Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/c3487ac6-2850-3a93-ab98-72c7460e1550.roa
File: c3487ac6-2850-3a93-ab98-72c7460e1550.roa (raw, json)
Hash identifier: 9Qf5tryjaA18ni+3ebYuJQFNtPJkewTpIrr2FyXuGy4=
Subject key identifier: 3D:1A:10:56:B6:9B:42:55:9A:8A:78:6E:0A:40:31:DE:0E:42:9D:4C
Certificate issuer: /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Certificate serial: 010D0C9F432858486AC59F1E10271D3A79127280
Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/c3487ac6-2850-3a93-ab98-72c7460e1550.roa
Signing time: Fri 03 Jan 2025 02:00:40 +0000
ROA not before: Fri 03 Jan 2025 02:00:40 +0000
ROA not after: Thu 03 Apr 2025 01:00:40 +0000
asID: 11232
IP address blocks: 2001:48f8:9020::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6a:c5:9f:1e:10:27:1d:3a:79:12:72:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Validity
Not Before: Jan 3 02:00:40 2025 GMT
Not After : Apr 3 01:00:40 2025 GMT
Subject: CN=b0a8bd67-67e2-4281-a705-1a9ebb619320
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:b4:13:9d:c0:10:85:ff:59:13:3b:78:9a:1a:
71:ad:e5:14:ec:6d:1d:78:ef:be:12:22:d9:46:f2:
01:31:ef:5f:c2:3f:ad:95:a4:e1:dd:cd:f8:ce:3c:
c6:d2:21:4a:b8:ba:96:61:c5:57:70:ff:cd:09:88:
b7:d5:5e:02:16:ee:b7:fc:82:4a:34:ee:20:b3:79:
06:ca:43:07:f4:29:d7:95:8a:58:9c:cc:3f:41:66:
9c:bc:b1:97:3d:6a:bb:ce:31:7e:28:60:53:88:74:
91:79:42:f5:be:d4:42:a6:b4:47:eb:7e:00:35:5c:
2d:8f:99:25:33:cb:a7:14:71:39:63:43:d1:90:be:
d0:d9:8f:8d:a4:59:ef:0a:37:2f:49:eb:31:1f:17:
c3:0c:52:0a:56:31:55:94:f9:b4:27:53:8e:0c:50:
04:e8:fc:4a:77:44:76:ea:c7:59:5f:31:d0:b7:f3:
07:66:38:24:4e:f2:2b:df:b2:32:a7:e1:24:b2:75:
0e:a5:1b:45:2f:69:42:0d:6d:09:7f:77:3d:76:91:
7b:22:66:2b:84:0d:d4:b7:66:0a:2f:f3:0a:66:4c:
74:64:2f:ce:23:e2:c1:5e:ca:7d:22:13:79:cf:f6:
dd:a3:8b:e1:be:c2:ee:f3:62:96:95:d2:a1:fe:b9:
3f:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:1A:10:56:B6:9B:42:55:9A:8A:78:6E:0A:40:31:DE:0E:42:9D:4C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/c3487ac6-2850-3a93-ab98-72c7460e1550.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl
X509v3 Authority Key Identifier:
keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:48f8:9020::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
35:5d:d8:bc:50:b5:23:cb:4f:46:56:2c:ba:7d:4b:25:03:21:
da:ed:c0:e8:8d:f2:3c:7e:a5:88:1c:29:25:8d:45:2b:df:95:
56:77:ee:5c:85:ea:ea:53:ed:90:2b:c5:a6:59:75:2f:cd:05:
c0:4b:58:1b:ee:cb:47:fe:3a:44:3f:5a:7c:8a:c2:25:cc:d3:
23:a4:ad:8d:08:3e:5d:1e:e1:5e:19:0b:cc:ea:68:5b:03:b8:
74:66:ba:c9:20:04:6b:1f:c9:05:57:e2:b2:8e:ec:16:7a:f1:
33:91:6f:b7:44:69:2e:97:2f:1b:8a:fa:96:0c:86:36:bb:8d:
07:6f:8e:bc:72:35:c2:e7:60:cd:61:6c:26:c7:b9:ba:47:ec:
f8:38:25:e7:e6:b7:da:3f:ba:10:75:24:6f:ba:ea:6e:5c:a8:
df:c9:8d:8b:5e:0c:f7:7f:80:02:32:d2:87:e5:fd:a5:03:97:
de:04:a8:8d:77:73:06:2f:9a:b6:ce:9e:5f:10:02:e3:1b:c4:
09:71:94:0b:1a:80:cc:0e:72:0e:6f:c6:27:58:ea:c3:10:7b:
d9:80:02:38:6d:9e:2d:4d:69:24:56:3b:a4:92:f0:9d:1a:0b:
b8:99:49:f2:b7:45:c8:02:86:3c:e3:ef:76:f5:bd:0d:ad:d0:
c8:7a:1a:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:52:46 2025 by rpki-client