Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/17198ad7-bd1a-36d5-bcdc-02a75b11c688.roa
File: 17198ad7-bd1a-36d5-bcdc-02a75b11c688.roa (raw, json)
Hash identifier: limYAmfcqCfVonDCjjzN8uv6qy0MvcHr6ILGUhwdURU=
Subject key identifier: 2F:ED:D0:AC:02:3C:BD:CE:F4:E1:10:C8:CF:13:D4:28:96:67:E2:E2
Certificate issuer: /CN=fd356b15-92b2-4e72-b8d9-fa490480d177
Certificate serial: 010D0C9F43285848159FDCD222DF42BF012B2880
Authority key identifier: 1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/17198ad7-bd1a-36d5-bcdc-02a75b11c688.roa
Signing time: Tue 03 Dec 2024 14:00:52 +0000
ROA not before: Tue 03 Dec 2024 14:00:52 +0000
ROA not after: Mon 03 Mar 2025 14:00:52 +0000
asID: 30133
IP address blocks: 2001:500:70::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:15:9f:dc:d2:22:df:42:bf:01:2b:28:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd356b15-92b2-4e72-b8d9-fa490480d177
Validity
Not Before: Dec 3 14:00:52 2024 GMT
Not After : Mar 3 14:00:52 2025 GMT
Subject: CN=0d992ba7-3856-4439-8fbc-8213926d1a57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e5:98:40:c1:a4:0a:8a:52:75:c4:4f:9f:21:
2e:04:22:ff:6d:ce:98:1e:de:e7:be:80:12:85:14:
ad:09:67:b4:33:60:31:31:64:67:51:50:37:23:63:
1b:ea:7b:a4:11:90:54:2f:5d:83:e7:81:3b:36:b0:
a3:78:36:d5:4c:69:d2:ac:b5:4b:5e:ac:c6:8f:05:
cc:1b:26:3c:e1:35:76:97:30:cc:63:c0:10:38:57:
69:8a:67:c3:c9:84:c8:1f:bd:8b:4f:25:73:52:2c:
e7:10:f8:3e:93:fd:b7:e9:f9:15:16:45:96:43:d3:
82:84:fe:cb:67:37:ec:00:0e:c5:e4:d8:e1:0f:0e:
02:82:d0:d1:4e:ac:46:0c:c4:71:42:64:51:0c:22:
6b:2a:23:de:1d:d4:e1:d1:df:2d:b5:b9:46:78:27:
00:bd:cc:4f:b5:a7:08:16:7e:1c:2d:59:b3:9e:7d:
6d:dd:c9:77:a5:22:ae:0f:ad:1e:6f:c1:31:39:d8:
39:75:2e:26:7a:1a:da:f8:da:8b:ec:86:a6:69:c8:
70:ca:1c:c4:78:16:f5:8f:98:50:f7:1a:05:e5:d5:
ea:f4:07:75:d3:c6:f6:12:d8:2f:67:d8:68:98:0d:
09:90:63:c2:71:2d:c6:6d:79:b0:a8:0d:0e:5b:4a:
8f:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:ED:D0:AC:02:3C:BD:CE:F4:E1:10:C8:CF:13:D4:28:96:67:E2:E2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/17198ad7-bd1a-36d5-bcdc-02a75b11c688.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl
X509v3 Authority Key Identifier:
keyid:1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:70::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
09:1e:8c:5e:b2:0d:df:ed:dd:eb:58:5a:c5:da:ff:a3:48:dc:
94:76:f6:26:98:e0:64:e5:c6:62:98:72:b3:66:a2:e5:59:04:
99:93:27:af:c6:8b:49:01:96:dd:f9:30:c2:0a:5a:1c:8f:e0:
5a:87:7b:d9:d2:67:e1:09:42:e5:7f:e1:51:ea:9b:28:e9:16:
86:cc:43:a4:60:ea:ae:89:29:40:37:3a:fd:ea:a1:7c:c0:62:
30:7e:9d:6e:e2:78:99:a1:a4:a7:cc:e7:d5:57:4e:3a:b1:72:
c4:c1:46:3c:9e:cc:72:b2:0e:ce:b8:62:91:9c:c0:47:0c:ce:
49:e0:c5:97:78:3a:6f:82:dd:7e:9c:64:99:7a:57:18:eb:5e:
5d:9e:d1:df:41:09:7a:c3:59:f7:04:df:4e:0e:65:d3:64:0b:
c7:29:c9:71:2b:c1:b9:13:3f:32:20:8c:ec:8f:16:aa:88:cb:
55:4b:49:60:12:06:85:0e:7a:f5:36:5b:ae:71:59:67:b8:03:
10:53:15:14:9f:5c:f1:0a:c7:b4:a2:3e:90:0b:3e:66:bb:93:
14:22:dc:c7:69:0d:0b:dc:91:3c:cc:55:7a:7a:b0:bd:51:db:
e3:23:56:43:f3:26:0c:30:ab:07:5d:09:f4:3c:5a:9c:47:2b:
51:0e:77:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:16:36 2025 by rpki-client