Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/2d10269c-abaf-3198-90a0-8c1e927fe84e.roa
File: 2d10269c-abaf-3198-90a0-8c1e927fe84e.roa (raw, json)
Hash identifier: sVBsge6hsiNACqGVOE/YxJ4B6MPe1BrOsiRrWzai3fQ=
Subject key identifier: 28:E8:81:10:49:E5:55:F7:8B:04:07:12:66:41:4B:52:85:7F:B5:47
Certificate issuer: /CN=78a3d836-1df8-4303-a944-17cd53d7d04e
Certificate serial: 010D0C9F432858484AAADF9C5772B030C75AF280
Authority key identifier: 89:D0:13:AC:DA:15:84:B6:C4:A7:42:B5:71:32:1D:0F:5D:0E:A2:D2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/2d10269c-abaf-3198-90a0-8c1e927fe84e.roa
Signing time: Sun 22 Dec 2024 14:00:51 +0000
ROA not before: Sun 22 Dec 2024 14:00:51 +0000
ROA not after: Sat 22 Mar 2025 13:00:51 +0000
asID: 3477
IP address blocks: 2601:a012::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4a:aa:df:9c:57:72:b0:30:c7:5a:f2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78a3d836-1df8-4303-a944-17cd53d7d04e
Validity
Not Before: Dec 22 14:00:51 2024 GMT
Not After : Mar 22 13:00:51 2025 GMT
Subject: CN=e4031432-b6d6-49f2-ad97-601f66850715
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:db:6d:94:40:64:45:98:79:ad:ed:1b:50:15:
38:1c:b6:e2:30:64:66:ed:f9:3c:98:65:b8:1f:e1:
48:7c:67:c6:93:ad:bb:25:e0:e9:e0:a0:9f:bb:04:
12:24:73:fc:af:7a:a3:c1:b8:f7:88:5e:bb:1b:5c:
ef:c9:7c:15:ff:7b:5e:23:5a:d2:65:e4:8a:4a:fa:
40:b7:95:67:a7:e4:f3:5c:47:37:d9:0c:ee:de:7d:
98:76:02:05:02:15:3c:3d:54:1c:24:5b:53:55:42:
80:e7:b7:20:d6:f7:f6:3e:33:60:ec:1e:45:c1:ef:
0e:c6:78:9d:ca:ae:33:49:6a:35:5b:89:c2:a0:94:
e4:80:38:fb:5a:ea:c9:51:80:3d:dd:81:e6:e5:80:
d4:4b:82:fe:b4:88:7d:3e:37:50:f1:52:87:09:54:
76:e2:7f:db:2c:a8:8b:03:22:d5:54:98:cb:a5:d5:
05:d4:51:76:af:71:06:31:f1:00:ea:14:c1:6d:41:
5f:13:46:d9:52:ee:d3:7e:dd:c2:e5:86:50:35:a7:
c0:b1:70:fa:d2:48:72:89:b4:db:fe:4e:04:42:8b:
7f:80:3b:ed:29:1b:37:b2:d2:0b:ee:78:ce:28:02:
96:88:53:12:05:db:a9:c3:f1:ea:f8:90:fd:c7:1e:
14:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:E8:81:10:49:E5:55:F7:8B:04:07:12:66:41:4B:52:85:7F:B5:47
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/2d10269c-abaf-3198-90a0-8c1e927fe84e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.crl
X509v3 Authority Key Identifier:
keyid:89:D0:13:AC:DA:15:84:B6:C4:A7:42:B5:71:32:1D:0F:5D:0E:A2:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer
sbgp-ipAddrBlock: critical
IPv6:
2601:a012::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bd:a1:4d:a8:12:69:2d:0f:0d:b3:7c:e3:ad:bd:b9:37:99:a9:
73:76:32:d9:24:ec:05:58:ec:a7:41:07:0b:41:09:6b:d8:9e:
b3:95:36:14:1b:50:74:b2:fe:96:45:95:31:25:05:ea:13:48:
69:92:e3:5d:f2:ca:80:ed:42:7c:62:c5:29:fd:1c:8d:75:42:
b8:e2:a6:f7:28:b7:c2:e9:dc:e9:b3:8c:0f:13:b3:4c:98:b1:
a6:9a:a7:91:7f:cc:46:a9:49:2f:39:11:a6:22:16:ac:1d:18:
ab:a1:35:77:f2:be:8b:31:6e:92:61:45:f6:4a:37:64:25:d5:
3d:a5:29:c9:f8:ef:e5:a5:f3:a8:a1:0a:2b:98:32:80:0d:03:
df:7b:36:45:92:10:c9:58:14:57:59:7f:1e:24:a9:57:87:e8:
db:b4:e2:2c:39:1f:ea:51:2f:99:82:ab:3c:a9:2c:e0:e3:c9:
29:2c:f5:7c:4b:d9:69:25:85:0c:3a:a0:34:19:bc:12:5e:1d:
e8:78:78:42:2d:8f:33:98:36:a1:21:02:11:a1:de:84:77:22:
fb:6e:1e:a4:ea:5f:e6:fe:75:55:fa:74:1e:87:2a:07:96:56:
d0:b7:d6:d7:ba:06:54:71:cd:b3:20:7b:8d:b7:4a:50:23:ba:
c8:9e:ee:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 15:30:16 2025 by rpki-client