Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/a3882799-952b-3088-babc-d21c9fdf0685.roa
File: a3882799-952b-3088-babc-d21c9fdf0685.roa (raw, json)
Hash identifier: 0DMGk/J1eWPZlAhgN/j67QpP7EGi3bOdGS5tbMAYh14=
Subject key identifier: 22:E0:BF:23:DF:80:12:5A:8A:9E:42:D5:AB:09:0B:E8:7C:6D:41:69
Certificate issuer: /CN=967a98b0-100f-4e69-8a9f-bceadb7e9aae
Certificate serial: 010D0C9F43285848530AF5966FD500FE6D213480
Authority key identifier: D7:58:38:BE:C8:09:07:F1:E1:A0:15:B7:87:BF:21:AC:00:49:39:3B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/a3882799-952b-3088-babc-d21c9fdf0685.roa
Signing time: Wed 25 Dec 2024 14:00:52 +0000
ROA not before: Wed 25 Dec 2024 14:00:52 +0000
ROA not after: Tue 25 Mar 2025 13:00:52 +0000
asID: 29854
IP address blocks: 2607:fc98::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:53:0a:f5:96:6f:d5:00:fe:6d:21:34:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=967a98b0-100f-4e69-8a9f-bceadb7e9aae
Validity
Not Before: Dec 25 14:00:52 2024 GMT
Not After : Mar 25 13:00:52 2025 GMT
Subject: CN=235a4e9a-5083-4314-a4ef-f9e3147a6bee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:91:57:fc:ac:4c:e2:63:88:ad:a4:8c:19:fd:
22:1b:2c:e9:6c:1d:1d:83:59:b0:c2:87:2f:71:f2:
01:66:29:06:fe:a5:67:3b:08:fa:09:ac:90:36:24:
57:09:c9:78:10:a2:a9:0f:c6:cb:22:41:5e:eb:47:
2b:0a:43:eb:2f:8b:0e:8f:37:92:9b:e3:5c:98:a8:
1f:63:e1:57:81:df:cf:f5:14:47:96:ec:a9:05:8f:
2e:c8:2b:7d:3a:d2:b5:ab:e6:1a:e8:8e:ad:31:41:
dc:4b:c6:bb:bd:a7:ab:de:e2:90:bf:0c:a0:f3:8b:
9d:45:83:db:0c:e7:0a:ee:fa:53:56:45:d8:fb:e1:
3c:d0:ad:5a:7b:55:52:e5:0a:9f:ae:bd:81:53:ea:
9d:a5:9e:30:f6:d2:04:0b:ea:ef:b2:d5:0b:d4:65:
c1:5d:47:d2:d5:7a:da:77:6d:56:69:3f:18:1a:0c:
4e:f3:4b:f3:19:4b:85:f1:21:9c:a9:a2:94:c2:54:
fc:7a:d1:2d:61:eb:34:9b:c1:51:df:40:1b:70:05:
b4:71:13:4a:80:b5:b4:aa:fe:df:9e:f1:4f:88:b6:
1c:6b:7f:d6:5a:7c:57:52:6f:5d:47:37:30:39:13:
6d:88:07:e5:31:bd:ed:ae:4b:d3:1c:0e:27:96:c4:
1e:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:E0:BF:23:DF:80:12:5A:8A:9E:42:D5:AB:09:0B:E8:7C:6D:41:69
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/a3882799-952b-3088-babc-d21c9fdf0685.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/967a98b0-100f-4e69-8a9f-bceadb7e9aae.crl
X509v3 Authority Key Identifier:
keyid:D7:58:38:BE:C8:09:07:F1:E1:A0:15:B7:87:BF:21:AC:00:49:39:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:fc98::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
26:6a:25:08:b1:6d:ba:31:ac:9c:1e:8b:35:45:25:61:57:c2:
2c:48:a4:a1:dc:89:62:ba:5e:49:ab:b4:b6:44:de:1e:39:51:
bf:ba:8b:12:45:dc:b0:c9:b8:2d:87:9e:f0:a5:ed:ff:ae:01:
89:4a:7a:e0:d3:d9:9f:7a:0e:04:d0:41:7e:a0:37:e6:23:1a:
e5:74:86:25:ed:15:e7:b5:34:88:1b:9a:7c:f0:b8:3e:4f:e2:
4b:f1:d9:91:a1:b6:23:41:74:7c:46:00:bd:68:b6:df:51:85:
2c:72:17:b1:5b:8e:aa:5f:42:b0:86:bf:8d:c8:99:00:6c:8a:
11:d0:74:2f:a9:78:c5:e1:1b:15:0a:c0:57:56:0b:0c:ac:ae:
4b:e2:eb:ad:e4:ae:ae:73:77:b4:3b:75:b0:d3:35:67:db:58:
38:e3:0e:19:19:89:8e:bc:72:cf:0c:ef:63:13:5e:4c:e5:81:
c0:94:ce:41:96:b7:02:71:fa:dd:49:16:a7:07:65:98:36:71:
86:59:59:56:ec:56:fe:1b:09:91:10:39:08:fd:2a:b7:95:46:
77:dc:85:99:6f:70:d7:01:2c:7f:b2:99:3f:db:dd:30:48:28:
5c:a8:b3:f4:55:32:a3:78:7c:5c:5c:21:15:28:f3:f0:c5:80:
69:c5:e5:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:19:49 2025 by rpki-client