Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e89b44b0-a151-49f2-b4a6-d917e3c95e83/899bf378-ed1a-35b3-890b-9f42089f212d.roa
File: 899bf378-ed1a-35b3-890b-9f42089f212d.roa (raw, json)
Hash identifier: 0KkDpKofyJhUEncggbOTnZoCMSwSu4BKSpoyn/H35Ck=
Subject key identifier: 2B:91:43:79:63:79:81:B1:77:C2:46:B0:60:4A:89:F3:48:8E:45:ED
Certificate issuer: /CN=e89b44b0-a151-49f2-b4a6-d917e3c95e83
Certificate serial: 010D0C9F43285848159FE9EB88943DA0DD1BF8A0
Authority key identifier: 65:DE:38:46:E6:89:94:A2:11:8F:52:2F:F6:E4:DD:24:48:A6:04:60
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e89b44b0-a151-49f2-b4a6-d917e3c95e83.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e89b44b0-a151-49f2-b4a6-d917e3c95e83/899bf378-ed1a-35b3-890b-9f42089f212d.roa
Signing time: Tue 03 Dec 2024 14:00:52 +0000
ROA not before: Tue 03 Dec 2024 14:00:52 +0000
ROA not after: Mon 03 Mar 2025 14:00:52 +0000
asID: 395651
IP address blocks: 2620:13:a000::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:15:9f:e9:eb:88:94:3d:a0:dd:1b:f8:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e89b44b0-a151-49f2-b4a6-d917e3c95e83
Validity
Not Before: Dec 3 14:00:52 2024 GMT
Not After : Mar 3 14:00:52 2025 GMT
Subject: CN=d624d3ca-0a56-4bd8-b7ef-c557cde6e41f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:76:4c:18:e4:5d:d4:1a:76:18:17:fd:6a:46:
8c:af:6f:2a:d1:d5:bb:c4:4c:fd:3f:dd:eb:d7:f8:
58:e9:01:95:3a:dd:1e:69:fc:61:76:de:e0:77:c0:
d0:25:10:fb:6c:98:2f:83:ef:b6:8c:bd:c6:6f:2b:
08:b6:4a:73:be:30:f7:40:d6:d3:90:64:89:d5:5c:
d3:de:da:9f:95:74:45:1c:09:04:14:15:2e:4d:df:
d7:b5:16:f2:45:78:83:e2:b0:f6:7b:29:5a:19:7e:
d5:c2:96:5a:e0:7e:fb:79:a8:c9:3d:9b:dc:e4:2c:
4b:e2:41:ad:c2:65:cb:c1:fc:fc:27:d4:fd:cb:7f:
85:1f:66:ff:30:47:a4:18:c3:a8:86:6a:c1:de:39:
77:c4:f4:68:a0:79:d9:5d:72:de:ea:1b:12:fb:b1:
4a:71:e5:7c:bd:ea:ec:3b:bd:1c:1c:06:f6:5d:85:
36:c9:5b:d7:e4:92:a7:ad:a1:69:ef:ea:05:ad:5d:
62:a1:91:21:59:fe:c0:b4:86:37:91:11:c6:dd:a7:
03:39:70:e5:41:f6:5c:1b:5e:09:dd:1e:b0:b3:5f:
33:b7:69:85:d0:f9:c2:0e:dd:a5:12:7d:26:9b:5c:
85:dc:7a:16:f6:20:0d:94:d4:fb:9c:6a:ad:0a:cc:
27:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:91:43:79:63:79:81:B1:77:C2:46:B0:60:4A:89:F3:48:8E:45:ED
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e89b44b0-a151-49f2-b4a6-d917e3c95e83/899bf378-ed1a-35b3-890b-9f42089f212d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e89b44b0-a151-49f2-b4a6-d917e3c95e83/e89b44b0-a151-49f2-b4a6-d917e3c95e83.crl
X509v3 Authority Key Identifier:
keyid:65:DE:38:46:E6:89:94:A2:11:8F:52:2F:F6:E4:DD:24:48:A6:04:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e89b44b0-a151-49f2-b4a6-d917e3c95e83.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:13:a000::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5a:fb:e6:a7:d3:27:39:fa:fc:7e:81:64:2c:52:99:1b:a8:c9:
bb:4b:fb:50:7f:81:ea:0c:48:12:70:8e:9f:47:52:52:bd:0a:
c0:0b:00:5d:c1:d7:e9:cb:a1:6c:b4:cd:e7:d7:5e:bd:1a:84:
57:29:d9:a6:6d:71:94:57:84:8b:4c:3e:64:96:cf:c2:4b:bd:
f0:81:14:f9:f8:91:a5:25:49:3d:3a:a1:2b:0a:d3:83:48:06:
85:6d:b0:55:3d:89:f2:33:43:7f:95:58:e9:5c:b1:bf:8e:7e:
a2:62:44:a1:f5:87:72:89:14:11:47:f5:92:1c:5e:30:ae:06:
44:45:3a:d5:fc:d4:cb:13:1e:36:56:1b:4b:7e:02:e9:9a:f5:
24:a7:37:77:14:73:db:c4:d5:74:eb:17:1e:87:4e:fe:29:70:
f9:bd:0d:02:41:22:ae:2f:f0:6f:1e:57:27:11:db:97:f0:b6:
46:e0:47:ab:b2:9e:ea:a2:69:69:44:f6:41:15:5c:73:56:67:
37:f1:54:08:c8:c4:74:1c:93:0f:6a:e7:ab:9d:73:13:f3:69:
45:cf:b0:23:cc:d8:d9:f0:7b:cf:cb:9c:45:d4:d3:b7:84:b3:
a4:44:92:7b:ee:8b:77:2a:95:8c:80:93:c2:f6:00:79:c7:b0:
36:51:2a:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 07:43:22 2025 by rpki-client