Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/3607c477-33e0-329a-922b-0339e2172692.roa
File: 3607c477-33e0-329a-922b-0339e2172692.roa (raw, json)
Hash identifier: VTHppzJ6sxEqLn1HvTGXnIFVKwmlHOXGorGMs/6ffWU=
Subject key identifier: 97:07:38:CC:85:C4:D3:2C:86:E1:1D:FF:4C:5F:46:88:D3:21:6A:C9
Certificate issuer: /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Certificate serial: 010D0C9F432858486AC5A13FEB86A5DC7CF1F328
Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/3607c477-33e0-329a-922b-0339e2172692.roa
Signing time: Fri 03 Jan 2025 02:00:40 +0000
ROA not before: Fri 03 Jan 2025 02:00:40 +0000
ROA not after: Thu 03 Apr 2025 01:00:40 +0000
asID: 11232
IP address blocks: 2605:4a80:2000::/35 maxlen: 35
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6a:c5:a1:3f:eb:86:a5:dc:7c:f1:f3:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Validity
Not Before: Jan 3 02:00:40 2025 GMT
Not After : Apr 3 01:00:40 2025 GMT
Subject: CN=38a40082-b98a-4485-8d9e-ea353fca8e41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a0:1a:66:82:b3:95:4a:9f:ba:dd:0f:1f:cb:
8d:4e:5f:d0:17:be:ed:e7:ab:40:fd:e0:81:97:3b:
d4:0c:ca:12:7b:6e:c6:3c:b0:cd:20:05:01:21:3a:
50:92:f0:99:eb:be:02:18:e3:38:a0:78:49:7d:e7:
08:e4:42:92:83:d0:69:e8:ed:71:fa:ee:ae:30:e3:
88:7d:ef:c2:9e:18:b6:0c:e7:b1:e9:62:bf:af:b4:
c9:7a:8b:bf:fa:24:46:2e:21:f6:c2:19:2f:ea:a5:
c8:4d:92:4c:23:3f:a7:94:fc:c7:e6:90:c0:b1:3c:
4e:c6:06:df:c2:f5:d1:61:62:d1:03:34:69:a8:68:
2f:bf:d2:0a:26:7c:a6:04:9c:fa:5c:31:99:f9:0d:
b1:cf:2a:5f:78:8d:fd:01:63:ff:46:0f:25:db:1b:
a7:c9:5b:42:f7:ce:6e:7d:07:90:8f:a5:4a:17:44:
b8:c4:68:4f:9c:5f:d7:05:85:14:a4:85:49:f0:f4:
f4:5b:8c:63:0b:28:81:c4:91:55:c9:26:90:e8:5c:
9d:b8:37:f7:4a:8c:b2:96:4b:09:81:10:95:55:7e:
0c:fe:82:08:73:23:48:72:ea:d4:27:0e:80:52:98:
42:23:fb:3a:a1:90:3f:ec:77:65:1e:d0:35:c4:d0:
9b:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:07:38:CC:85:C4:D3:2C:86:E1:1D:FF:4C:5F:46:88:D3:21:6A:C9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/3607c477-33e0-329a-922b-0339e2172692.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl
X509v3 Authority Key Identifier:
keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
sbgp-ipAddrBlock: critical
IPv6:
2605:4a80:2000::/35
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
28:a8:89:7e:35:68:6b:62:b9:8e:69:1c:d4:a9:b6:09:b4:1d:
46:46:17:db:da:3c:b0:aa:5d:e9:f3:57:5d:22:62:05:fe:a6:
21:ab:4d:dc:64:d4:2e:e1:81:d2:81:71:d8:33:37:fd:98:a2:
b9:49:36:c2:cd:c3:52:24:61:db:e8:69:53:13:74:8e:d6:ed:
e1:ae:52:82:0c:71:38:44:fe:f9:7e:66:7d:7c:aa:db:dc:f5:
42:0d:55:1f:9b:6e:86:63:4f:9c:74:08:6f:77:21:b6:7a:59:
0c:e4:f8:e4:a5:9e:07:5f:fb:0c:01:66:a0:2f:14:97:2d:a2:
28:56:8f:37:c4:3c:c6:6e:76:2e:7a:d2:ce:a6:c1:4a:6c:69:
de:f4:0a:a5:95:70:e7:68:7f:ea:12:76:05:08:be:12:a8:32:
54:b8:30:ad:b5:44:d8:d3:e9:46:7a:bc:a8:2e:74:27:97:8d:
76:ef:3a:29:bb:3d:ab:42:40:24:90:d3:d6:94:70:51:d1:38:
33:97:b1:c8:0d:38:96:a7:5f:de:d2:29:ee:e4:40:bb:f9:21:
ab:a0:e1:f0:5a:b0:25:b3:0e:a6:c7:58:c8:e3:6d:39:2b:74:
d5:5a:22:ad:de:db:ac:41:66:dd:a1:be:ea:0b:9c:7e:9d:47:
ef:ae:de:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:52:16 2025 by rpki-client