Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/14ee329f-6a96-44cb-8cc5-222e0fec8c3a/90ab05ba-2de5-3398-b8f4-cb836c1eda4a.roa
File: 90ab05ba-2de5-3398-b8f4-cb836c1eda4a.roa (raw, json)
Hash identifier: ZS3r9zgC0RjRgE2UjYgwqk6wfFCmNfetpWQXCKr3vAI=
Subject key identifier: ED:46:F4:5B:18:BF:B4:4B:4E:BB:FF:F4:2F:A5:C5:02:5C:37:A5:48
Certificate issuer: /CN=14ee329f-6a96-44cb-8cc5-222e0fec8c3a
Certificate serial: 010D0C9F432858488AE094831B3397E62C4CAA90
Authority key identifier: AE:48:23:F9:A1:EA:C3:0A:1E:7A:D0:58:AA:D4:EA:78:AF:C1:EC:1A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/14ee329f-6a96-44cb-8cc5-222e0fec8c3a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/14ee329f-6a96-44cb-8cc5-222e0fec8c3a/90ab05ba-2de5-3398-b8f4-cb836c1eda4a.roa
Signing time: Tue 14 Jan 2025 14:00:51 +0000
ROA not before: Tue 14 Jan 2025 14:00:51 +0000
ROA not after: Mon 14 Apr 2025 13:00:51 +0000
asID: 209453
IP address blocks: 2604:3400:dc1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:8a:e0:94:83:1b:33:97:e6:2c:4c:aa:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14ee329f-6a96-44cb-8cc5-222e0fec8c3a
Validity
Not Before: Jan 14 14:00:51 2025 GMT
Not After : Apr 14 13:00:51 2025 GMT
Subject: CN=0a836031-a2bf-4d27-8658-89c3503dab2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:d4:53:c4:6c:ee:3d:1c:25:55:ea:d4:96:f4:
90:bc:bc:5e:3b:7e:26:cf:86:9b:be:cb:26:10:97:
54:4b:95:4c:5f:84:fa:c2:2e:bc:7f:62:5b:67:02:
7f:57:36:72:9e:3b:9d:59:29:01:12:5e:7a:58:3c:
83:f7:fa:4c:7a:f5:e2:3e:36:4b:d3:7c:8b:31:21:
e2:2e:21:0e:24:a5:55:ea:35:fa:55:f6:e6:4e:81:
62:8a:2d:01:ad:42:41:57:77:4b:43:70:c7:29:c5:
86:4f:2f:35:67:5a:5c:03:c8:2e:3a:a2:68:d9:09:
fe:7f:62:3b:7d:95:e9:f7:bd:26:44:3f:8b:b0:39:
f6:84:4b:3b:0d:87:cb:6f:ed:bd:19:57:34:ef:ef:
ef:a5:17:d9:ba:b4:9a:83:19:5b:42:a4:70:29:34:
69:70:58:ad:9b:72:a4:89:74:a2:4e:bb:28:40:c4:
60:b4:c5:e5:24:ae:a0:db:04:b8:02:40:fb:ea:15:
81:9e:db:62:cc:99:f0:2f:1e:2b:e8:9f:0f:c1:e1:
7d:4c:de:3f:19:32:48:11:b1:87:26:f6:7d:b3:fa:
81:cd:54:7b:c7:2a:5c:92:69:46:21:54:b8:72:52:
5f:ae:94:95:a1:ea:57:6f:5f:2e:83:5f:fe:a2:03:
50:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:46:F4:5B:18:BF:B4:4B:4E:BB:FF:F4:2F:A5:C5:02:5C:37:A5:48
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/14ee329f-6a96-44cb-8cc5-222e0fec8c3a/90ab05ba-2de5-3398-b8f4-cb836c1eda4a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/14ee329f-6a96-44cb-8cc5-222e0fec8c3a/14ee329f-6a96-44cb-8cc5-222e0fec8c3a.crl
X509v3 Authority Key Identifier:
keyid:AE:48:23:F9:A1:EA:C3:0A:1E:7A:D0:58:AA:D4:EA:78:AF:C1:EC:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/14ee329f-6a96-44cb-8cc5-222e0fec8c3a.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:3400:dc1::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
60:0f:46:ac:70:c9:88:aa:e5:da:c4:36:63:e6:92:a0:35:ff:
66:56:49:76:5b:14:2b:84:db:82:01:4e:0d:8b:ed:7f:76:9c:
0f:68:97:7e:54:7f:4b:09:3b:53:24:3b:6a:7b:19:60:57:55:
de:e7:fe:18:18:09:43:92:88:a7:0e:f7:43:ff:31:13:2e:dd:
d7:51:c5:a4:40:bf:91:80:98:23:8d:97:3f:e7:17:4d:24:c9:
66:f1:02:2d:d3:af:de:f2:4c:cf:9e:22:bb:5c:0f:03:a1:ae:
65:2c:23:bd:90:18:3b:8f:92:76:24:04:8f:c6:d3:3a:f4:f1:
a9:58:e8:82:f6:00:dd:69:b9:a1:31:01:81:0c:05:68:f2:42:
46:77:d5:56:7b:7f:3b:fb:c2:ae:eb:36:40:bd:76:fe:81:17:
ce:e3:c7:8a:de:f1:5e:00:e1:e3:f6:58:48:08:dc:4a:2b:8a:
fa:c4:d1:91:a4:28:c5:f7:3f:17:43:32:cd:e6:95:08:fb:58:
fb:74:e8:70:22:fa:c4:96:f9:d0:8f:b4:f3:5c:65:da:a2:c4:
25:54:0b:01:24:d9:af:ec:d9:24:a6:38:6d:7c:b3:5a:6b:cd:
4f:11:83:c3:10:50:b3:ba:63:17:1f:36:a8:7d:20:1b:a0:28:
21:cb:cf:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:21:30 2025 by rpki-client