Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/f7d21d96-d256-3aab-9e7e-57e21046fd47.roa
File: f7d21d96-d256-3aab-9e7e-57e21046fd47.roa (raw, json)
Hash identifier: N7IJ+su0DYrqVf0kYkiTB/94xle/6T3a9edlx57xEQg=
Subject key identifier: 52:CC:FB:97:53:28:BF:ED:51:FA:93:21:3F:D5:60:4D:A5:DB:5E:75
Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
Certificate serial: 010D0C9F43285848A9961AD7701B829EE9365300
Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/f7d21d96-d256-3aab-9e7e-57e21046fd47.roa
Signing time: Sat 25 Jan 2025 14:00:52 +0000
ROA not before: Sat 25 Jan 2025 14:00:52 +0000
ROA not after: Fri 25 Apr 2025 13:00:52 +0000
asID: 9009
IP address blocks: 2607:740:35::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a9:96:1a:d7:70:1b:82:9e:e9:36:53:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
Validity
Not Before: Jan 25 14:00:52 2025 GMT
Not After : Apr 25 13:00:52 2025 GMT
Subject: CN=169c0f9f-01a8-408f-9492-b5133c6c6465
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:02:3f:83:4c:8a:65:16:12:9f:36:ad:f2:c6:
4b:54:28:b2:ec:87:aa:f2:da:73:a9:1d:a1:f0:e6:
32:74:14:b6:3d:40:81:1b:db:12:39:69:b1:c1:5c:
d5:a8:91:75:35:f3:2f:7f:7f:55:37:67:2b:90:46:
42:14:83:28:13:91:2e:7c:60:a3:1b:68:c3:86:b0:
16:8f:86:fc:86:75:23:33:32:87:24:62:e3:e0:13:
de:ed:b0:51:29:74:18:01:21:59:81:26:2f:29:c7:
ad:d3:7a:86:8c:63:f0:39:fc:65:5a:d4:29:cf:66:
10:e3:72:32:67:f3:1f:4b:d6:73:4e:a1:57:d9:52:
fe:7e:a1:59:b1:24:1a:30:96:03:c7:03:37:d0:6a:
7b:0f:24:6e:4b:3e:ac:3e:97:9e:0a:bd:9b:e2:e5:
7c:99:6f:be:3a:80:af:82:2f:d7:ae:31:bb:bb:52:
67:70:76:e5:34:69:45:81:81:eb:4b:43:65:c0:a8:
4b:8c:b8:4f:ab:e1:21:86:d6:22:20:a9:65:1f:b7:
11:37:61:6d:0d:8d:b5:95:81:24:d5:52:1e:ed:8b:
b0:64:0f:4d:a3:5f:00:62:06:6b:85:aa:22:a4:60:
12:dc:67:01:f1:ff:74:ce:b6:38:37:60:98:42:86:
94:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:CC:FB:97:53:28:BF:ED:51:FA:93:21:3F:D5:60:4D:A5:DB:5E:75
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/f7d21d96-d256-3aab-9e7e-57e21046fd47.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl
X509v3 Authority Key Identifier:
keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:740:35::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
47:b4:f2:a4:3e:a3:5c:26:e1:7c:dd:2a:01:0f:aa:f7:56:73:
6b:8b:73:2a:88:c4:89:55:23:55:d6:75:26:01:33:0a:0a:72:
fe:a6:79:60:fa:e0:91:1a:d7:45:7c:0e:0d:8f:b2:6a:6b:ca:
0e:db:46:00:db:aa:ca:53:a6:18:8f:74:da:82:cd:1a:2b:65:
44:08:af:c2:ee:29:a9:aa:10:f2:4c:83:92:bf:0c:e9:c3:45:
33:8e:2d:ea:23:96:9e:94:8b:f5:5e:7d:52:59:f0:4d:81:cc:
ba:56:c2:26:1e:5a:da:ff:e3:b6:b9:9b:49:93:44:a9:9d:c8:
98:5c:8c:32:91:04:98:ce:e0:77:44:5f:30:c5:64:4e:fc:2c:
f2:c8:0a:08:0c:cc:53:df:54:e1:7d:60:08:26:86:cd:52:3c:
ed:60:d8:6b:a1:eb:e1:c1:28:83:15:17:17:f5:94:b9:9d:28:
40:01:dd:72:e5:f9:22:e8:7f:58:67:85:87:7c:7f:47:ba:70:
2c:e4:b1:75:4c:b2:53:02:17:1a:a0:91:fc:78:14:b0:57:51:
1d:f9:21:03:5c:ea:ea:cb:22:8d:36:1c:6e:fa:ea:dd:85:0d:
75:f9:d6:0f:69:bf:77:64:52:c1:f8:35:98:17:47:7d:ad:dc:
95:b6:b7:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 12:01:10 2025 by rpki-client