Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/ead2489b-efca-3bfd-b550-11e65c8377cd.roa
File: ead2489b-efca-3bfd-b550-11e65c8377cd.roa (raw, json)
Hash identifier: aFP6MlOEABhVcKW+il4G1klW+cinUUA06ZcrDptnABk=
Subject key identifier: 0F:9E:7B:77:E2:BE:7B:99:1D:3F:B2:75:E5:33:31:90:3C:F9:6D:20
Certificate issuer: /CN=cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d
Certificate serial: 010D0C9F43285848696068D0D561EAF6E158F580
Authority key identifier: D5:8C:8D:9C:A1:75:58:0A:B6:0A:11:31:D8:45:AA:53:FC:D3:5B:48
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/ead2489b-efca-3bfd-b550-11e65c8377cd.roa
Signing time: Thu 02 Jan 2025 14:00:52 +0000
ROA not before: Thu 02 Jan 2025 14:00:52 +0000
ROA not after: Wed 02 Apr 2025 13:00:52 +0000
asID: 393885
IP address blocks: 2604:4a00:9000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:69:60:68:d0:d5:61:ea:f6:e1:58:f5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d
Validity
Not Before: Jan 2 14:00:52 2025 GMT
Not After : Apr 2 13:00:52 2025 GMT
Subject: CN=2e332b1e-8521-4541-ae77-66158da99309
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:87:5e:de:9d:54:5a:7a:ce:34:c8:38:01:ac:
ac:5e:ac:93:f8:8a:8c:70:3a:5a:6e:cd:a5:bb:02:
ff:33:de:82:9e:00:fe:4d:1b:5e:5e:d8:e1:d5:dc:
d7:96:ee:53:26:fa:02:b8:6b:f1:db:70:3a:ea:59:
41:60:d5:71:e7:43:db:5f:85:0d:cf:61:6b:fb:64:
e4:5a:aa:02:cc:43:0a:2e:ef:23:83:99:a6:66:d4:
9f:31:ee:04:5b:78:b1:7d:72:df:ea:5a:c4:5b:88:
f1:50:22:6a:ea:da:bc:1e:3f:0e:4f:6c:b0:64:39:
1e:c0:cf:06:12:2b:57:bc:6d:db:9d:e7:13:24:c9:
8d:a4:24:59:a4:59:ec:1a:8e:ce:20:d7:71:d4:ac:
48:10:86:9b:2a:22:fc:28:b5:74:19:30:17:a4:64:
94:af:31:d3:73:b5:d1:e7:be:fe:20:15:02:79:60:
c2:46:3b:f0:9e:6f:76:dc:ee:78:a7:47:12:ea:14:
0a:10:95:f8:6b:dc:d2:af:7a:a5:29:86:8e:e2:06:
dd:7d:8f:83:0f:8d:ef:ed:ee:22:30:0c:e2:34:78:
5f:fd:8c:c0:6c:a9:00:a9:3e:ea:5d:42:73:e8:44:
62:64:f8:45:5f:61:89:7a:7c:75:40:ba:60:a6:8d:
08:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:9E:7B:77:E2:BE:7B:99:1D:3F:B2:75:E5:33:31:90:3C:F9:6D:20
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/ead2489b-efca-3bfd-b550-11e65c8377cd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.crl
X509v3 Authority Key Identifier:
keyid:D5:8C:8D:9C:A1:75:58:0A:B6:0A:11:31:D8:45:AA:53:FC:D3:5B:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:4a00:9000::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
28:75:e1:84:5a:f9:24:c0:ff:d8:13:b1:71:81:60:4b:21:18:
be:46:99:91:72:3f:5c:3c:fe:4c:f0:cb:69:2d:65:a2:6e:d6:
b6:d6:6b:9a:a5:32:6c:50:52:53:fb:80:a2:ca:a3:54:88:55:
be:9a:e0:54:16:fa:ca:85:94:61:79:ae:86:82:c0:53:19:03:
34:22:2e:8e:f4:b8:86:c5:39:a0:bc:ad:df:e0:af:dd:43:40:
e3:94:db:77:3d:42:d4:7f:48:a8:10:e4:4f:3a:03:7e:bd:71:
ee:4d:bb:c4:21:e0:bb:b0:15:98:c0:6b:2d:7f:d3:6c:37:d2:
b5:38:f4:e8:28:ff:5d:42:cf:d9:5a:cb:45:32:98:f3:b0:7d:
13:e2:e2:17:e9:86:8c:43:e6:f6:ea:1f:c6:15:34:79:b2:2d:
07:bb:2f:2a:0e:69:5d:67:07:36:79:b8:9f:74:d1:16:a6:26:
e7:6d:a6:cd:5f:e6:6f:67:06:dd:28:f9:40:4b:3d:eb:45:d2:
ec:59:45:3c:c8:d1:60:6a:df:ee:80:53:65:66:16:ac:fb:f8:
76:3b:ee:b3:93:17:8a:7c:b5:63:d4:2a:ae:f7:cc:1b:b6:cb:
b5:28:a6:24:d7:02:24:cb:b8:65:53:86:59:31:0f:ac:f9:5d:
49:f1:61:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 11:52:30 2025 by rpki-client