Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/289733c9-8d24-3a26-be24-969a85591062.roa
File: 289733c9-8d24-3a26-be24-969a85591062.roa (raw, json)
Hash identifier: aybaYe4RENW0p5vS4yyLkCebK8eY4vugHc7YjgT40qY=
Subject key identifier: A3:5F:6A:60:DC:F0:0F:9E:17:17:02:47:11:22:30:8F:5E:C6:C5:3B
Certificate issuer: /CN=cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d
Certificate serial: 010D0C9F43285848696069151F425174CD23C400
Authority key identifier: D5:8C:8D:9C:A1:75:58:0A:B6:0A:11:31:D8:45:AA:53:FC:D3:5B:48
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/289733c9-8d24-3a26-be24-969a85591062.roa
Signing time: Thu 02 Jan 2025 14:00:52 +0000
ROA not before: Thu 02 Jan 2025 14:00:52 +0000
ROA not after: Wed 02 Apr 2025 13:00:52 +0000
asID: 393885
IP address blocks: 2604:4a00:d000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:69:60:69:15:1f:42:51:74:cd:23:c4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d
Validity
Not Before: Jan 2 14:00:52 2025 GMT
Not After : Apr 2 13:00:52 2025 GMT
Subject: CN=8c44a297-60c6-47d4-b59e-b57b3626c83f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:27:14:e5:ef:0b:53:d4:20:c5:9e:93:34:09:
04:d7:ff:7e:f1:f8:a0:70:5b:79:c3:18:03:a9:14:
5b:3a:eb:05:ce:95:02:b7:b7:80:3d:98:a6:52:10:
a4:75:24:6c:7f:d5:31:9a:1e:2a:47:77:ba:3b:aa:
7b:14:b6:e6:29:e1:09:9a:1a:56:e0:75:ad:31:4e:
f8:93:7c:6a:a5:37:ae:55:3b:30:b2:4d:4d:0c:a3:
88:76:b3:31:39:78:4e:24:75:8e:12:52:3b:68:9f:
b2:c4:ca:82:d0:3f:27:e5:e4:f1:e5:e1:36:96:ae:
7e:76:6b:67:16:90:54:61:b5:79:4d:26:52:e6:e8:
e1:0f:7f:94:60:d0:fa:d8:af:3a:37:0b:09:32:82:
49:87:40:2a:28:5e:44:02:e7:e3:c9:2c:86:33:b6:
84:43:1f:27:82:ea:be:c5:3f:7a:03:eb:85:0d:de:
38:31:73:ef:3a:30:f0:e0:f2:88:9c:d0:1c:42:d0:
f8:a2:54:65:6c:8f:9d:9c:74:17:69:f0:56:32:4f:
79:4f:2d:fb:83:f7:2a:14:83:48:f9:74:b2:f5:ee:
cc:2a:aa:f5:53:5d:c1:05:a3:e2:1a:79:b5:44:92:
b4:ca:0d:6e:8d:54:9f:c0:54:7a:12:f0:d9:0b:f4:
c6:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:5F:6A:60:DC:F0:0F:9E:17:17:02:47:11:22:30:8F:5E:C6:C5:3B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/289733c9-8d24-3a26-be24-969a85591062.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.crl
X509v3 Authority Key Identifier:
keyid:D5:8C:8D:9C:A1:75:58:0A:B6:0A:11:31:D8:45:AA:53:FC:D3:5B:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:4a00:d000::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7c:85:21:06:de:bf:a3:83:45:96:13:21:2a:81:79:c7:bf:93:
49:ef:d5:ae:84:f8:7a:1a:be:3a:9b:ee:e5:96:e9:a3:1e:43:
1c:ed:a0:96:80:cd:dd:43:1e:23:0b:a2:10:a7:4e:e4:23:9d:
49:40:81:23:9d:c5:a1:53:76:c8:63:85:be:c7:e1:38:25:79:
91:fd:2b:e4:cc:9f:18:89:55:ad:ed:73:85:3f:a7:50:e4:62:
d2:5c:5f:17:4e:29:51:25:06:87:7e:fd:87:e3:ce:ca:63:1f:
aa:8a:27:81:4d:34:46:e9:20:7b:50:f9:9e:46:c3:e0:6a:84:
b3:bb:22:fb:6e:5b:98:2f:79:c6:13:98:e7:b4:b4:75:36:30:
e3:d9:d4:71:a5:d5:c6:41:43:72:5d:d7:38:b1:40:c7:38:c8:
94:bc:d2:b1:b5:ff:b0:55:31:e1:fe:17:ca:b1:f0:8f:e6:ab:
e3:80:11:44:45:0e:0c:eb:04:19:d8:17:95:56:60:b5:40:c9:
7f:fe:41:8a:4f:3b:01:37:59:15:bf:4c:59:33:a1:7a:1e:95:
9c:65:0d:c2:cc:36:58:e9:ee:c1:30:88:dd:db:09:b1:4d:7e:
c7:2a:8e:ff:ea:ee:92:8a:1d:64:45:17:97:42:61:f4:1a:1d:
9f:0f:51:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 11:13:55 2025 by rpki-client