Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/7c9d1fa1-f4fa-3e7b-9895-d323f207bf49.roa
File: 7c9d1fa1-f4fa-3e7b-9895-d323f207bf49.roa (raw, json)
Hash identifier: KRUjz+0ED0rO9cIoRU+Rho07t1JsbUvxdsnDjE2dx3s=
Subject key identifier: E6:4A:66:F7:59:01:E3:B9:B4:2B:B3:D3:2E:B9:78:84:04:3F:A0:5B
Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial: 010D0C9F43285848388554EA7A85FF62585A3A00
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/7c9d1fa1-f4fa-3e7b-9895-d323f207bf49.roa
Signing time: Mon 16 Dec 2024 02:00:39 +0000
ROA not before: Mon 16 Dec 2024 02:00:39 +0000
ROA not after: Sun 16 Mar 2025 01:00:39 +0000
asID: 1225
IP address blocks: 2001:418:3ff:8::/64 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:38:85:54:ea:7a:85:ff:62:58:5a:3a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Validity
Not Before: Dec 16 02:00:39 2024 GMT
Not After : Mar 16 01:00:39 2025 GMT
Subject: CN=7d40e931-663b-4ce2-b0c8-8e0eacb43466
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d1:25:bf:c0:4f:cc:a6:89:73:8a:6b:37:b7:
a4:78:c9:a3:f1:22:dd:70:2b:75:07:6e:58:b6:98:
d5:f9:48:c9:03:b4:6a:50:a6:4f:17:0c:db:48:67:
13:ee:b3:02:78:87:04:c7:ba:fa:0d:66:8f:a8:1f:
2e:56:fa:32:8a:f7:0e:f4:be:cb:6b:f5:58:a3:b4:
0b:c6:f1:00:53:f7:d8:0d:f4:f7:b2:db:1d:46:92:
26:66:a3:f0:03:f6:94:48:e4:fa:18:a6:91:c4:c8:
3e:b5:48:70:3b:3d:1e:6f:89:ac:32:8a:92:6b:24:
ec:d9:f2:3c:90:95:40:b2:29:35:0a:19:c2:76:12:
48:c0:bc:2a:9e:23:96:1f:0e:d0:42:27:71:6f:8e:
8b:fc:84:ba:92:1a:0d:3e:b8:50:b9:73:31:46:8b:
e9:4a:94:ed:2c:cc:9b:26:b2:9b:c0:67:12:33:04:
fb:20:e0:14:11:be:d5:93:ee:a6:38:04:5b:1c:25:
ba:78:23:6a:65:a0:b0:d6:7f:39:c4:cf:53:fe:fd:
35:27:7e:f5:2d:22:f1:ef:e0:4f:c7:ec:9e:a5:71:
6f:56:0a:6d:1e:5e:c4:60:9c:71:2e:9e:b8:ce:6c:
25:81:54:5d:13:67:82:25:9e:76:5a:00:ff:f8:1c:
00:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:4A:66:F7:59:01:E3:B9:B4:2B:B3:D3:2E:B9:78:84:04:3F:A0:5B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/7c9d1fa1-f4fa-3e7b-9895-d323f207bf49.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
X509v3 Authority Key Identifier:
keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:418:3ff:8::/64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
13:bf:c7:c6:f0:64:ac:70:1d:83:19:51:11:ce:b8:8f:34:d8:
1c:e6:79:94:4e:58:d9:0e:36:c2:9d:cd:f5:3e:b4:cc:8b:b8:
a6:53:a1:f7:ef:86:7c:c3:66:55:d5:e9:13:b3:c8:7f:a6:dc:
87:e4:5e:e2:0e:23:5c:9f:ed:d5:63:0c:00:aa:fe:6a:07:69:
ff:42:c0:2d:d0:b9:de:b0:fb:1d:5c:08:51:a4:1e:4b:7e:25:
da:df:f1:81:f4:28:4d:7b:ca:72:8b:2a:90:dd:eb:e1:79:63:
37:23:eb:ed:70:b2:14:64:68:08:97:da:25:62:97:78:f9:87:
53:52:db:6d:03:7b:3c:40:b9:b9:06:e2:72:39:1e:9c:29:45:
65:c0:02:60:6d:5b:95:6d:58:ee:c6:eb:4c:06:81:f2:0f:d7:
e1:0f:77:3c:ad:51:d7:ce:20:5f:37:fc:7f:d6:42:09:79:ed:
ff:bb:f8:d0:fd:8a:79:e9:0d:45:51:7f:26:62:95:ed:2c:50:
6c:55:5e:26:10:e8:56:ed:d4:fa:21:64:22:78:0d:fb:c5:29:
d2:6a:12:64:93:af:2d:df:a5:1c:14:d5:0c:60:a5:36:5c:f7:
1d:9f:f7:a1:35:b8:05:68:6c:8a:0b:45:ce:a9:cc:ce:7d:a4:
09:9c:e4:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:47:44 2025 by rpki-client