Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/2e34a07c-b74c-3aa4-ab19-a5965764e773.roa
File: 2e34a07c-b74c-3aa4-ab19-a5965764e773.roa (raw, json)
Hash identifier: gBWVAqmlN3QRF9QwL/Wr6PQVM5f8iUuS/btqrGX2yN4=
Subject key identifier: F9:12:4E:09:BE:80:C4:66:26:42:99:C1:44:BA:A2:25:A7:B2:E7:24
Certificate issuer: /CN=cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d
Certificate serial: 010D0C9F43285848696068882B7A6D0BDE48A2C0
Authority key identifier: D5:8C:8D:9C:A1:75:58:0A:B6:0A:11:31:D8:45:AA:53:FC:D3:5B:48
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/2e34a07c-b74c-3aa4-ab19-a5965764e773.roa
Signing time: Thu 02 Jan 2025 14:00:52 +0000
ROA not before: Thu 02 Jan 2025 14:00:52 +0000
ROA not after: Wed 02 Apr 2025 13:00:52 +0000
asID: 393885
IP address blocks: 2604:4a00:4000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:69:60:68:88:2b:7a:6d:0b:de:48:a2:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d
Validity
Not Before: Jan 2 14:00:52 2025 GMT
Not After : Apr 2 13:00:52 2025 GMT
Subject: CN=8232d5ea-dd70-4e94-b48b-c225c81e808c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:46:e1:c8:da:b2:2c:ed:ac:5c:fd:94:26:bd:
72:75:24:a8:d5:cb:25:26:1d:e5:96:2c:6c:4e:63:
41:dd:a4:44:7e:a8:32:76:e9:89:b2:16:55:44:af:
e4:1c:8f:93:74:37:0f:7d:59:a8:a8:cf:13:2e:2e:
49:f6:da:86:fe:13:b5:b0:48:16:01:35:2b:89:f6:
a9:80:45:13:a4:8a:fe:16:80:a3:db:d2:08:3d:e7:
88:5a:ce:67:0b:5e:1b:1b:93:2e:6e:bb:67:63:d2:
68:81:b5:37:8e:39:09:ea:13:2b:47:b6:78:75:db:
0f:f3:68:8a:83:74:e0:93:e1:74:d9:c4:0c:6a:c9:
fc:af:0e:2b:82:a6:04:2d:b9:1c:1e:67:70:75:21:
3d:28:29:d7:57:b7:85:15:74:0d:e1:6d:75:fc:64:
11:7c:41:09:2c:97:92:55:dc:1b:b9:bd:ef:35:45:
d4:e4:b8:65:d0:a5:18:8c:a0:93:6d:0d:06:d8:47:
e9:d5:cf:ad:7c:33:7c:6d:f4:2d:1c:ce:df:64:fe:
29:5b:2a:60:6d:71:6f:cd:39:89:99:2f:db:48:05:
07:05:fb:21:33:c6:c7:ce:6b:02:3f:34:2f:e1:1e:
81:13:f9:b8:13:ea:b3:79:9e:9a:d4:1e:07:11:2b:
67:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:12:4E:09:BE:80:C4:66:26:42:99:C1:44:BA:A2:25:A7:B2:E7:24
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/2e34a07c-b74c-3aa4-ab19-a5965764e773.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.crl
X509v3 Authority Key Identifier:
keyid:D5:8C:8D:9C:A1:75:58:0A:B6:0A:11:31:D8:45:AA:53:FC:D3:5B:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:4a00:4000::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9f:91:f1:4a:7c:63:a1:3f:91:4a:a3:87:14:31:c0:25:f5:81:
9a:7c:de:a8:81:21:31:6f:c1:31:d7:14:2b:28:1d:5f:a3:05:
19:d9:46:1a:f9:b1:99:fb:46:30:42:91:83:96:bf:18:35:92:
f3:0c:87:31:ac:22:d7:09:56:88:85:21:38:ee:99:81:27:f1:
7c:bf:8a:cf:89:92:af:f9:d1:67:4a:61:c9:23:c3:32:f8:d4:
99:94:f9:bd:00:ec:f7:11:1f:31:ea:60:37:3c:b2:79:08:6d:
ab:80:bc:bf:ea:eb:61:99:c2:de:39:d5:a9:60:cb:fb:1c:c2:
76:97:72:8b:c3:7a:9e:ab:fe:25:02:fb:c5:5c:65:3b:ea:be:
b1:78:92:ab:51:79:76:62:eb:54:9b:91:54:66:a9:9d:8f:2a:
11:4e:be:fe:1b:d2:57:cb:59:04:58:a8:c6:f3:ce:dd:41:64:
14:a3:2c:4f:01:4b:a5:d6:4a:30:ce:a6:ba:71:72:76:74:dc:
94:87:b0:a4:6f:25:7d:da:21:33:7f:2c:47:84:87:2c:15:ce:
45:40:7c:23:b2:63:82:40:e9:ae:11:4b:81:f7:34:0d:b3:50:
fd:48:47:99:e9:4e:b4:78:79:8d:2a:77:69:ae:57:bf:e7:b5:
f7:21:0e:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 11:09:35 2025 by rpki-client