Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d/d770de6c-e795-3458-b3fa-76797a8fc14c.roa
File: d770de6c-e795-3458-b3fa-76797a8fc14c.roa (raw, json)
Hash identifier: tOWX6c0MOb8w/SDhrDygt/WaU9PsISQQuxhyqQ61qXA=
Subject key identifier: A8:5D:B6:FA:AF:EC:6A:A5:6D:23:DF:0F:E1:3B:73:99:A3:0D:7A:48
Certificate issuer: /CN=cb48baa8-6c83-45eb-b09b-5fbd1e42c57d
Certificate serial: 010D0C9F43285848960B52CA0207D0B820F2F7E0
Authority key identifier: E9:36:DC:58:66:FC:68:02:BF:A6:99:DE:B4:DD:13:5E:4C:D1:27:CE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d/d770de6c-e795-3458-b3fa-76797a8fc14c.roa
Signing time: Sat 18 Jan 2025 14:00:52 +0000
ROA not before: Sat 18 Jan 2025 14:00:52 +0000
ROA not after: Fri 18 Apr 2025 13:00:52 +0000
asID: 229
IP address blocks: 2001:48a8:68f7::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:96:0b:52:ca:02:07:d0:b8:20:f2:f7:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb48baa8-6c83-45eb-b09b-5fbd1e42c57d
Validity
Not Before: Jan 18 14:00:52 2025 GMT
Not After : Apr 18 13:00:52 2025 GMT
Subject: CN=9cab18e2-ac3d-48ae-9c64-b5ec259adc65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:5e:fb:b1:15:0c:cb:f4:26:47:55:53:a5:9c:
e1:48:91:5e:d4:08:6c:c0:2b:7e:f2:c3:d6:03:14:
1d:85:22:28:de:1d:87:6a:32:51:32:91:c5:eb:ff:
c4:54:8c:c3:a5:c7:47:43:3c:cc:95:fc:c3:18:af:
f9:4a:91:25:13:c9:36:ee:a1:65:80:46:ff:aa:21:
f7:9f:e0:4c:cf:c1:43:ac:68:6e:4b:7c:a1:ef:4e:
05:1e:e2:eb:84:d5:38:6e:e1:35:f2:14:9a:31:76:
7d:ac:d1:93:da:aa:c3:61:30:b1:eb:0f:b2:59:f1:
1d:da:1b:64:ba:6f:fa:ca:f5:09:65:69:37:51:01:
d0:db:83:f5:7f:64:86:d9:d4:4e:9b:f2:56:a8:28:
69:d9:5b:f0:4c:44:94:a4:ef:74:56:c0:34:18:dd:
e6:06:1e:5f:56:b6:39:54:7e:f4:d5:c4:44:28:91:
e7:e2:0f:20:37:90:45:dc:ab:4e:f7:6a:52:93:1d:
b2:54:09:1d:ba:7e:ba:23:dc:75:db:c1:7d:9d:a9:
72:80:3b:e0:d9:0d:f8:8f:c3:4a:4e:7c:9f:4e:49:
3f:14:41:4d:7a:1f:25:46:b5:cd:46:90:9f:d9:59:
d3:d7:d9:e9:27:b0:13:a4:23:6e:40:89:13:94:fb:
af:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:5D:B6:FA:AF:EC:6A:A5:6D:23:DF:0F:E1:3B:73:99:A3:0D:7A:48
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d/d770de6c-e795-3458-b3fa-76797a8fc14c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d.crl
X509v3 Authority Key Identifier:
keyid:E9:36:DC:58:66:FC:68:02:BF:A6:99:DE:B4:DD:13:5E:4C:D1:27:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:48a8:68f7::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4c:8f:c9:aa:49:b3:34:40:45:22:79:22:58:04:22:c7:52:38:
cc:70:ec:f7:03:ea:52:88:1a:4d:43:1c:01:56:ab:7b:88:03:
bd:de:07:18:2e:98:fa:90:58:31:0c:d7:ef:05:49:7b:e4:12:
48:ba:7b:92:ec:f9:72:1c:37:2a:d0:e6:8e:2d:d6:e0:81:45:
b0:ea:4d:50:1d:9c:b1:a3:7d:61:7d:8b:7f:bb:6a:5d:74:7a:
19:d3:a3:08:32:1e:bf:48:1a:0f:7f:06:c4:34:c8:c2:9a:b0:
b4:ec:33:59:b9:20:05:49:a9:8e:49:1b:7c:dd:e6:3d:fd:71:
1d:65:16:d3:cf:22:db:fb:bc:45:08:f1:ed:31:6a:88:b5:b4:
44:ae:f2:59:46:33:20:53:3c:e9:f7:9f:e3:8f:b6:de:0b:e5:
cf:ca:5f:ba:22:70:f7:c4:cb:29:c9:c1:89:e5:99:b4:f9:35:
ed:7f:54:3a:aa:83:bb:df:c2:7e:12:bc:5e:71:e6:66:9b:27:
f1:2f:5a:96:7a:50:c6:21:bd:bc:bd:9e:3e:e3:ab:17:b8:db:
aa:34:3f:aa:f1:2f:04:2a:2c:9c:0b:22:82:a8:27:4f:9c:b2:
90:5c:c2:0c:14:54:e4:76:c2:44:28:c6:c2:9c:87:80:41:64:
8a:b5:d9:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 23:37:24 2025 by rpki-client