Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/803c99b8-f23c-355a-bcca-59b3fa52407e.roa
File: 803c99b8-f23c-355a-bcca-59b3fa52407e.roa (raw, json)
Hash identifier: nMfSW6NLwYcgsGdD2GW6sWh/N34t/k7PMnxQ1yIes1g=
Subject key identifier: AB:EA:D1:6E:14:FA:1D:6F:83:5D:B6:F0:76:55:57:07:BE:CC:BC:DF
Certificate issuer: /CN=8e2f3353-82b9-432b-bd94-000bf5cef0c3
Certificate serial: 010D0C9F432858480EA5073926805EE2B3A5EB00
Authority key identifier: B4:B5:6C:64:46:3D:47:EB:DC:A5:0E:CB:D0:7B:9A:33:43:55:40:45
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/803c99b8-f23c-355a-bcca-59b3fa52407e.roa
Signing time: Sun 01 Dec 2024 02:00:39 +0000
ROA not before: Sun 01 Dec 2024 02:00:39 +0000
ROA not after: Sat 01 Mar 2025 02:00:39 +0000
asID: 21928
IP address blocks: 2607:fb90::/28 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:0e:a5:07:39:26:80:5e:e2:b3:a5:eb:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e2f3353-82b9-432b-bd94-000bf5cef0c3
Validity
Not Before: Dec 1 02:00:39 2024 GMT
Not After : Mar 1 02:00:39 2025 GMT
Subject: CN=b307d079-7068-4609-9d95-72467fd9bbf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:54:dc:1a:42:cd:9e:93:e3:56:84:32:9c:a8:
67:16:0a:e1:ce:0b:cc:5d:58:07:e5:82:84:df:b9:
2b:48:68:85:9b:4a:d3:91:33:b7:21:56:52:5f:bb:
a9:92:4d:a6:a5:9b:b3:1b:c8:ef:7e:0d:0c:1f:f8:
cf:91:3b:eb:fc:96:1c:3b:2c:e2:5f:02:ce:b4:b9:
24:cb:9a:be:77:64:e0:ea:74:6c:92:36:04:69:8f:
8e:f1:13:9b:01:45:80:53:5e:99:dd:75:c2:6a:32:
dd:da:08:77:d6:f9:4b:8a:7e:f1:3b:8a:0a:e2:ab:
1b:b3:3b:34:3a:a2:db:1c:4e:08:cb:9a:fd:56:c0:
7e:75:9e:b0:95:cb:ca:9b:c6:44:ed:36:11:25:d7:
33:9c:43:df:10:72:50:e3:67:91:38:34:2b:46:52:
11:9d:e4:40:60:90:e3:74:f1:ac:41:af:9e:7d:c4:
af:b7:9b:a7:db:70:17:48:bf:8a:e1:e5:49:ff:c8:
b9:79:28:62:3d:ec:1f:f4:70:71:f2:9b:50:0a:dc:
ba:09:db:ad:67:ea:b8:cf:f3:6d:20:62:89:fa:89:
f2:fb:ad:59:f1:11:c1:1f:31:27:ce:59:94:3c:b5:
e8:57:1a:4f:d3:7a:f7:ae:2b:1e:c1:05:bf:60:64:
29:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:EA:D1:6E:14:FA:1D:6F:83:5D:B6:F0:76:55:57:07:BE:CC:BC:DF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/803c99b8-f23c-355a-bcca-59b3fa52407e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.crl
X509v3 Authority Key Identifier:
keyid:B4:B5:6C:64:46:3D:47:EB:DC:A5:0E:CB:D0:7B:9A:33:43:55:40:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:fb90::/28
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
e2:28:c6:5c:cf:1a:ea:73:aa:1b:49:0a:02:e8:15:d9:41:fa:
0a:58:5e:29:2a:f0:66:b5:0e:8e:41:d0:20:1a:16:ad:4b:90:
2f:d0:92:93:51:68:7b:ff:ea:b8:18:f2:b7:5c:2a:7e:2c:1a:
6b:09:fd:36:ed:71:56:83:66:52:86:cc:f1:49:fa:80:62:e4:
54:92:bf:bd:4d:63:5f:83:b0:d3:fc:ed:1d:59:4f:7e:e1:6f:
f5:d3:3d:3a:c4:04:a1:69:1d:fe:86:bd:d4:3d:17:68:75:1a:
74:54:06:ac:e8:ce:7c:68:6d:3a:fd:cf:36:bb:39:83:d8:6f:
18:03:e0:21:26:81:0b:ad:11:ec:63:01:c3:d0:d0:b9:50:3a:
67:77:79:8d:21:44:76:b1:0a:92:d5:7a:62:34:6e:dd:2f:9a:
ee:ea:db:15:a9:b9:65:68:52:a4:23:0d:ff:5c:a1:e0:30:db:
00:01:c1:01:35:7c:fe:fd:94:c6:17:07:d0:f2:3b:88:d7:03:
7d:b7:96:6e:26:ea:91:b4:35:0e:7f:7a:18:73:07:82:42:94:
66:11:0b:2c:64:3a:f4:a5:c5:cd:4e:bc:1e:e8:23:99:79:a2:
8e:6d:f3:5f:9a:70:85:8b:04:52:d6:8d:76:55:38:2f:0c:1e:
0a:01:7e:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:42:35 2025 by rpki-client