Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97/e5d9b7b7-221f-3eee-b52b-b8f95c278eb1.roa
File: e5d9b7b7-221f-3eee-b52b-b8f95c278eb1.roa (raw, json)
Hash identifier: L/rzsrYV7oMbqqonHbgL1tHbE2Xt+K3+rbbQb8yah38=
Subject key identifier: 29:E0:E9:1C:27:7F:9B:75:A7:78:C9:94:78:62:5E:90:5A:46:5B:B0
Certificate issuer: /CN=3b4d7105-d9bd-4ee4-b958-2e9902d5eb97
Certificate serial: 010D0C9F432858492183B88C83A429118074D280
Authority key identifier: AC:F8:01:B7:30:95:23:B1:95:58:85:FF:A2:E4:EB:26:B9:9F:63:3B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97/e5d9b7b7-221f-3eee-b52b-b8f95c278eb1.roa
Signing time: Sun 09 Mar 2025 13:00:52 +0000
ROA not before: Sun 09 Mar 2025 13:00:52 +0000
ROA not after: Sat 07 Jun 2025 13:00:52 +0000
asID: 6597
IP address blocks: 2607:f948::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:21:83:b8:8c:83:a4:29:11:80:74:d2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b4d7105-d9bd-4ee4-b958-2e9902d5eb97
Validity
Not Before: Mar 9 13:00:52 2025 GMT
Not After : Jun 7 13:00:52 2025 GMT
Subject: CN=40a610ea-f689-4ddc-90ce-2f985a805472
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d4:5c:91:45:34:e0:0b:23:c7:8e:73:67:b5:
e9:21:9f:ca:1d:1e:c7:93:95:65:a1:3d:8d:01:c7:
1f:aa:0c:c4:03:db:bd:2d:c9:7e:7b:c7:ce:4a:8b:
b6:24:60:bd:43:bc:3d:00:57:04:54:fc:df:cb:a4:
88:33:26:65:3f:c0:a1:42:16:8a:5a:43:c3:81:71:
62:65:64:35:e9:38:fe:c0:42:56:b3:27:dd:9c:99:
1e:01:b9:96:54:25:f0:3c:3b:88:7d:a7:fb:92:a1:
23:96:67:71:8a:af:48:12:f4:76:eb:22:eb:72:8d:
d1:b4:4d:e6:49:c4:8b:32:32:e5:d9:4f:e2:13:b8:
cb:f7:c5:f0:e3:8e:c0:9d:e2:52:4f:a0:d4:83:51:
10:3a:fd:b6:5f:13:f6:4d:1c:19:9e:4d:63:f3:53:
d8:db:bb:71:89:de:6d:bb:00:fd:9c:ab:c5:6f:d9:
62:21:06:74:9b:b7:63:19:df:47:4a:0a:1f:4e:a2:
a6:42:5e:eb:c0:63:05:11:65:da:da:11:5a:fc:4a:
21:79:6b:76:5b:07:c9:f8:07:d4:52:82:1a:7c:d7:
59:d4:10:c8:bc:65:09:4c:a5:8c:71:bf:a8:ff:71:
7d:2c:0f:b1:51:c1:15:71:89:71:c4:e8:bf:f9:fa:
0e:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:E0:E9:1C:27:7F:9B:75:A7:78:C9:94:78:62:5E:90:5A:46:5B:B0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97/e5d9b7b7-221f-3eee-b52b-b8f95c278eb1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97.crl
X509v3 Authority Key Identifier:
keyid:AC:F8:01:B7:30:95:23:B1:95:58:85:FF:A2:E4:EB:26:B9:9F:63:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:f948::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
28:21:75:4d:ad:59:0b:7a:49:aa:1d:fa:61:4d:fe:62:ee:ea:
d1:2f:0e:72:a3:86:f5:00:bf:99:93:0e:0a:61:ff:6d:db:88:
7c:b7:35:ec:45:4f:c3:b9:be:eb:99:62:6b:d2:a0:5c:e8:7e:
96:70:18:b9:53:bd:55:20:fb:91:0b:a9:03:0c:b4:7d:73:11:
d1:95:0c:20:ac:fb:83:cd:80:f9:08:b8:82:38:f5:26:c2:62:
f9:1a:55:dd:c8:ff:7d:5c:c4:fc:9e:30:c0:7e:1d:8a:f0:90:
ea:cd:5a:44:a9:fc:ef:0e:a2:b2:5e:cf:e4:69:e9:2b:33:ea:
56:6f:92:07:c1:24:ae:22:07:cc:c9:b4:aa:7a:34:ee:c0:1c:
c6:58:bb:72:e4:b7:56:86:ee:52:21:74:57:09:ed:08:86:03:
bc:ea:87:04:c5:44:db:ff:91:3b:b0:a8:1a:0a:da:76:c2:d3:
a0:7b:8e:29:76:62:34:da:f0:00:15:e7:dc:a8:40:09:22:a6:
63:03:3a:a3:40:ea:47:fd:ce:00:56:e7:e1:8d:42:de:1b:a0:
ca:71:cc:87:19:24:4e:f9:51:56:13:5b:ce:09:90:b0:5d:21:
b1:78:9b:2c:94:2d:9d:d3:bb:e8:c4:32:ca:ce:ea:39:ff:30:
c1:ea:bc:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:44:16 2025 by rpki-client