Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/54a4332a-b65d-3502-aaa9-76ed79433c4f.roa
File: 54a4332a-b65d-3502-aaa9-76ed79433c4f.roa (raw, json)
Hash identifier: 9je9/9vFVAUYZ4TGUbzlTo1/j8iyYi11saxh8zLZiBc=
Subject key identifier: 28:D7:89:0F:E8:50:C8:36:89:87:62:0F:19:64:E3:91:59:85:83:D4
Certificate issuer: /CN=1f58bf75-9531-4aca-a52e-2a3241fa6dd8
Certificate serial: 010D0C9F43285847FB1A2FFF8F15267F04F8A3E0
Authority key identifier: B8:CC:7C:1C:16:4D:CB:82:99:4D:2C:1D:6F:93:B6:38:08:14:0D:35
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/54a4332a-b65d-3502-aaa9-76ed79433c4f.roa
Signing time: Sun 24 Nov 2024 02:00:27 +0000
ROA not before: Sun 24 Nov 2024 02:00:27 +0000
ROA not after: Sat 22 Feb 2025 02:00:27 +0000
asID: 33724
IP address blocks: 2604:7340::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:fb:1a:2f:ff:8f:15:26:7f:04:f8:a3:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f58bf75-9531-4aca-a52e-2a3241fa6dd8
Validity
Not Before: Nov 24 02:00:27 2024 GMT
Not After : Feb 22 02:00:27 2025 GMT
Subject: CN=04d0e0bf-7eb3-4001-b9ec-4b8239c0c879
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:74:6e:49:f1:29:04:20:35:e6:29:76:3a:ee:
24:6f:4a:22:64:34:d8:b2:8c:f4:59:2a:6a:9b:ec:
8e:a0:a5:c2:7f:7a:e9:34:32:78:48:30:31:3b:30:
07:4b:91:fd:3e:ed:ad:d4:08:19:d8:4b:2e:d2:05:
58:a5:31:66:cf:d4:bf:0a:8f:0b:ba:2c:45:5f:0a:
a5:5f:fd:ea:db:6d:df:56:26:30:38:38:47:90:b2:
27:95:91:57:d4:c6:b7:bd:06:bf:80:ff:73:70:ae:
3e:85:4f:19:60:fb:41:d8:a6:b7:1f:76:c3:51:cf:
8c:67:89:64:d0:84:5f:17:42:7a:8e:12:1f:66:36:
8c:6a:1d:f9:66:ca:aa:c3:d7:0e:dc:f3:e1:33:9f:
77:ce:dc:fe:98:37:c4:93:36:09:df:c8:93:39:fc:
d0:c6:94:d0:57:bc:1a:dc:64:44:44:a3:98:00:e1:
3a:39:f2:8a:e6:12:2f:f6:ed:94:b6:93:92:75:94:
ab:d1:19:c7:27:4c:84:04:17:c4:73:3f:d0:14:b9:
21:6a:2c:e5:ac:57:af:1d:85:9d:85:00:16:bd:6a:
3a:d7:22:0b:9e:56:9d:11:b7:42:73:36:fa:27:8a:
6e:14:8c:1d:86:e9:31:10:1f:c0:bc:db:96:f5:e6:
41:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:D7:89:0F:E8:50:C8:36:89:87:62:0F:19:64:E3:91:59:85:83:D4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/54a4332a-b65d-3502-aaa9-76ed79433c4f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.crl
X509v3 Authority Key Identifier:
keyid:B8:CC:7C:1C:16:4D:CB:82:99:4D:2C:1D:6F:93:B6:38:08:14:0D:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:7340::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
64:53:eb:fb:df:2c:f0:fa:98:6e:19:20:36:a1:7c:ba:e9:3b:
a1:6e:d3:7e:b8:db:33:8b:7c:fd:f6:db:e6:e0:1f:e6:33:cb:
70:e9:9a:52:06:3b:fc:04:b4:63:26:4f:93:0e:df:92:17:ae:
5a:2a:08:5c:ee:c0:28:8e:e3:e7:00:49:c2:48:cc:e2:a5:24:
6d:b8:e8:5a:0e:3d:e9:1b:c0:5a:3a:a3:54:bb:82:00:38:7f:
cc:c6:4c:19:6b:67:38:cb:ca:27:28:ba:f8:4f:19:f5:76:50:
84:05:19:a7:f5:21:1d:73:81:a1:08:37:1a:f6:73:2c:6f:f0:
80:5c:df:53:ca:9a:f9:e6:58:58:e2:91:f7:3d:a2:18:66:b3:
c9:49:71:9b:94:08:db:36:0c:60:46:fc:b7:ec:23:9b:24:b6:
27:03:69:da:7b:45:13:55:dd:dc:61:5c:78:3b:e3:0c:fe:e1:
a3:6c:98:9f:e6:40:35:ce:ef:5f:04:54:e3:a8:9f:01:5c:d0:
c9:ab:0e:d0:89:c8:cf:2d:bc:ce:e3:3d:ec:b4:bf:cc:09:77:
05:3f:65:8a:4d:8c:d9:2e:fe:6e:98:1c:8f:98:b4:09:47:22:
ec:fb:3d:13:51:15:5c:bb:e8:df:68:b7:6a:de:b2:2b:6a:32:
cf:0e:52:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 11:35:27 2025 by rpki-client