Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/9df41800-8e2d-3f92-ba27-97fa148f6bbb.roa
File: 9df41800-8e2d-3f92-ba27-97fa148f6bbb.roa (raw, json)
Hash identifier: DjiaFrYlBkNpbFqysDMJs2UMIDKEmJh+TOBJupdAhbY=
Subject key identifier: 0E:AC:41:4D:C4:67:69:16:E4:1E:AC:E8:93:5D:59:4C:D1:AC:D3:12
Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
Certificate serial: 010D0C9F43285848A99622D9AA348C180D469600
Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/9df41800-8e2d-3f92-ba27-97fa148f6bbb.roa
Signing time: Sat 25 Jan 2025 14:00:52 +0000
ROA not before: Sat 25 Jan 2025 14:00:52 +0000
ROA not after: Fri 25 Apr 2025 13:00:52 +0000
asID: 9009
IP address blocks: 2607:740:3e::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a9:96:22:d9:aa:34:8c:18:0d:46:96:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
Validity
Not Before: Jan 25 14:00:52 2025 GMT
Not After : Apr 25 13:00:52 2025 GMT
Subject: CN=e71a4139-a3cb-4d94-8723-a148a2945f4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:d7:f3:f3:6d:2d:73:fd:e4:36:0f:b7:49:48:
29:24:3d:31:db:fc:9b:95:13:ff:a1:7d:52:6c:2f:
3c:ff:30:59:b8:5f:d7:3f:57:b8:95:2a:77:48:a9:
0b:99:c7:11:00:a8:b3:42:81:62:49:c1:65:79:41:
35:e5:ec:44:85:1b:a0:38:bd:0d:66:e1:50:7b:1b:
48:4f:f1:6e:57:01:76:ba:dd:aa:d4:05:0b:b1:7f:
b1:54:45:8b:9f:20:b3:47:d9:97:c8:66:fd:b6:ea:
d1:e9:a3:de:6f:1a:cf:3c:c9:d8:3c:3c:9c:a9:82:
55:6e:42:cb:b1:b5:8d:50:cf:0e:1a:a4:30:6e:25:
68:6c:b3:48:c5:76:4a:43:dc:73:52:89:a4:2f:ab:
2c:68:73:ad:35:86:d1:23:7c:09:d8:de:95:bb:52:
d7:8c:a7:3b:ec:a7:a6:2b:22:f0:36:2e:fe:e0:6e:
fa:af:ce:66:0f:ec:6a:29:9e:2d:70:c1:72:06:4c:
8e:59:23:e4:03:76:77:56:14:f8:b3:4f:97:69:e1:
cb:39:c6:3e:8d:e7:b9:3a:9a:3e:f5:de:b6:99:51:
b3:f2:99:a0:94:3e:72:85:a0:bb:e0:5c:91:3b:83:
d3:5f:27:f4:54:76:83:6e:3b:a8:a8:17:cf:e9:3d:
0a:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:AC:41:4D:C4:67:69:16:E4:1E:AC:E8:93:5D:59:4C:D1:AC:D3:12
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/9df41800-8e2d-3f92-ba27-97fa148f6bbb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl
X509v3 Authority Key Identifier:
keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:740:3e::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
71:57:4e:16:af:af:a3:ff:f7:81:26:1a:39:e1:ee:ba:3b:d0:
5b:a9:2f:aa:9b:7e:b6:34:fd:3c:d1:bc:bf:18:cd:f6:bd:82:
c8:f9:30:52:69:ff:25:5f:6a:b0:90:ec:f3:53:88:3b:e3:f8:
9e:b2:85:ad:27:e7:6d:fa:ad:48:46:81:97:a1:1d:90:cd:f1:
62:09:34:ee:79:ab:a3:74:78:c3:6d:64:d2:8d:70:71:2e:89:
73:20:b2:13:1b:c5:e0:57:b4:07:2f:87:28:f7:53:2f:9a:24:
f6:b0:f4:7a:d2:04:6b:9a:62:86:1a:25:3b:5c:0f:c7:0a:23:
18:59:27:ca:9f:82:39:57:4a:8a:ac:22:25:e8:34:6b:ec:f4:
48:81:15:56:4d:a1:a2:79:48:9b:5e:19:29:fc:3a:41:0e:90:
59:9a:e3:f6:89:af:2d:b4:d7:5d:fa:00:a9:43:61:73:90:e4:
5f:b9:1d:7e:a9:1c:e6:70:9d:77:05:37:51:bd:04:25:fc:47:
79:c6:4b:27:cb:8e:17:b8:4f:22:f2:3e:70:5a:78:bb:b3:bb:
72:1c:88:74:f8:10:b3:5d:a5:ea:94:9b:ce:f5:e7:d3:1b:02:
ab:99:e2:df:a1:00:28:36:ab:ef:68:7a:28:16:29:ac:67:b5:
16:69:3e:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 12:16:46 2025 by rpki-client