Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/18f4eabf-2388-491f-922c-4973961dfd2e/2129c046-4fe3-354a-b09b-47dc1a8a057f.roa
File: 2129c046-4fe3-354a-b09b-47dc1a8a057f.roa (raw, json)
Hash identifier: YLckh82ShIjQ3Z+nZOcBy7jY8/+XKf2tP0MDENDvs58=
Subject key identifier: AE:98:C8:12:38:52:09:F5:F8:2C:93:3E:A6:A2:04:95:A6:B0:4D:BE
Certificate issuer: /CN=18f4eabf-2388-491f-922c-4973961dfd2e
Certificate serial: 010D0C9F432858487A207C748F7070421A19C0C0
Authority key identifier: 8B:8D:19:D1:85:FA:D9:E9:5B:06:4E:69:0A:0C:34:7B:6B:68:73:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/18f4eabf-2388-491f-922c-4973961dfd2e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/18f4eabf-2388-491f-922c-4973961dfd2e/2129c046-4fe3-354a-b09b-47dc1a8a057f.roa
Signing time: Wed 08 Jan 2025 14:00:51 +0000
ROA not before: Wed 08 Jan 2025 14:00:51 +0000
ROA not after: Tue 08 Apr 2025 13:00:51 +0000
asID: 33099
IP address blocks: 2605:3c0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7a:20:7c:74:8f:70:70:42:1a:19:c0:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18f4eabf-2388-491f-922c-4973961dfd2e
Validity
Not Before: Jan 8 14:00:51 2025 GMT
Not After : Apr 8 13:00:51 2025 GMT
Subject: CN=ee79e44d-ed34-41d1-a018-38ed4f79d6d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:46:ba:54:e3:00:18:dd:41:bd:6a:e9:2c:58:
c1:7d:a5:04:54:94:6d:a3:8d:e4:e3:be:55:f0:40:
4d:75:fe:5b:2d:e2:05:e5:4a:e9:a7:67:c7:cd:a3:
c4:c0:d3:11:e6:e0:3c:94:59:fc:df:ac:79:5e:ee:
3e:48:2c:4f:1b:a4:4f:b1:a0:00:97:28:7d:57:4e:
49:98:d1:1a:84:f4:1c:9a:b3:99:33:1f:01:63:56:
cc:18:ba:b7:9d:c8:f7:4b:9b:87:cd:c0:5c:23:d3:
4d:f4:18:02:37:31:03:82:d1:64:55:6c:c7:ac:8f:
40:92:0b:74:34:e0:d4:f8:48:64:58:27:d7:52:73:
a3:ab:e2:f1:8b:c1:50:76:51:14:3a:75:da:fe:2f:
70:e5:b2:fe:79:84:4b:6b:13:b9:56:f6:88:85:55:
82:6c:02:95:ce:dc:af:85:ec:b1:2b:9e:09:e6:9c:
d2:6f:77:e3:32:cb:35:cd:8a:5e:61:6d:c1:62:c8:
7c:5c:96:d3:e3:1b:92:26:ff:56:30:49:7b:3a:7c:
22:ca:a6:d7:8e:fc:27:8e:a1:de:78:80:f2:b9:16:
65:3d:d2:88:fc:c4:af:7e:0b:2b:8e:0e:d9:14:97:
94:18:0d:70:0b:5f:11:4d:c2:cd:23:fc:3a:d0:fe:
e1:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:98:C8:12:38:52:09:F5:F8:2C:93:3E:A6:A2:04:95:A6:B0:4D:BE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/18f4eabf-2388-491f-922c-4973961dfd2e/2129c046-4fe3-354a-b09b-47dc1a8a057f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/18f4eabf-2388-491f-922c-4973961dfd2e/18f4eabf-2388-491f-922c-4973961dfd2e.crl
X509v3 Authority Key Identifier:
keyid:8B:8D:19:D1:85:FA:D9:E9:5B:06:4E:69:0A:0C:34:7B:6B:68:73:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/18f4eabf-2388-491f-922c-4973961dfd2e.cer
sbgp-ipAddrBlock: critical
IPv6:
2605:3c0::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1f:60:c3:24:6d:9d:f8:db:25:35:23:2e:51:e0:b1:5e:78:92:
4c:09:30:6f:8b:30:d3:e3:12:6e:d2:75:5c:6b:60:d0:aa:f5:
fb:84:39:e5:04:a9:63:78:7c:71:f4:c2:63:fd:6d:e2:14:d2:
82:d0:f7:3f:e2:19:e7:4e:84:10:dd:70:e8:a1:1f:3d:8a:e4:
09:c3:14:84:04:3a:11:8d:b3:09:ee:66:fa:2c:b0:81:6d:84:
a7:de:da:1b:4f:c8:86:7a:a8:f6:e3:9a:68:92:4a:d7:6b:16:
56:d1:5e:ca:e2:bf:f5:b4:33:fd:4c:05:04:ac:82:ed:6f:8e:
e9:17:e0:69:c8:6e:9f:98:b7:e0:c0:17:3b:1d:47:72:d0:1a:
a4:70:d2:f5:8d:d0:d8:ff:7e:67:b5:ad:f5:02:0b:a8:47:bd:
c5:c6:56:b3:25:e6:bf:e1:af:10:0b:e3:20:2a:1c:ec:63:2c:
96:6c:38:67:04:b3:76:ee:f1:e3:b8:bc:aa:8e:0a:08:54:43:
c8:9b:a7:49:08:4e:9e:d2:1d:a5:a0:c1:d5:af:3b:b7:e6:c2:
b6:ef:a7:20:9b:b2:28:12:eb:20:3d:68:a1:a8:e2:e4:49:a6:
f6:ac:04:5b:d1:2d:e7:67:63:67:28:4a:c0:ba:19:93:8d:c0:
c3:26:6a:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:21:42 2025 by rpki-client