Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be/33cbc354-d185-3748-a67e-8b940dc311d1.roa
File: 33cbc354-d185-3748-a67e-8b940dc311d1.roa (raw, json)
Hash identifier: Cs9d8HflAEvE9d+Nh//UunP0Ob3vtT6heiCPryVKqa4=
Subject key identifier: 35:FC:5E:15:35:ED:E8:73:A7:29:86:00:5C:A7:83:2F:AC:0C:AB:91
Certificate issuer: /CN=dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be
Certificate serial: 010D0C9F4328584925B3AD7A75A419D902741840
Authority key identifier: D4:08:14:4A:5A:B6:1A:EF:00:62:89:48:42:C1:66:F0:04:D3:CE:BC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be/33cbc354-d185-3748-a67e-8b940dc311d1.roa
Signing time: Tue 11 Mar 2025 01:00:40 +0000
ROA not before: Tue 11 Mar 2025 01:00:40 +0000
ROA not after: Mon 09 Jun 2025 01:00:40 +0000
asID: 46832
IP address blocks: 2610:e0:a000::/36 maxlen: 36
2610:e0:a001::/48 maxlen: 48
2610:e0:a003::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:25:b3:ad:7a:75:a4:19:d9:02:74:18:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be
Validity
Not Before: Mar 11 01:00:40 2025 GMT
Not After : Jun 9 01:00:40 2025 GMT
Subject: CN=cf7e6ec2-da5c-4d2a-aa7a-4848b162cd78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:20:a2:cf:cf:16:6d:45:24:e7:48:95:71:29:
a4:de:5f:ec:43:14:cf:7c:0a:33:cc:8f:22:69:73:
1c:fb:18:a4:5d:5a:c1:24:ee:6d:6a:b7:d8:0e:1d:
0e:88:44:db:7b:94:16:08:0d:3e:cc:12:89:00:6d:
0e:03:6a:9f:aa:24:73:da:57:f7:26:86:f6:10:95:
3e:55:01:84:f2:cf:72:be:fc:1e:66:6f:08:02:d2:
88:8a:04:8a:2e:84:c7:c8:65:f0:f3:b1:25:7f:1e:
66:10:71:c4:3b:19:ae:76:88:66:b5:17:21:57:f8:
a3:99:51:12:52:d4:66:cb:3c:2e:bb:3d:56:c9:59:
38:30:4a:34:85:10:67:4c:a9:69:9b:ff:6e:c8:9b:
dd:94:17:05:d7:52:b2:da:c4:a2:d7:b5:b9:7d:7f:
89:3e:7d:79:dc:4a:39:57:07:ec:b2:51:66:50:86:
d8:6d:c8:d4:83:42:1d:5a:33:b4:dd:5f:48:15:22:
5f:02:dd:86:73:9b:12:28:ec:d3:d3:44:4c:62:e3:
d2:5a:90:f9:2a:c1:90:bd:6d:ed:95:17:0d:44:51:
43:a9:81:02:fc:6d:7d:dd:d0:dd:f0:94:30:b0:da:
aa:5c:55:06:1d:4d:66:c6:ee:5c:59:53:d3:25:e9:
2d:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:FC:5E:15:35:ED:E8:73:A7:29:86:00:5C:A7:83:2F:AC:0C:AB:91
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be/33cbc354-d185-3748-a67e-8b940dc311d1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be.crl
X509v3 Authority Key Identifier:
keyid:D4:08:14:4A:5A:B6:1A:EF:00:62:89:48:42:C1:66:F0:04:D3:CE:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be.cer
sbgp-ipAddrBlock: critical
IPv6:
2610:e0:a000::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
08:a3:16:a8:57:19:db:6c:60:0c:b0:ad:08:1e:04:33:70:33:
c2:0c:eb:26:fe:cb:33:61:8d:5a:61:b0:b2:45:a3:c1:40:8f:
ee:87:ce:32:67:34:d9:d0:71:e5:24:0a:28:9c:94:86:e3:56:
fc:8e:7b:32:bb:c1:c4:4d:d3:6a:d1:f3:1b:53:be:0c:3a:01:
8a:1a:d6:c8:be:24:3e:a7:d7:35:d4:e0:d8:f9:f2:64:87:d6:
76:31:1d:1b:0d:2b:df:a7:88:a4:5e:10:e4:03:6b:6f:ef:f7:
f7:27:62:27:9c:1e:ed:d1:23:d9:5a:95:f6:24:0d:5f:06:a0:
21:80:b8:1d:79:cd:26:c7:4e:31:ce:6d:65:f8:99:f1:5b:42:
fd:ed:7d:7c:67:40:a1:f3:cd:c2:d5:c2:b6:d9:e0:bb:a5:44:
37:c1:c3:b5:c1:69:c0:47:44:f7:04:ff:22:d8:a9:13:b3:2d:
fe:2e:cc:f4:a5:fe:73:2e:68:95:84:4c:fa:d3:e3:1d:73:64:
58:7b:b0:8b:63:5c:35:39:5a:77:a1:56:b2:0e:99:93:08:ea:
01:61:c3:ee:6f:55:94:9c:d3:ed:6a:0b:18:56:fa:a1:1f:bb:
6a:ce:46:f8:40:d4:55:1d:e5:2c:4f:e3:d9:db:0a:08:64:4b:
6c:96:ff:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:38:53 2025 by rpki-client