Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/d5cd4bd8-7b59-38d7-9eb1-0513e756b884.roa
File: d5cd4bd8-7b59-38d7-9eb1-0513e756b884.roa (raw, json)
Hash identifier: 5A+6jKbb8IlPiyqTmFMJ4nyDSCIAuV+VsQTvR6NVRNk=
Subject key identifier: A8:86:E1:15:6B:B0:EB:BE:37:33:3D:B6:AA:30:F7:9F:CA:3C:47:F4
Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial: 010D0C9F4328584838855C2BB4669A6DD5C50400
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/d5cd4bd8-7b59-38d7-9eb1-0513e756b884.roa
Signing time: Mon 16 Dec 2024 02:00:39 +0000
ROA not before: Mon 16 Dec 2024 02:00:39 +0000
ROA not after: Sun 16 Mar 2025 01:00:39 +0000
asID: 1225
IP address blocks: 2001:418:1456:b16::/64 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:38:85:5c:2b:b4:66:9a:6d:d5:c5:04:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Validity
Not Before: Dec 16 02:00:39 2024 GMT
Not After : Mar 16 01:00:39 2025 GMT
Subject: CN=9d946b8e-d398-4a6b-991c-b44827fa0aea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:22:fe:0a:fa:25:b7:cd:2e:2c:1f:08:b8:2f:
d0:4a:17:bf:c5:6a:6a:43:86:19:81:3d:05:e7:57:
22:cb:d9:a7:0e:0f:62:ae:9d:93:a9:57:bd:8e:09:
ce:cd:aa:ea:a7:48:f3:30:62:8b:5b:57:7e:da:bc:
07:e0:e0:ae:5e:3a:9a:db:d9:1b:b5:b5:88:7d:55:
7d:55:e4:cb:33:37:3c:b4:06:7e:79:8d:6a:bd:4e:
52:31:47:e0:90:0b:7c:74:4b:ec:a4:ab:e5:1c:11:
60:ce:a0:6b:c5:8d:69:79:60:37:9d:84:35:db:6c:
8a:93:75:f5:6d:41:ed:7d:23:98:f9:89:12:72:e2:
46:a8:e6:d6:1e:33:cc:dd:3f:09:78:50:c6:58:11:
86:7b:9d:b9:55:0d:92:72:65:86:92:59:ec:49:65:
b1:94:f0:96:ae:53:a7:fd:c2:a1:2b:2d:65:2c:dd:
61:13:41:ed:c1:92:ae:23:44:de:ef:55:c4:c4:d1:
55:22:d6:28:29:ad:05:d6:87:6d:a1:e0:d0:b2:77:
42:2b:ab:d2:6d:21:cd:10:21:6f:eb:98:9d:87:4e:
cc:28:78:f3:28:df:2c:19:8d:51:5e:be:19:e8:60:
fc:a3:66:a3:a9:de:9f:6f:f0:16:79:b2:41:91:2b:
1b:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:86:E1:15:6B:B0:EB:BE:37:33:3D:B6:AA:30:F7:9F:CA:3C:47:F4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/d5cd4bd8-7b59-38d7-9eb1-0513e756b884.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
X509v3 Authority Key Identifier:
keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:418:1456:b16::/64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
82:33:ae:94:c5:1a:a8:db:fd:5e:6d:d3:45:bd:ff:09:9e:89:
c9:34:36:07:b0:6f:e6:24:a5:6a:9f:9b:6e:6d:61:a3:c6:73:
27:86:c8:9e:e0:7a:b7:1d:3b:3e:3b:02:4c:a9:bf:d7:f3:34:
82:c1:f6:89:9e:c1:bc:5e:af:1a:6c:d7:e2:27:a9:ba:d0:97:
4d:f8:94:4c:6a:aa:55:e4:a9:ea:bf:14:fc:5b:33:75:67:77:
bf:09:2b:e1:1b:58:45:d1:14:3e:bd:10:22:27:bc:83:ba:4e:
62:00:f1:e8:56:83:4d:86:7c:7b:a7:3b:13:8d:f9:d4:75:78:
ee:5f:ed:43:1e:5a:2b:95:40:e8:e1:b5:f9:76:9a:2f:9b:b2:
08:ac:ab:d1:53:29:ed:d5:22:70:59:73:5c:c1:79:6f:d2:b1:
74:78:c7:39:7a:86:90:1d:f2:eb:7b:0c:a3:ce:16:5d:80:7a:
b7:c3:ff:14:9b:a9:75:6e:df:17:ea:9a:91:cd:c4:c0:30:b9:
99:8f:fd:53:1b:89:ee:f2:77:fc:65:d3:ed:bd:3a:2c:c1:16:
2f:2c:a5:c6:67:03:6a:da:aa:9c:ef:43:11:0e:fe:28:6d:54:
9d:b9:06:9f:c8:42:f3:93:a2:d1:03:8e:20:8d:04:da:ea:90:
15:9b:e0:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:47:20 2025 by rpki-client