Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9fbd098f-9e01-4c26-9395-e5b63399acaf/54ac8e81-4e5f-36ec-a67f-ebb1e1392761.roa
File: 54ac8e81-4e5f-36ec-a67f-ebb1e1392761.roa (raw, json)
Hash identifier: tXJNDgR3eFbATMDifKpTr4MED7CR9e6UnJXz0Auk5P0=
Subject key identifier: F1:43:AD:36:BB:B0:F5:00:6B:13:A7:1F:AB:3D:2C:22:73:FF:53:24
Certificate issuer: /CN=9fbd098f-9e01-4c26-9395-e5b63399acaf
Certificate serial: 010D0C9F43285848A99624293B35FA5233CDFC00
Authority key identifier: 38:52:68:1E:F9:A1:C1:15:72:67:A3:05:E1:1A:68:FC:23:8B:73:10
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9fbd098f-9e01-4c26-9395-e5b63399acaf.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9fbd098f-9e01-4c26-9395-e5b63399acaf/54ac8e81-4e5f-36ec-a67f-ebb1e1392761.roa
Signing time: Sat 25 Jan 2025 14:00:52 +0000
ROA not before: Sat 25 Jan 2025 14:00:52 +0000
ROA not after: Fri 25 Apr 2025 13:00:52 +0000
asID: 14939
IP address blocks: 2604:5000:1000::/36 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a9:96:24:29:3b:35:fa:52:33:cd:fc:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fbd098f-9e01-4c26-9395-e5b63399acaf
Validity
Not Before: Jan 25 14:00:52 2025 GMT
Not After : Apr 25 13:00:52 2025 GMT
Subject: CN=0adb8072-f7d6-4592-9644-03a44ea237fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b8:fa:de:b7:c1:2f:17:14:b1:84:d9:0e:45:
63:57:26:fc:5c:ce:71:6f:c3:80:60:86:f5:02:9d:
9b:56:2d:f5:34:69:ed:4d:47:1a:ab:d6:c1:91:0a:
ae:c4:12:9f:92:2a:53:cb:26:68:81:74:e9:7f:65:
11:81:88:d0:7e:71:41:d6:b0:32:3c:5f:ca:71:56:
c0:06:70:87:25:cc:8d:b6:1f:b7:98:52:cb:9f:66:
71:37:9e:d5:78:fe:95:8d:1d:d2:a8:3a:df:ac:af:
bc:7c:cd:a1:c4:23:e3:11:1d:78:0f:d7:19:2d:c1:
87:28:e1:8d:8d:b7:f4:3c:ac:2c:93:bc:89:3d:48:
01:61:6a:e0:7f:f0:f2:11:8b:59:8d:7e:5f:5a:0d:
f2:47:39:86:c0:68:a4:36:f8:e4:ba:2d:c3:c2:d5:
2a:e5:ad:19:93:78:c6:d4:ca:69:76:1d:2d:32:d3:
59:00:3d:8a:09:07:3c:fe:b8:05:0e:5b:85:66:7d:
4b:c2:55:b1:08:9d:21:05:cd:bd:fa:06:52:14:95:
81:a8:6f:eb:cd:f8:74:7a:ff:5c:aa:67:8d:af:7a:
ed:8a:00:ba:f0:f9:26:14:8f:4d:99:b4:28:69:20:
e8:29:cb:65:7f:63:15:e1:3a:7d:94:71:8b:fc:07:
fb:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:43:AD:36:BB:B0:F5:00:6B:13:A7:1F:AB:3D:2C:22:73:FF:53:24
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9fbd098f-9e01-4c26-9395-e5b63399acaf/54ac8e81-4e5f-36ec-a67f-ebb1e1392761.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9fbd098f-9e01-4c26-9395-e5b63399acaf/9fbd098f-9e01-4c26-9395-e5b63399acaf.crl
X509v3 Authority Key Identifier:
keyid:38:52:68:1E:F9:A1:C1:15:72:67:A3:05:E1:1A:68:FC:23:8B:73:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9fbd098f-9e01-4c26-9395-e5b63399acaf.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:5000:1000::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8b:83:bb:1b:e3:86:34:bb:eb:38:e3:64:5e:5d:38:b2:6b:54:
ae:c0:3b:b1:64:49:f5:d8:f6:0d:92:2b:07:f2:16:ab:d8:97:
34:c7:7d:d0:b3:9c:61:b8:b0:26:40:63:93:b7:7d:ef:f8:d4:
0d:f3:c7:38:ec:af:0c:1d:bb:20:d5:55:bb:88:70:67:b2:ee:
32:3b:1c:bf:f5:81:b4:d4:35:3f:dd:46:a2:81:0d:6d:e9:72:
10:d6:3f:fa:b6:9b:02:14:a3:f7:a5:6b:3b:fc:34:37:96:cd:
dc:cd:01:ef:0e:f6:21:d4:13:56:67:43:ab:89:1d:66:cb:ee:
4c:88:a5:94:4d:c7:38:87:fc:d8:b9:42:7c:98:50:9a:1e:04:
98:d2:68:ed:00:bc:d9:3a:8d:c8:75:13:2f:b4:e9:f7:64:0e:
34:19:20:e4:01:6a:59:98:27:71:72:a2:e1:c1:a5:9e:a8:03:
35:42:f7:d5:e2:d4:c7:ac:ac:fd:5a:96:dc:9d:38:15:b6:6f:
62:f0:c8:6e:02:54:e9:09:f3:8e:54:c0:c4:ff:4a:b9:cd:a1:
36:86:77:69:0a:8e:46:21:be:89:29:4d:71:c5:2e:e6:05:e2:
93:a8:c7:1a:ce:80:40:90:5b:7b:d5:0b:0b:77:d9:a6:cc:22:
be:9f:df:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 14:34:19 2025 by rpki-client