Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/d6e4dbfc-91d2-374d-be45-7b40d77f82d4.roa
File: d6e4dbfc-91d2-374d-be45-7b40d77f82d4.roa (raw, json)
Hash identifier: otaTRhm0Xv5iwwEBGM/Lc8DZumwFi0LspFM0NwXqTMY=
Subject key identifier: 1A:31:FE:FF:B6:6A:5F:4E:77:4E:A4:40:D3:43:F8:C8:5C:1B:A3:7B
Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial: 010D0C9F4328584862658CF191D2B333D5066DE0
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/d6e4dbfc-91d2-374d-be45-7b40d77f82d4.roa
Signing time: Tue 31 Dec 2024 02:00:40 +0000
ROA not before: Tue 31 Dec 2024 02:00:40 +0000
ROA not after: Mon 31 Mar 2025 01:00:40 +0000
asID: 14618
IP address blocks: 2605:4300:2c13::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:62:65:8c:f1:91:d2:b3:33:d5:06:6d:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Validity
Not Before: Dec 31 02:00:40 2024 GMT
Not After : Mar 31 01:00:40 2025 GMT
Subject: CN=2e37e141-00cd-4517-92c4-eea92a2ac6ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:ba:0c:a7:1c:cd:07:c3:05:e5:24:f6:7f:61:
2e:b1:aa:95:12:6a:42:75:c4:99:15:96:67:c0:0d:
47:b6:cc:ff:d2:02:72:a9:b2:bb:37:97:4d:f5:62:
5e:2b:38:f7:fd:2e:c5:16:49:69:1b:87:e5:02:47:
99:44:a4:53:b1:df:01:e1:1c:54:3a:c7:5a:13:4f:
61:51:47:78:22:57:cf:66:05:55:9e:92:e2:88:62:
86:df:00:2d:53:7e:86:d5:31:4b:5e:b9:34:6a:e4:
c6:ed:54:24:6f:b6:63:14:2a:03:d1:fd:5a:15:77:
8f:66:da:5e:e4:ee:ff:b4:ac:60:a7:76:b9:82:a0:
4a:e5:79:dd:a2:4e:91:71:53:b6:a8:d5:3a:c3:ea:
6d:4c:55:98:96:db:84:d9:a4:d3:98:18:bb:b0:80:
12:48:e5:2f:30:97:68:7e:7e:41:a4:eb:0c:9c:5e:
3e:de:28:c1:bd:eb:b7:98:3d:aa:16:e3:f9:09:c1:
42:fe:c7:27:5e:5c:49:28:17:41:cb:f9:38:9e:a0:
7f:09:c2:2f:bb:31:3d:1f:02:99:04:09:fc:d0:ef:
6c:87:11:4b:f9:0a:45:5c:a4:20:1e:bf:2e:3a:92:
d4:f8:c8:0c:5b:ae:55:37:cd:d5:b9:a7:33:69:c5:
22:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:31:FE:FF:B6:6A:5F:4E:77:4E:A4:40:D3:43:F8:C8:5C:1B:A3:7B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/d6e4dbfc-91d2-374d-be45-7b40d77f82d4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
X509v3 Authority Key Identifier:
keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
sbgp-ipAddrBlock: critical
IPv6:
2605:4300:2c13::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9d:a8:40:64:a1:27:8d:bd:38:c1:85:3b:84:b9:b8:40:10:41:
98:23:b0:46:93:84:e1:21:1f:44:e8:a9:03:d6:7b:d7:75:4f:
c7:1b:79:ae:c4:e1:ea:0b:35:ed:2e:17:b3:67:f8:90:a3:9b:
91:45:a6:1a:a3:7e:73:71:67:91:8c:00:c0:30:35:0a:bf:33:
49:4e:d1:f8:1e:0d:7d:0b:12:77:27:a9:73:80:ac:0d:80:93:
3a:06:d9:0c:71:16:ad:8e:df:1d:7c:d4:5d:8d:8c:df:14:fb:
ac:ad:40:c4:b1:67:b1:22:58:a3:7b:51:b5:d4:74:f5:3c:23:
21:80:00:e4:00:86:5f:9b:98:fe:c6:86:b4:c5:e8:17:e6:4d:
4c:40:e7:eb:82:2c:28:b1:77:6f:b2:59:08:bb:d1:49:5d:89:
4e:ee:77:14:d9:56:3c:89:fe:40:83:78:34:7d:2b:de:3d:4c:
9f:2d:f3:40:e0:52:b1:da:78:6f:9b:91:0b:2c:ef:0c:3c:df:
10:86:8b:27:72:47:ed:3d:97:31:5c:bb:fe:c5:b0:a0:c2:bf:
18:47:b4:00:42:61:b7:c9:1a:58:51:82:72:aa:8e:b7:f2:11:
67:f7:ea:39:b4:fe:5e:65:32:78:7c:0d:92:bb:2a:74:11:4c:
d4:e9:73:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 22:53:57 2025 by rpki-client