Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d/54b09de8-f12c-3e32-8666-1505aecbce63.roa
File: 54b09de8-f12c-3e32-8666-1505aecbce63.roa (raw, json)
Hash identifier: g8hSCI/fSP7uL1odmw5mTybqjWOhCyk+t94g6LXbFng=
Subject key identifier: 32:CC:ED:65:BF:C3:6F:8B:EE:C7:B0:E1:74:29:F7:DD:11:A8:48:90
Certificate issuer: /CN=cf09e191-1cb7-4650-95d6-4e24c0aec69d
Certificate serial: 010D0C9F432858483B50154D227C9EF383EB57E8
Authority key identifier: C7:0D:A7:D7:72:A3:30:C8:8F:00:B9:98:15:AE:E9:72:6D:03:1A:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d/54b09de8-f12c-3e32-8666-1505aecbce63.roa
Signing time: Tue 17 Dec 2024 02:00:38 +0000
ROA not before: Tue 17 Dec 2024 02:00:38 +0000
ROA not after: Mon 17 Mar 2025 01:00:38 +0000
asID: 8075
IP address blocks: 2602:f8d5:a0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:3b:50:15:4d:22:7c:9e:f3:83:eb:57:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf09e191-1cb7-4650-95d6-4e24c0aec69d
Validity
Not Before: Dec 17 02:00:38 2024 GMT
Not After : Mar 17 01:00:38 2025 GMT
Subject: CN=9b4f080a-0a13-42f1-95bf-ebf60e4cb091
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d4:0b:20:e9:26:1a:e6:f9:af:3b:3e:d8:1d:
ba:71:04:b9:31:c7:86:1f:f3:d3:3d:d5:16:05:dd:
67:c4:44:9a:93:c5:b0:63:0e:59:93:43:a1:38:8c:
f3:d0:c4:78:73:91:de:22:e8:f0:b0:9c:e3:e2:32:
2d:85:ef:fa:be:c1:29:1a:4a:5b:c1:b1:57:af:55:
23:8c:c6:5d:73:9c:a2:fb:41:c0:91:a9:16:b7:a9:
a9:b8:cc:71:18:65:59:1e:38:25:72:20:f4:5b:b3:
97:45:c6:ed:9e:9e:0e:df:6e:34:45:be:18:b4:e1:
e8:0c:ed:57:f0:54:40:91:ed:d1:57:6b:e7:2a:dd:
3b:fc:19:81:10:5c:39:72:08:eb:48:a2:d3:d3:e0:
c1:0e:fe:f0:76:bd:2e:a2:ee:c4:2c:4c:32:e7:99:
44:8a:c6:31:b4:94:9e:c5:04:31:69:79:17:a7:96:
4a:a9:38:2e:d3:ab:22:2d:ad:3e:43:7a:e4:f5:21:
1c:41:1b:76:af:ea:37:0c:ee:89:51:2a:b5:1e:5f:
b2:b8:2b:e4:09:c5:21:0d:ac:42:18:58:98:ba:24:
20:4e:47:94:e9:8a:37:b3:e7:e5:a5:65:e7:1a:e1:
da:9e:86:bc:59:1a:78:e5:14:6e:e4:86:d9:74:d5:
f3:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:CC:ED:65:BF:C3:6F:8B:EE:C7:B0:E1:74:29:F7:DD:11:A8:48:90
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d/54b09de8-f12c-3e32-8666-1505aecbce63.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d/cf09e191-1cb7-4650-95d6-4e24c0aec69d.crl
X509v3 Authority Key Identifier:
keyid:C7:0D:A7:D7:72:A3:30:C8:8F:00:B9:98:15:AE:E9:72:6D:03:1A:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:f8d5:a0::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8f:58:3d:41:e2:21:e0:d4:39:61:54:dc:8b:25:a7:83:73:ac:
3b:a9:55:c0:ef:10:78:d2:84:30:ae:2f:f8:fe:a8:2a:59:ad:
80:8b:2a:21:d3:b3:37:bb:9b:30:e4:53:55:85:18:e0:a9:17:
52:70:c8:9b:3c:15:5d:b1:d9:78:61:da:cd:fd:7d:bd:2a:0c:
1a:1c:6c:f6:fc:8b:fd:5f:96:87:1a:96:50:44:a7:e6:ff:d6:
d6:a3:8d:ca:15:60:fc:87:64:30:8d:9f:38:17:44:e6:49:b6:
bb:e6:98:eb:97:c1:31:ff:ab:3e:c6:d2:c8:39:5d:26:5d:97:
5e:6b:2b:b3:1b:55:b2:09:ce:13:90:72:de:04:34:fd:07:61:
d5:ed:72:73:06:3f:ba:7f:97:19:e2:07:02:14:6c:07:30:32:
2f:d8:cf:2d:03:f0:6d:3b:53:a1:eb:eb:31:4c:ba:cc:71:4d:
47:c6:93:6a:35:19:de:fb:68:02:aa:dd:4f:69:73:4f:44:99:
f4:90:e9:97:93:88:32:10:38:75:b3:64:4a:56:b8:95:a6:1b:
8f:2c:1a:1c:45:e8:e2:d7:c5:61:e7:d3:c2:5f:f0:55:94:ed:
68:3d:3e:b6:8b:b4:4d:3a:a8:be:43:b1:eb:3f:d6:67:35:33:
8b:87:f2:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:39:25 2025 by rpki-client