Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d498318a-7059-42be-9b60-234aedba5e34/88d98faa-490e-3cc3-acf1-12d0a9356e3e.roa
File: 88d98faa-490e-3cc3-acf1-12d0a9356e3e.roa (raw, json)
Hash identifier: GtRpVK6Tk+3eiPwkPGp8pXZevq7pPJAfjko1cm4Syk8=
Subject key identifier: CE:B3:09:ED:21:C9:81:76:7C:47:D2:F7:00:78:02:37:0F:7A:42:DE
Certificate issuer: /CN=d498318a-7059-42be-9b60-234aedba5e34
Certificate serial: 010D0C9F43285848854B50C7D835C7DD06AA1800
Authority key identifier: 1B:58:B3:AC:48:09:D4:84:9D:3A:66:E0:5F:08:9C:D2:10:C1:11:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d498318a-7059-42be-9b60-234aedba5e34.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d498318a-7059-42be-9b60-234aedba5e34/88d98faa-490e-3cc3-acf1-12d0a9356e3e.roa
Signing time: Sun 12 Jan 2025 14:00:53 +0000
ROA not before: Sun 12 Jan 2025 14:00:53 +0000
ROA not after: Sat 12 Apr 2025 13:00:53 +0000
asID: 16787
IP address blocks: 2605:1c00:fff0::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:85:4b:50:c7:d8:35:c7:dd:06:aa:18:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d498318a-7059-42be-9b60-234aedba5e34
Validity
Not Before: Jan 12 14:00:53 2025 GMT
Not After : Apr 12 13:00:53 2025 GMT
Subject: CN=c2da054b-d15b-4c09-b719-0ac8078fa703
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:88:58:b4:d7:dc:b4:86:4d:70:2e:fc:5d:5b:
c4:55:63:a2:08:aa:7e:83:5c:3c:63:f5:76:17:b4:
e9:d5:67:22:5f:9a:25:32:83:32:80:2b:09:0e:d4:
0e:1f:32:ce:a3:20:c2:4d:6b:c3:95:f7:26:2f:da:
87:57:11:05:62:06:40:08:ad:17:de:7b:9f:36:bf:
99:88:8f:6f:1d:9e:12:bc:d3:84:01:3a:0e:51:69:
6c:3f:c7:77:f4:fc:98:3a:bb:d9:07:48:6c:22:30:
aa:a9:17:10:bb:3f:58:22:89:b9:9d:58:4a:8d:cf:
08:ca:7d:48:41:b5:93:9e:92:3a:d1:ba:df:04:a5:
dc:31:b2:12:14:da:1d:bb:63:0e:d8:ab:99:14:8e:
b2:56:2b:4d:9b:ee:6e:16:89:f7:9a:30:a4:35:b8:
41:9e:cf:b2:b3:0a:bc:1b:11:28:77:cd:2c:d0:a9:
6c:81:7b:c4:8d:47:10:30:1a:20:53:9b:7f:f9:1a:
6b:4d:e6:b4:f7:ef:2e:13:c3:12:89:d8:62:2e:04:
e6:b6:0a:61:8a:8e:d8:cd:6a:69:ee:dc:71:9f:a9:
32:46:f4:28:e5:ad:36:d8:a6:98:6e:8b:e6:c2:f9:
3a:e3:63:e1:3f:63:8f:9a:4a:49:e6:43:e5:c5:1d:
59:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:B3:09:ED:21:C9:81:76:7C:47:D2:F7:00:78:02:37:0F:7A:42:DE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d498318a-7059-42be-9b60-234aedba5e34/88d98faa-490e-3cc3-acf1-12d0a9356e3e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d498318a-7059-42be-9b60-234aedba5e34/d498318a-7059-42be-9b60-234aedba5e34.crl
X509v3 Authority Key Identifier:
keyid:1B:58:B3:AC:48:09:D4:84:9D:3A:66:E0:5F:08:9C:D2:10:C1:11:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d498318a-7059-42be-9b60-234aedba5e34.cer
sbgp-ipAddrBlock: critical
IPv6:
2605:1c00:fff0::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
22:ec:b5:c6:bd:e7:33:dd:ea:43:41:df:be:08:8f:da:32:97:
f8:74:42:50:6b:5e:a7:1a:ff:84:12:fb:1d:c4:62:5c:fc:91:
20:66:d8:fe:f6:41:3f:0d:f5:57:d9:b3:00:7c:d6:bc:ed:d3:
6a:22:45:a9:1f:cd:14:8e:65:ba:e5:6b:f1:e0:c4:c8:c0:77:
69:60:92:d6:96:2f:2a:47:b1:b3:f3:41:77:56:95:dd:4d:3a:
36:31:54:90:45:34:96:95:07:e5:70:e0:9c:6a:78:52:e6:aa:
44:02:e3:26:03:de:9f:4b:d3:84:f4:80:23:6b:1a:12:42:e6:
7a:07:17:00:8c:e9:d3:ac:0d:89:4e:2b:6a:fc:7c:4b:20:05:
b6:5e:45:27:7b:fd:04:00:45:a8:33:3d:62:0e:bb:fd:e3:88:
e4:11:9e:a4:ab:33:d8:9b:10:cb:d8:71:c8:02:df:0f:47:e4:
57:2e:ed:52:a8:f7:9a:75:1c:51:53:b6:4e:2f:52:4e:bb:52:
80:21:36:15:75:7a:46:8f:42:6f:d0:cb:5f:32:2b:6b:7e:d0:
a6:a6:fb:8e:87:bc:08:c7:13:b6:34:2a:db:87:59:dd:af:2f:
ca:4e:3a:e5:46:1a:61:b2:ce:7f:c9:66:a7:9d:7d:8f:e6:d3:
68:7f:97:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:24:35 2025 by rpki-client