Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d/8e29d75c-ea6f-32dc-ad7f-56d0f4a3195f.roa
File: 8e29d75c-ea6f-32dc-ad7f-56d0f4a3195f.roa (raw, json)
Hash identifier: 7nBjnh1gfxveBH78oi+GoDWLHOq3XYxRT17YKREcORY=
Subject key identifier: 38:71:92:05:74:BC:68:DF:55:BE:F1:B6:8C:84:9D:38:AA:00:84:92
Certificate issuer: /CN=cb48baa8-6c83-45eb-b09b-5fbd1e42c57d
Certificate serial: 010D0C9F432858487A20777DDAF58E3294A61350
Authority key identifier: E9:36:DC:58:66:FC:68:02:BF:A6:99:DE:B4:DD:13:5E:4C:D1:27:CE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d/8e29d75c-ea6f-32dc-ad7f-56d0f4a3195f.roa
Signing time: Wed 08 Jan 2025 14:00:51 +0000
ROA not before: Wed 08 Jan 2025 14:00:51 +0000
ROA not after: Tue 08 Apr 2025 13:00:51 +0000
asID: 237
IP address blocks: 2001:48a8::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7a:20:77:7d:da:f5:8e:32:94:a6:13:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb48baa8-6c83-45eb-b09b-5fbd1e42c57d
Validity
Not Before: Jan 8 14:00:51 2025 GMT
Not After : Apr 8 13:00:51 2025 GMT
Subject: CN=d5a134cc-aca5-4fa7-babb-5036aa6fcd32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:46:bd:d8:a3:8a:85:c2:bd:72:29:26:71:c0:
19:0e:6d:3c:78:0c:5c:39:3c:6c:66:d9:1a:02:d4:
3c:f1:25:ad:28:24:7e:65:56:be:d1:97:52:9f:a1:
f3:80:fd:7a:d8:58:98:95:a6:7f:74:87:e2:1c:92:
50:d6:ac:dd:9b:5e:6b:37:92:a2:76:05:dc:c5:b2:
27:43:5e:ea:34:7f:0b:3c:19:7f:f6:b8:69:a1:e7:
4e:bd:6b:aa:df:4c:d1:bb:94:87:ef:44:fb:5b:47:
d6:e6:66:4a:f6:3b:84:fa:8a:36:ae:db:2c:bb:1b:
6c:f8:07:84:91:23:a5:08:e7:c3:a8:ae:2b:50:9d:
6a:c7:ae:43:54:f0:6c:d1:16:fe:c0:a7:1f:e5:21:
0f:f8:20:70:ec:16:cf:9d:a0:b1:b2:01:e9:6a:57:
da:1c:9b:ee:70:8b:89:36:27:b4:a5:63:5e:32:6f:
f7:6c:51:ee:b8:2f:b1:d5:6e:df:b6:7c:89:90:c8:
c3:8f:ca:cb:0d:1b:48:1c:7f:01:d1:0b:af:47:b8:
90:a9:fd:b3:c5:b6:68:17:c8:b6:2e:42:10:fd:55:
b1:3a:cc:e2:a9:6c:87:f8:00:76:d4:7a:39:f8:6b:
c7:4e:3b:3b:78:46:19:1a:96:fc:e8:1a:80:7a:55:
d3:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:71:92:05:74:BC:68:DF:55:BE:F1:B6:8C:84:9D:38:AA:00:84:92
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d/8e29d75c-ea6f-32dc-ad7f-56d0f4a3195f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d.crl
X509v3 Authority Key Identifier:
keyid:E9:36:DC:58:66:FC:68:02:BF:A6:99:DE:B4:DD:13:5E:4C:D1:27:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:48a8::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7a:50:d6:66:f7:48:29:a7:73:a6:eb:75:0b:83:a2:3a:8e:f6:
7c:65:e6:89:c3:4a:2b:07:dd:02:20:d1:9d:b2:0e:75:5f:6b:
c0:38:7c:f2:2a:f6:e0:7f:20:ef:d2:e2:05:30:52:03:33:fd:
48:af:78:7c:fc:95:48:16:4e:a2:cd:44:9c:68:40:ba:30:6a:
13:ee:38:58:eb:86:5a:9f:96:fa:bc:ad:3a:a8:9d:6d:69:08:
24:e0:96:71:fd:55:26:96:b9:2f:0c:f0:25:ef:82:8c:23:d5:
64:4d:a0:dd:7c:85:5c:56:6c:32:9a:f0:4d:b2:c9:c2:36:e1:
bc:92:28:63:d6:45:c4:a5:68:26:5c:6c:f4:e1:cd:66:cd:15:
1d:01:95:73:62:68:a2:30:d6:80:d8:ff:24:af:ae:af:a8:be:
17:22:6a:89:85:2b:b9:54:f9:c1:b7:46:73:3f:15:1e:ac:50:
5d:db:83:43:1d:b2:2c:0d:2f:b6:33:46:6f:80:b5:6f:fa:a8:
e1:d9:e9:44:7a:11:96:a8:76:6e:dd:28:2f:26:c7:7d:34:89:
9e:9d:d9:81:b8:36:c5:56:fd:28:1a:62:6e:e2:f8:22:2b:55:
1c:a8:d0:2e:f3:72:43:de:72:03:93:27:97:e8:90:22:af:e8:
e4:aa:26:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:24:52 2025 by rpki-client