Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1dbbbca0-01f5-4c72-958f-9e5ee2c99e2a/b513e3d0-2400-38c1-ab0a-575b707caf39.roa
File: b513e3d0-2400-38c1-ab0a-575b707caf39.roa (raw, json)
Hash identifier: 1KKttT1e8QwQylr0Q4QQTqQiE1Xk2uNdzBH5Vk1w3KY=
Subject key identifier: 35:F3:D6:09:A7:8A:C6:E4:DF:A5:89:A2:A1:49:F2:B2:27:A3:68:6A
Certificate issuer: /CN=1dbbbca0-01f5-4c72-958f-9e5ee2c99e2a
Certificate serial: 010D0C9F432858486C2B1F59AB67BE09252FB080
Authority key identifier: 41:7C:7B:A8:34:ED:81:03:82:86:EE:D9:97:FA:70:1C:5B:6F:27:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1dbbbca0-01f5-4c72-958f-9e5ee2c99e2a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1dbbbca0-01f5-4c72-958f-9e5ee2c99e2a/b513e3d0-2400-38c1-ab0a-575b707caf39.roa
Signing time: Fri 03 Jan 2025 14:00:51 +0000
ROA not before: Fri 03 Jan 2025 14:00:51 +0000
ROA not after: Thu 03 Apr 2025 13:00:51 +0000
asID: 32080
IP address blocks: 2607:29c0:1009::/48 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6c:2b:1f:59:ab:67:be:09:25:2f:b0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dbbbca0-01f5-4c72-958f-9e5ee2c99e2a
Validity
Not Before: Jan 3 14:00:51 2025 GMT
Not After : Apr 3 13:00:51 2025 GMT
Subject: CN=c2f68907-6b20-4fbc-8018-fa106938d12d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:5c:8a:1a:3c:4d:0b:c4:7f:71:2a:bb:78:07:
7c:40:13:53:3b:07:1f:ce:e0:3d:2b:99:38:02:85:
ec:f7:64:5b:ec:aa:35:69:94:ea:91:4d:35:ad:1f:
38:aa:43:00:2e:1b:1f:90:4a:49:59:62:40:ed:e3:
3c:9d:c4:e4:14:b1:82:ab:81:24:61:c3:94:f8:73:
07:09:12:bd:12:f0:32:20:66:c6:ce:1f:57:a9:ca:
56:7e:2f:02:21:3e:6b:3f:a2:c9:50:ea:fb:9d:f9:
3d:28:5b:89:ac:0d:0a:45:de:f8:9f:f1:d9:90:76:
5b:70:28:36:c0:f7:e4:74:87:09:94:f9:a1:63:c5:
1d:f1:0d:90:16:56:be:f2:de:3c:f5:12:03:ef:89:
db:78:43:86:f1:e6:9b:f3:af:8b:d0:3f:90:d7:76:
48:6d:71:66:cc:4f:fe:cd:e2:87:80:ed:c3:8d:fa:
9d:de:0a:25:40:61:b5:a8:d8:a6:3c:db:98:77:8a:
c9:92:d3:68:94:e2:69:b2:4d:cf:a9:82:2b:a1:9e:
b3:22:79:13:80:10:d5:f6:75:a1:09:e7:79:e5:3d:
30:63:c8:a5:d2:d8:90:b4:92:db:1a:56:33:9e:bb:
77:76:36:2e:05:7f:22:94:58:3e:93:a0:6f:2e:0b:
b0:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:F3:D6:09:A7:8A:C6:E4:DF:A5:89:A2:A1:49:F2:B2:27:A3:68:6A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1dbbbca0-01f5-4c72-958f-9e5ee2c99e2a/b513e3d0-2400-38c1-ab0a-575b707caf39.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1dbbbca0-01f5-4c72-958f-9e5ee2c99e2a/1dbbbca0-01f5-4c72-958f-9e5ee2c99e2a.crl
X509v3 Authority Key Identifier:
keyid:41:7C:7B:A8:34:ED:81:03:82:86:EE:D9:97:FA:70:1C:5B:6F:27:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1dbbbca0-01f5-4c72-958f-9e5ee2c99e2a.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:29c0:1009::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
69:05:18:7a:20:98:27:f0:f7:e9:89:3d:24:8f:cd:db:c3:ed:
a1:b0:49:5e:56:97:72:f3:6a:94:dd:dd:c0:a8:4e:24:2a:f6:
12:e6:f8:f1:d4:e3:9d:ca:44:02:6f:89:9b:e1:90:df:8d:7c:
dc:1d:c5:e0:10:07:c2:23:8e:2a:c7:4b:09:a6:20:da:68:ab:
9d:03:06:6e:e4:89:03:34:81:0c:81:3a:b6:0f:35:09:81:d4:
9f:bd:99:88:4b:53:81:74:d7:32:d4:ea:89:0e:b6:03:b4:cf:
fc:28:06:85:71:e2:96:82:9f:d6:fa:17:cc:a2:a2:f1:7f:d5:
b5:aa:f4:ce:51:1f:0e:43:99:30:2b:bc:48:5a:eb:f8:f7:de:
2a:88:4e:80:3a:ab:86:54:e1:e3:ab:a0:a8:54:78:5c:1c:29:
f9:1e:4d:e2:ab:02:4b:bc:3c:64:7a:b6:5c:1c:12:a8:95:1a:
ef:6e:c3:1f:69:63:50:f0:7d:11:10:56:26:29:0a:dd:b4:ed:
2d:39:7d:aa:31:bc:1f:d0:b0:b8:35:a7:62:60:fb:00:cf:43:
1b:2c:57:79:1f:5d:e8:97:05:c7:6a:e0:ce:15:f5:00:0a:58:
3f:44:43:bf:84:a1:cf:ee:88:9b:e9:06:3b:7d:bb:2d:ab:6e:
46:79:d3:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:43:43 2025 by rpki-client