Hh8IS1Ic1JmjF8N5geJpaARF9BzVi0d+DyyjLHa3g=
Subject key identifier: C1:BF:E4:05:E1:60:FC:35:71:06:17:08:F4:5E:CC:2B:04:07:51:41
Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
Certificate serial: 010D0C9F43285848A9961AEA69CA97238FB07C80
Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/99e80352-28e0-3280-b087-90da68e9840c.roa
Signing time: Sat 25 Jan 2025 14:00:52 +0000
ROA not before: Sat 25 Jan 2025 14:00:52 +0000
ROA not after: Fri 25 Apr 2025 13:00:52 +0000
asID: 9009
IP address blocks: 2607:740:36::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a9:96:1a:ea:69:ca:97:23:8f:b0:7c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
Validity
Not Before: Jan 25 14:00:52 2025 GMT
Not After : Apr 25 13:00:52 2025 GMT
Subject: CN=b717ac9f-8405-4ffd-bbc5-be4dce1c4936
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:32:86:f4:11:64:06:8e:e0:8c:1c:29:f4:4b:
99:71:6c:e2:7a:cd:9e:2f:e0:7c:80:de:10:29:66:
9c:8c:4a:a9:2e:73:70:47:8d:24:ab:f2:fa:ef:a8:
56:b1:29:2e:42:07:82:4d:e5:a2:e0:8c:33:ac:68:
54:c6:03:a9:fc:06:b1:1c:09:a1:2f:4b:e1:78:16:
42:3b:36:fb:81:56:aa:e1:d4:7e:2a:0b:56:68:c3:
17:f6:aa:5c:48:57:8b:04:82:c6:93:3d:bc:5c:0f:
3e:5d:c6:b7:ff:9d:e8:6b:80:29:2b:a5:44:3a:59:
ac:94:5e:8c:25:69:5d:24:be:ae:ea:da:a3:b9:a2:
75:23:d9:57:eb:ac:c0:23:99:90:65:a5:e1:59:32:
38:c8:25:c1:28:ac:23:20:b5:18:c9:b7:0d:9f:62:
70:89:a7:f3:06:de:39:81:80:b1:c1:c3:5b:9d:19:
1b:b8:e8:b4:56:68:aa:6a:be:0e:0e:10:81:23:32:
21:42:9a:1c:26:83:97:d8:14:2e:ef:f1:c4:e2:ab:
6c:f7:3c:5c:76:05:2d:f0:8d:b9:f2:1f:f6:46:15:
66:ff:b6:cc:32:eb:0f:cc:15:81:a6:74:22:c3:d6:
6e:ca:a8:b1:fc:47:ce:8f:c9:c8:12:f0:1e:a3:81:
b2:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:BF:E4:05:E1:60:FC:35:71:06:17:08:F4:5E:CC:2B:04:07:51:41
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/99e80352-28e0-3280-b087-90da68e9840c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl
X509v3 Authority Key Identifier:
keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:740:36::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
66:63:e3:52:ab:60:aa:96:71:ce:5b:0a:67:14:ff:1b:92:b3:
6d:7d:06:2d:2d:bb:af:2f:09:5a:76:58:6f:4b:48:27:97:e4:
8b:81:72:bb:a0:b4:cf:00:1f:5a:8e:72:e8:5d:e5:88:78:f9:
8c:56:8e:19:49:f7:2a:d1:bb:eb:95:34:6c:9d:67:55:23:99:
b8:0b:5e:fb:23:33:66:b2:e2:89:63:7d:b1:ad:18:32:b4:2c:
0c:e2:b7:27:30:30:2a:84:77:d4:02:24:fb:78:56:92:d4:61:
e0:54:f1:53:6f:2b:58:0a:94:b3:d9:c8:5d:1c:00:e2:ff:55:
9c:79:56:cc:33:ba:8f:4a:ff:6b:9a:0d:b4:91:69:64:61:51:
00:05:68:5d:9a:72:60:e5:c4:cb:9a:44:00:f8:d8:b5:5d:ad:
95:98:25:31:c9:6f:08:9d:b9:c8:02:2b:f1:9c:54:95:c8:e9:
13:1f:3e:35:38:77:dc:73:65:4a:b4:26:06:a2:1b:30:66:58:
fd:9d:ec:aa:73:7f:f7:2b:47:f5:61:39:d8:5a:e7:4c:6d:28:
88:cc:c7:4f:44:48:00:76:69:e0:8a:20:0c:bf:ee:e4:17:f4:
f1:bf:f9:37:b6:2b:1e:bc:80:c9:27:22:47:81:52:42:02:68:
82:a2:75:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 12:08:50 2025 by rpki-client