Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/5af83517-5c07-3ae7-8015-a5e60f3f5a81.roa
File: 5af83517-5c07-3ae7-8015-a5e60f3f5a81.roa (raw, json)
Hash identifier: AQnsA3cowJ7b5nnCsO0YDzL9ltNdnMeLOKUm2eJ8m70=
Subject key identifier: E4:3E:3C:05:87:31:9C:A2:35:50:80:3A:94:FC:FB:0E:A0:6F:EF:80
Certificate issuer: /CN=6f3d25a0-f7e5-421d-8842-fc967bf08f72
Certificate serial: 010D0C9F432858486D904C47845C8A175969C880
Authority key identifier: 57:D0:A4:F9:63:7E:3D:00:47:81:2C:DD:A6:7E:CC:7E:4E:BD:E9:AA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/5af83517-5c07-3ae7-8015-a5e60f3f5a81.roa
Signing time: Sat 04 Jan 2025 02:00:39 +0000
ROA not before: Sat 04 Jan 2025 02:00:39 +0000
ROA not after: Fri 04 Apr 2025 01:00:39 +0000
asID: 21957
IP address blocks: 2605:f440:5652::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6d:90:4c:47:84:5c:8a:17:59:69:c8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f3d25a0-f7e5-421d-8842-fc967bf08f72
Validity
Not Before: Jan 4 02:00:39 2025 GMT
Not After : Apr 4 01:00:39 2025 GMT
Subject: CN=36a141cd-c9fe-43db-a203-bfb60bd81bf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:b2:d8:1f:b4:40:7a:50:f8:1f:fa:1c:1d:6e:
4c:ad:9a:5d:80:85:67:b6:c6:e0:79:a7:b3:aa:85:
02:36:a0:39:78:b8:f9:dd:b7:fc:32:50:37:23:fa:
23:78:51:0c:7f:bf:d0:d6:8f:e1:8a:70:e6:ac:de:
18:ba:c9:6b:67:d3:60:74:8d:2f:ac:7f:86:49:24:
b4:54:e9:8d:aa:8b:8c:af:12:91:f6:c2:0e:46:c2:
eb:06:08:9a:f0:0d:26:d6:12:a5:ab:bc:44:64:54:
23:87:07:06:21:a8:a5:15:e1:1c:d6:55:67:2b:80:
33:4a:5f:e0:58:f6:38:90:49:3d:03:bc:3e:62:85:
e0:90:8f:eb:b5:8a:df:c7:78:2b:d4:51:c1:d6:4e:
9a:92:36:fd:c3:e2:0e:f6:1b:78:3d:05:50:8a:2e:
e9:0a:17:73:f0:e8:b8:a4:81:55:70:83:73:17:96:
1c:83:9d:84:ac:72:f7:1b:83:dd:2b:61:e4:69:e6:
d4:99:81:07:0c:23:8b:1e:63:29:f3:00:54:8f:70:
8f:39:39:67:b7:44:64:8f:0f:c8:7e:a1:b9:8b:9e:
ad:ce:0d:86:d9:95:da:53:ee:83:f4:24:e2:87:fe:
cd:44:39:c8:cd:14:a3:43:7c:0e:0b:ce:83:15:78:
46:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:3E:3C:05:87:31:9C:A2:35:50:80:3A:94:FC:FB:0E:A0:6F:EF:80
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/5af83517-5c07-3ae7-8015-a5e60f3f5a81.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/6f3d25a0-f7e5-421d-8842-fc967bf08f72.crl
X509v3 Authority Key Identifier:
keyid:57:D0:A4:F9:63:7E:3D:00:47:81:2C:DD:A6:7E:CC:7E:4E:BD:E9:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72.cer
sbgp-ipAddrBlock: critical
IPv6:
2605:f440:5652::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
51:58:95:13:46:3c:06:68:28:59:8b:27:d1:f7:df:db:2b:9e:
18:b8:35:66:1d:e1:3a:2b:ca:21:5d:92:ca:e2:72:4e:72:3c:
d7:a6:15:26:83:06:63:fa:07:99:99:f1:e2:93:e8:99:6c:f5:
45:0c:21:d6:c3:38:73:44:06:32:9c:68:e8:8c:d5:ae:cd:47:
55:27:85:a0:d3:33:62:10:33:91:c3:06:37:37:63:20:a5:5b:
bb:d8:62:57:7e:2d:e2:97:53:dd:aa:5c:a4:06:fa:f7:84:d8:
35:40:6c:2b:18:ad:8f:a8:e4:29:82:79:6a:da:3e:4d:0a:86:
47:5a:0e:89:e8:85:3f:64:37:5b:bc:3b:15:28:49:d9:fd:ce:
53:af:b8:a5:dd:82:98:87:57:8c:75:d7:89:a5:21:15:a2:03:
f0:80:b2:40:a8:af:56:29:0c:44:96:9c:16:e0:e3:c5:90:68:
0a:15:58:c1:04:dc:c3:d5:fa:12:0e:48:3c:21:fa:f9:8c:93:
d9:32:82:9b:0d:4b:88:54:c0:72:19:96:69:c7:9d:6f:63:d1:
0a:5d:34:ab:69:b4:a1:4a:e1:4a:18:20:bf:3b:58:21:38:bc:
f3:61:98:92:c8:6f:a8:66:b9:cb:c3:7b:b9:25:b1:c6:e3:7e:
a5:d8:68:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 18:20:39 2025 by rpki-client