Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/5677ef8e-eb56-3461-82e2-aff84023202f.roa
File: 5677ef8e-eb56-3461-82e2-aff84023202f.roa (raw, json)
Hash identifier: GAhRHF7mxu7ETC4EZUxYjnzba62oO6HMupS26XxZMLg=
Subject key identifier: 4B:00:28:3E:DC:0B:D0:4C:A9:2D:DF:44:44:3A:26:FF:F2:FC:03:32
Certificate issuer: /CN=208edf3a-73a5-4614-9c76-5702d5c88977
Certificate serial: 010D0C9F432858486C2B196D65680E6FBC0A67C0
Authority key identifier: 8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/5677ef8e-eb56-3461-82e2-aff84023202f.roa
Signing time: Fri 03 Jan 2025 14:00:51 +0000
ROA not before: Fri 03 Jan 2025 14:00:51 +0000
ROA not after: Thu 03 Apr 2025 13:00:51 +0000
asID: 398549
IP address blocks: 2605:dd40:8e00::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6c:2b:19:6d:65:68:0e:6f:bc:0a:67:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=208edf3a-73a5-4614-9c76-5702d5c88977
Validity
Not Before: Jan 3 14:00:51 2025 GMT
Not After : Apr 3 13:00:51 2025 GMT
Subject: CN=ad9581f3-5025-4cfd-bb36-11a9493c04c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:f6:5b:a6:8f:57:ef:10:eb:cc:73:6b:84:8c:
cc:b7:c3:b8:a8:e6:99:93:35:ca:83:8e:40:83:64:
47:a7:04:b4:fd:5b:28:09:0a:9d:ba:2e:99:a3:a1:
ea:70:e5:6b:c5:ff:73:37:60:bd:53:d8:1a:c7:73:
b2:a6:22:84:54:78:30:46:74:9e:35:0a:f2:1b:b9:
66:da:a6:9b:80:75:4c:21:b9:c1:c6:81:95:01:21:
ad:cd:60:91:b4:61:9e:16:82:97:08:79:9f:bb:22:
01:f2:30:70:7b:89:05:ba:d2:e1:6d:bf:cc:c3:61:
99:a1:28:8d:b8:b9:ae:47:ae:1d:04:8c:e8:61:dc:
03:35:0f:e3:20:ac:3b:8f:3f:0d:e5:13:92:0e:6c:
f9:2e:12:8a:40:76:5f:c8:1f:e1:54:a0:b6:a5:ba:
9e:78:88:e1:dd:34:d9:f1:0e:d4:cf:4f:32:16:e4:
f3:c4:1c:f6:f2:3b:25:d8:5d:ba:83:97:75:e5:49:
90:a8:62:41:d7:eb:b6:7d:ff:89:cb:c7:78:b2:b7:
17:2a:fd:37:3d:23:f4:c3:e1:99:61:03:94:33:b5:
5e:bc:19:ef:22:96:18:ee:5b:d9:04:03:6d:39:ce:
68:84:6f:e1:e0:33:77:76:50:89:f8:74:e1:9e:2f:
50:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:00:28:3E:DC:0B:D0:4C:A9:2D:DF:44:44:3A:26:FF:F2:FC:03:32
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/5677ef8e-eb56-3461-82e2-aff84023202f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.crl
X509v3 Authority Key Identifier:
keyid:8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer
sbgp-ipAddrBlock: critical
IPv6:
2605:dd40:8e00::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
37:7b:44:2d:8e:44:22:ef:22:7a:10:30:1d:4e:dd:ed:8a:94:
72:e3:b1:d3:a3:56:8f:25:e6:27:38:d1:09:8f:2d:c0:18:77:
8c:2c:27:6d:4b:59:82:41:f8:4f:85:6b:19:40:a2:bf:a5:69:
ad:d4:fb:f6:d5:d4:58:49:28:d4:e4:a6:f9:40:95:31:34:0b:
ef:5a:12:45:83:33:20:ce:f5:6d:07:69:26:94:80:da:77:ea:
f8:b2:ba:d0:45:85:08:0b:b6:b4:41:4f:dc:83:c6:24:40:7d:
e0:73:e4:ab:89:34:08:9c:3a:3a:d9:47:28:c9:a3:7f:a2:d3:
d8:50:99:d3:f7:d9:7e:2f:cb:ad:c5:f7:7a:bd:6f:dd:f9:6a:
2c:95:40:21:bd:ca:fc:2a:ea:87:65:91:61:b8:b0:8e:ca:97:
da:d4:77:3a:49:da:1a:2f:c0:23:ad:06:2e:e9:66:71:ca:3e:
c0:ef:0d:ed:f8:56:2a:22:a4:5b:35:fb:0f:74:dc:59:d3:45:
00:4c:3f:aa:8c:7d:20:1e:94:df:b5:94:18:8c:31:6b:58:d4:
b3:b8:cb:57:14:57:15:6e:3b:6e:c4:3b:e4:a8:c2:e7:8b:fd:
86:0c:8d:bc:9b:4f:04:ce:2f:c0:39:f7:4d:12:46:29:06:72:
85:5b:1d:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 02:19:48 2025 by rpki-client