Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/436c452c-7620-380a-b414-78245a407ccc.roa
File: 436c452c-7620-380a-b414-78245a407ccc.roa (raw, json)
Hash identifier: FgS5lCieAROdFHozjt0pgig973StiZ/OCP60wat5wXQ=
Subject key identifier: 37:8B:BB:7A:F8:00:BA:D5:9F:5D:31:81:96:9F:96:7C:F4:55:BB:73
Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial: 010D0C9F4328584940394A60657EDD1FB5A8FF40
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/436c452c-7620-380a-b414-78245a407ccc.roa
Signing time: Thu 20 Mar 2025 13:00:53 +0000
ROA not before: Thu 20 Mar 2025 13:00:53 +0000
ROA not after: Wed 18 Jun 2025 13:00:53 +0000
asID: 11351
IP address blocks: 2603:70bd::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:40:39:4a:60:65:7e:dd:1f:b5:a8:ff:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Validity
Not Before: Mar 20 13:00:53 2025 GMT
Not After : Jun 18 13:00:53 2025 GMT
Subject: CN=a412d0b6-c63c-41fa-8251-a918a83267db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:8e:56:9f:13:ba:49:fa:a9:af:13:cb:dc:9c:
61:fc:a7:ce:95:6b:ad:e7:8c:94:15:36:9b:05:f3:
83:be:9e:3f:6e:cc:ea:0a:a7:46:7f:a8:c9:af:80:
72:a4:97:13:50:49:13:b8:dd:b5:1f:01:05:e1:9c:
d3:a4:ef:e6:25:ea:26:9b:50:4e:c0:ea:74:3f:ca:
e9:05:89:17:c4:e6:d9:01:98:25:35:c0:91:fd:4e:
4a:06:d1:8e:5f:ff:07:23:da:fe:0f:03:52:4f:e5:
8a:bc:20:2a:79:fb:39:1c:44:e2:69:7a:b5:a4:82:
90:e4:68:73:72:0f:b7:ac:f4:86:ed:22:6a:08:09:
28:58:c9:c3:a6:af:1f:c2:8c:f0:d6:02:ce:c6:38:
a9:5d:87:37:8a:60:3e:ef:33:4e:b3:61:a3:90:6b:
5e:7b:96:23:9c:24:51:21:78:94:81:1e:6a:ee:46:
0e:27:6e:51:8f:4b:71:86:1f:83:d3:cd:a2:70:89:
87:26:f6:7c:d8:64:28:91:0f:e8:73:2c:ad:79:33:
07:f9:30:c0:46:6a:09:37:00:77:88:b7:61:db:af:
09:2b:00:ee:e3:75:63:f7:e3:bd:d1:85:3e:4e:67:
dc:9a:7c:b4:7e:0f:1a:33:3d:53:c4:7c:89:9e:b6:
43:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:8B:BB:7A:F8:00:BA:D5:9F:5D:31:81:96:9F:96:7C:F4:55:BB:73
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/436c452c-7620-380a-b414-78245a407ccc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
X509v3 Authority Key Identifier:
keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
sbgp-ipAddrBlock: critical
IPv6:
2603:70bd::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
74:3e:a4:38:20:91:3f:29:df:83:57:d3:ef:37:10:d2:6f:1d:
73:d3:e0:06:dc:24:07:2a:68:51:3b:20:80:1f:68:a3:43:c1:
c7:6d:99:7a:6e:a2:63:77:e0:b4:dd:0a:6c:7f:8d:bc:77:f6:
e8:16:88:82:3d:cc:ec:84:2a:ac:9c:3f:23:61:ea:8c:87:08:
a7:b2:08:b9:0f:f4:93:fd:9d:e7:a8:ba:fd:72:81:32:b5:b1:
7a:fa:33:21:dd:87:9b:f5:7c:4c:48:7b:dc:5f:b9:1a:b9:29:
35:70:af:81:bc:78:e5:24:34:f1:f1:fc:b3:9d:a2:65:d8:e5:
85:46:7c:6c:0b:ac:98:f2:e8:5d:75:a4:be:64:e0:65:ef:94:
bb:da:87:28:f5:05:7f:ec:d8:16:c3:f8:9a:de:f3:9a:56:2e:
f8:c5:b9:bb:62:96:19:ad:d0:36:36:ba:be:29:98:b1:81:41:
89:c7:e2:3c:87:7c:27:e8:f4:09:18:10:38:e8:88:e2:30:f4:
2b:1f:3a:9d:96:71:81:4e:13:86:79:1e:c3:b5:3b:90:10:1e:
43:9a:73:46:98:78:e2:5d:f7:42:1c:40:6c:c2:20:ca:da:49:
03:2b:f7:5b:18:68:d9:76:16:a7:8d:12:f2:e0:a1:a9:5f:bd:
c8:9b:c8:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:59:38 2025 by rpki-client