Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/5267559f-2275-3ec9-8912-c20f02435041.roa
File: 5267559f-2275-3ec9-8912-c20f02435041.roa (raw, json)
Hash identifier: /yth3tSiXX4nzxAA1XooQZ/u5zwKlmV/5cDVnteAZyU=
Subject key identifier: FA:C9:F3:6B:70:FE:23:E1:E3:B6:5E:7C:68:C4:91:8B:E8:DC:17:EC
Certificate issuer: /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Certificate serial: 010D0C9F432858483E1ABC3F1017218C8FB55500
Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/5267559f-2275-3ec9-8912-c20f02435041.roa
Signing time: Wed 18 Dec 2024 02:00:39 +0000
ROA not before: Wed 18 Dec 2024 02:00:39 +0000
ROA not after: Tue 18 Mar 2025 01:00:39 +0000
asID: 25899
IP address blocks: 2607:fa40::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:3e:1a:bc:3f:10:17:21:8c:8f:b5:55:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Validity
Not Before: Dec 18 02:00:39 2024 GMT
Not After : Mar 18 01:00:39 2025 GMT
Subject: CN=4be8b9a4-2058-424b-b52f-ac5d4860e9b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:18:a9:2f:b2:3a:29:53:29:b4:06:2e:aa:9a:
a6:a8:4d:06:50:40:30:7b:90:86:c7:79:da:6d:fd:
32:03:b1:51:7d:2f:f9:c1:40:9d:5f:da:06:90:81:
e5:f5:5c:45:38:c9:0b:ef:d5:e8:63:d0:a0:b2:4b:
c6:a5:f5:90:e0:cf:0c:bd:15:9d:f3:05:42:86:a5:
0b:81:d7:ec:c6:83:8a:f4:fe:fc:0e:58:b0:b4:67:
1d:c3:00:e2:d8:45:4a:4a:63:c1:df:3d:42:b6:f6:
f9:07:7b:c4:92:e9:e2:9c:58:fd:2e:66:fa:00:15:
dc:5a:c8:c4:c4:00:c0:22:e5:5e:8f:2c:d3:57:6a:
e4:1f:10:7b:79:b1:02:42:e2:e2:26:4d:8c:d5:11:
1a:36:37:e4:33:2a:0d:0f:c8:37:35:6f:c4:43:16:
fd:f9:b7:64:33:09:9f:ce:5d:0d:a5:61:9b:87:93:
09:24:54:d0:d0:82:fd:36:a6:bc:8c:2f:b3:5d:49:
77:83:08:88:54:50:e5:23:7a:91:0c:d9:68:ec:61:
0c:96:86:5d:e9:20:e6:6c:49:f2:86:fe:41:7a:bf:
74:23:e6:76:a5:18:b5:76:d5:1e:29:fc:01:75:93:
0d:b6:e7:35:d2:61:4c:23:bc:a2:87:ee:78:60:8f:
2b:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:C9:F3:6B:70:FE:23:E1:E3:B6:5E:7C:68:C4:91:8B:E8:DC:17:EC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/5267559f-2275-3ec9-8912-c20f02435041.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl
X509v3 Authority Key Identifier:
keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:fa40::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
41:62:95:01:16:36:fb:27:7b:38:fa:a7:42:ef:3d:a4:5f:31:
6e:e0:91:1b:8e:d4:43:90:b5:fa:59:70:63:ca:07:ee:8c:8b:
bb:4b:8a:df:26:09:45:f2:7e:7f:24:c7:08:4c:06:a9:12:aa:
b5:b2:1c:22:a2:e9:18:7b:ab:c6:ad:78:75:5e:e6:f5:63:44:
2b:33:16:76:3c:fd:bf:08:25:09:a4:da:eb:f9:47:12:e4:40:
d5:4e:11:8a:87:ea:b7:4a:20:a1:f2:fb:e1:e8:9b:57:90:b2:
78:66:7a:14:66:ad:f4:9f:52:d1:41:9e:ce:52:9d:f2:57:2e:
02:a7:aa:7d:39:a2:19:a0:e7:a2:bb:97:3c:bd:2e:31:f6:dd:
b4:4c:98:37:74:df:43:66:8d:10:d3:6e:d1:5d:33:ad:04:e8:
dc:56:43:a1:b1:04:12:46:6d:20:57:ce:23:b3:d6:b5:c6:97:
64:7a:5b:00:d1:8d:aa:00:c8:93:ad:05:b1:ca:52:c7:f5:8a:
df:47:9d:0b:08:24:73:9f:58:44:3c:cb:71:4a:46:d2:0c:3b:
6d:03:dd:9b:bf:43:79:aa:0a:bc:27:72:db:ed:a8:0f:4f:1c:
c6:a0:ed:ac:8e:1a:2a:5b:da:69:8f:b6:27:03:cd:e6:b2:09:
4f:73:b7:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 10:09:49 2025 by rpki-client