Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/1e6876f9-49d1-343a-8c70-400d9e4a4ed1.roa
File: 1e6876f9-49d1-343a-8c70-400d9e4a4ed1.roa (raw, json)
Hash identifier: XezQikDUr93EWHDGC/SSspmn4ev/hlte4Ww6qFXz9TU=
Subject key identifier: A1:F1:A0:12:0C:55:80:98:47:E0:26:BC:B6:D5:14:FE:EB:53:B0:B3
Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial: 010D0C9F4328584839EAC9B7CFCF9F2C7F9EFF40
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/1e6876f9-49d1-343a-8c70-400d9e4a4ed1.roa
Signing time: Mon 16 Dec 2024 14:00:51 +0000
ROA not before: Mon 16 Dec 2024 14:00:51 +0000
ROA not after: Sun 16 Mar 2025 13:00:51 +0000
asID: 397601
IP address blocks: 2001:418:1456:b20::/64 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:39:ea:c9:b7:cf:cf:9f:2c:7f:9e:ff:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Validity
Not Before: Dec 16 14:00:51 2024 GMT
Not After : Mar 16 13:00:51 2025 GMT
Subject: CN=1c9e694f-85be-420c-b36f-b43e6b24d6a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:ae:1a:34:d4:32:0f:bb:29:6d:46:49:8f:4e:
43:f4:82:18:9e:13:a0:41:9c:b1:d8:ef:60:74:bb:
42:9e:9a:aa:50:2c:77:ec:e8:90:aa:0d:cd:82:c9:
e1:bf:b7:98:46:0a:9c:98:d7:4f:86:fa:4a:35:f4:
1b:6f:cc:cc:64:da:5e:03:0a:c1:ac:d0:a4:6f:3e:
74:98:54:03:b5:d6:ef:d6:c6:ea:cd:35:e4:61:a9:
50:59:bf:22:00:48:58:13:eb:0a:ae:b3:a9:94:75:
49:1d:b9:70:0f:de:bd:8f:b7:0d:4a:5d:3d:40:e0:
9f:23:be:d9:f2:e9:aa:6b:31:4e:03:2d:f4:1b:66:
15:d1:a3:f2:ba:c5:ec:20:12:8b:56:82:ee:95:19:
a3:d3:71:79:63:af:fd:11:84:5c:20:3a:c1:ea:11:
ad:01:a9:72:3e:b9:a8:a0:e7:ab:5a:ab:76:4a:a9:
2b:4a:d4:b8:29:64:a3:26:b1:70:7a:77:fc:14:e2:
fa:63:c9:14:c7:1f:9c:1a:5d:53:40:ff:0e:87:98:
54:3b:1c:55:c9:4d:de:57:a1:ac:1d:2a:6e:ae:c5:
d7:f6:cf:e8:52:00:41:e3:e8:4d:cf:fb:ee:c8:b1:
a9:5b:e1:47:8b:3e:32:20:89:1d:dd:ba:d6:d8:45:
ae:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:F1:A0:12:0C:55:80:98:47:E0:26:BC:B6:D5:14:FE:EB:53:B0:B3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/1e6876f9-49d1-343a-8c70-400d9e4a4ed1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
X509v3 Authority Key Identifier:
keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:418:1456:b20::/64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
70:9a:10:7b:7f:62:73:9d:74:17:3e:6e:4a:c9:5b:cd:e0:6f:
a7:e4:33:c3:d4:73:87:c0:95:c1:89:84:27:81:60:80:ef:6c:
98:6b:dd:5e:71:ec:4c:2a:27:e2:39:d0:c8:89:52:8b:06:89:
8a:a5:ad:e8:40:ee:4f:33:cf:10:20:bf:f6:d6:99:ae:10:6e:
5f:9a:63:24:2b:1d:84:6a:34:f7:5f:49:e4:49:a4:64:d6:ee:
b6:de:cb:dd:ba:12:26:27:c7:d2:02:79:4d:46:d8:dc:0d:ba:
87:31:21:d9:0d:6c:d6:54:4d:7d:06:5a:b3:21:b4:ea:98:af:
a1:bc:a0:11:f7:bb:45:26:22:52:0a:74:dc:6e:63:10:d6:b1:
56:78:42:55:6a:df:0b:53:b9:68:5c:4a:c2:a9:9d:51:45:5d:
cd:00:34:99:32:6f:60:12:2c:8b:69:da:ca:88:c9:21:a1:38:
90:ed:74:61:7e:81:e3:18:9a:bc:ee:7e:8b:82:76:e5:a8:27:
19:3e:da:d3:23:1a:83:a6:19:ab:a9:2e:f7:50:7c:b6:92:31:
d7:32:e8:80:62:12:0d:a2:54:01:02:ad:f6:2d:36:d5:9e:6b:
45:58:1a:8a:31:aa:06:c3:65:ee:2f:23:da:2c:02:88:12:e9:
68:56:a5:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:36:47 2025 by rpki-client