Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/387b8a97-889c-48cd-b72e-4329cc21745b/b6809323-6ee1-3967-b838-dbd1bbfcbf03.roa
File: b6809323-6ee1-3967-b838-dbd1bbfcbf03.roa (raw, json)
Hash identifier: Ifh5GRp+rFQ7I7VvSkj6SQhDm0LtBFki3/nQRkt5S94=
Subject key identifier: E8:9C:61:3C:06:B2:AD:6D:BC:DB:CF:E7:24:7E:5D:B0:47:22:26:4D
Certificate issuer: /CN=387b8a97-889c-48cd-b72e-4329cc21745b
Certificate serial: 010D0C9F432858485A057F8B073FBAC85F94D400
Authority key identifier: B1:70:09:21:ED:33:25:24:3C:22:B1:A2:3C:B0:84:F7:2E:7C:54:8A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/387b8a97-889c-48cd-b72e-4329cc21745b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/387b8a97-889c-48cd-b72e-4329cc21745b/b6809323-6ee1-3967-b838-dbd1bbfcbf03.roa
Signing time: Sat 28 Dec 2024 02:00:38 +0000
ROA not before: Sat 28 Dec 2024 02:00:38 +0000
ROA not after: Fri 28 Mar 2025 01:00:38 +0000
asID: 398127
IP address blocks: 2607:a6c0::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:5a:05:7f:8b:07:3f:ba:c8:5f:94:d4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=387b8a97-889c-48cd-b72e-4329cc21745b
Validity
Not Before: Dec 28 02:00:38 2024 GMT
Not After : Mar 28 01:00:38 2025 GMT
Subject: CN=8ffe1c1f-a004-49aa-89cb-7b38e0ba082a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:fd:55:ce:6a:07:61:63:0e:64:25:5b:00:c5:
5d:4c:e0:36:ac:6a:fd:44:9e:c9:28:e4:95:5e:65:
ec:f6:1e:c2:97:23:64:12:c2:01:d7:7d:dc:05:6f:
c5:8e:a3:36:f6:a8:e4:01:05:84:87:35:d3:25:63:
86:2b:0e:7c:99:3f:dc:4e:18:e5:d3:53:d1:a6:8d:
2f:18:e6:bb:e7:1c:5d:ef:7d:e2:ac:8b:0d:eb:e3:
e5:ed:d1:c1:0c:92:24:6b:8d:3e:76:af:c3:6f:04:
ea:20:51:df:61:45:0a:f4:48:f9:a7:7f:04:75:99:
b8:41:12:06:5a:77:ba:53:c1:97:fe:37:f0:06:21:
94:a2:48:b8:fc:03:b1:cd:37:ae:1b:07:0e:1e:f1:
a5:42:6e:ce:39:3e:63:a1:a1:d8:bf:aa:53:c6:10:
3b:ec:8f:29:ec:8f:27:0b:e0:a4:f5:ec:30:9e:6d:
5a:1c:bf:19:87:77:81:ec:64:f0:82:44:58:bc:32:
ce:df:dc:2c:51:28:b3:61:6c:d9:6e:ad:cc:08:32:
7d:1e:9f:1d:5d:36:8d:f1:03:42:35:87:24:b4:26:
23:62:2a:6e:17:20:4c:d9:9f:9e:d6:db:79:e6:75:
97:28:1a:20:8f:b2:fe:01:98:65:05:0b:39:54:bd:
0e:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:9C:61:3C:06:B2:AD:6D:BC:DB:CF:E7:24:7E:5D:B0:47:22:26:4D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/387b8a97-889c-48cd-b72e-4329cc21745b/b6809323-6ee1-3967-b838-dbd1bbfcbf03.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/387b8a97-889c-48cd-b72e-4329cc21745b/387b8a97-889c-48cd-b72e-4329cc21745b.crl
X509v3 Authority Key Identifier:
keyid:B1:70:09:21:ED:33:25:24:3C:22:B1:A2:3C:B0:84:F7:2E:7C:54:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/387b8a97-889c-48cd-b72e-4329cc21745b.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:a6c0::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
aa:60:b4:19:2e:9a:88:e9:2c:67:31:bb:39:b0:14:6f:38:fe:
47:08:44:40:e9:86:d8:1d:41:f9:51:de:89:ff:8d:86:6b:a8:
4e:f2:90:53:8d:a8:3f:be:db:d1:7f:d2:78:13:69:d5:7e:89:
de:c6:f7:b8:20:b3:25:a5:f9:20:f0:11:8b:a2:ac:f6:bc:0c:
ed:31:da:d4:76:85:47:dc:91:e1:37:29:03:50:54:44:e0:ce:
d9:0d:51:fa:d2:5e:31:ed:08:00:71:dd:5b:12:20:ba:2f:d5:
f8:da:13:e4:61:b2:9b:60:09:b1:3e:d9:ef:e3:83:f3:67:d9:
5e:9e:42:ea:ca:99:36:33:27:f7:70:3a:81:6c:35:be:83:3f:
ba:50:2d:21:44:9d:36:3a:d6:24:6a:45:9d:3a:0b:75:e3:04:
22:52:74:71:ce:56:cb:4d:a9:3b:4e:48:61:64:b6:3f:35:c1:
32:84:56:75:1f:1e:20:15:ca:df:6e:f5:23:a1:e4:73:cb:bf:
7b:b7:31:4f:80:a9:12:83:72:3d:0a:d4:2a:9a:e5:d3:f2:71:
82:87:22:1b:ee:9f:5e:b8:5e:65:ce:6e:97:90:35:49:1c:48:
69:65:ef:ab:eb:79:55:9f:d7:de:17:be:46:2e:53:a8:87:25:
98:c4:d2:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 04:42:39 2025 by rpki-client