Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/d391bb51-4a6a-32a2-9219-49391be11d04.roa
File: d391bb51-4a6a-32a2-9219-49391be11d04.roa (raw, json)
Hash identifier: N5j7vIKJNA+SN40sO0R5Bh4kQgSBsJ3ttLf687/cYiQ=
Subject key identifier: 3E:B6:4E:D1:2E:A2:FB:11:DE:D8:1D:AD:11:62:5C:FC:D8:B5:05:7F
Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial: 010D0C9F432858483E1AB99484BE8595A3715500
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/d391bb51-4a6a-32a2-9219-49391be11d04.roa
Signing time: Wed 18 Dec 2024 02:00:39 +0000
ROA not before: Wed 18 Dec 2024 02:00:39 +0000
ROA not after: Tue 18 Mar 2025 01:00:39 +0000
asID: 20940
IP address blocks: 2001:418:1401:18::/64 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:3e:1a:b9:94:84:be:85:95:a3:71:55:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Validity
Not Before: Dec 18 02:00:39 2024 GMT
Not After : Mar 18 01:00:39 2025 GMT
Subject: CN=5bdff6f8-4cbd-4399-b9c1-59027da00575
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:0f:09:64:e2:74:26:0e:8b:ae:46:00:09:e9:
6f:c9:9a:e6:98:0a:db:e5:f9:47:8d:4a:62:0d:91:
24:58:fc:38:d2:4c:99:28:cf:29:a9:87:34:87:fb:
db:dd:1b:83:df:d7:fb:d8:4f:81:e7:53:d9:4c:44:
dd:ba:2c:78:44:7c:e3:2c:59:23:ba:7c:33:fb:71:
7c:31:6c:d3:3c:01:5d:c5:3f:f3:c6:28:f8:16:5b:
67:87:32:6b:21:7f:36:c5:f2:40:ac:63:56:1a:05:
70:98:cf:a4:53:c0:81:27:17:c3:8b:ec:cd:c8:5b:
6b:a7:ad:51:f9:b7:21:11:9c:de:59:15:4c:2e:5f:
d6:f8:e0:28:4a:98:07:34:bc:8f:4b:ea:02:9d:1b:
b3:c8:e3:9a:c1:9a:20:30:33:77:23:c4:cd:b7:91:
14:a3:7b:33:83:09:9c:0b:48:54:f1:4d:20:91:b7:
de:4d:28:72:c3:5c:a2:72:da:b9:8d:f2:63:d8:3b:
44:90:18:fd:a9:34:f8:7d:2c:a8:05:10:08:f0:6c:
e5:2c:99:10:7d:61:34:2e:de:e3:57:e0:61:ad:8d:
bb:51:8d:e2:99:19:86:c1:7a:a5:22:40:d8:7f:13:
a5:00:7a:e0:40:98:95:db:a9:01:8f:7d:4b:af:81:
eb:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:B6:4E:D1:2E:A2:FB:11:DE:D8:1D:AD:11:62:5C:FC:D8:B5:05:7F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/d391bb51-4a6a-32a2-9219-49391be11d04.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
X509v3 Authority Key Identifier:
keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:418:1401:18::/64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
21:4e:b8:e9:9c:d5:18:c9:a0:4a:c1:08:77:e7:89:a8:b8:69:
0b:9e:9d:0e:a9:02:6f:06:27:df:fe:f1:33:e9:42:a0:5f:cc:
58:db:8d:ba:39:90:a5:b3:63:4b:0f:96:0e:01:95:cd:04:b5:
be:3c:a3:27:b0:97:06:e2:2e:10:c0:9f:e6:e3:73:50:8b:6f:
78:11:fd:70:47:5c:eb:09:62:56:58:53:da:81:24:7f:50:18:
27:7f:1b:18:e6:20:5a:30:73:14:9f:f7:2e:23:c3:fd:06:88:
46:d6:56:8b:05:d9:55:57:d0:58:de:b7:57:32:9e:53:f0:ac:
d0:06:cd:e4:03:46:19:78:2e:8b:8c:0d:5f:ab:a8:d8:ba:67:
62:25:f6:9e:c0:86:09:cb:03:86:81:e6:1b:3f:a8:4e:4f:4b:
0f:2d:50:7c:a7:a3:cb:a3:e2:2b:b9:a6:01:91:d0:52:81:e4:
84:6c:47:f4:c6:ec:90:df:32:37:32:ef:39:e0:17:8b:fa:13:
88:0f:e5:9a:80:7d:c3:04:d0:13:37:bf:61:02:3b:4a:37:71:
45:d4:8e:32:09:51:31:85:ad:2d:e5:8d:07:b0:47:63:51:0f:
52:f3:dd:8e:b2:c8:fe:cf:b6:c7:c0:e9:82:ec:e9:72:74:1c:
f4:db:ad:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:00:42 2025 by rpki-client