Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/5ad059d5-c2f7-31c1-abd5-db5132e61422.roa
File: 5ad059d5-c2f7-31c1-abd5-db5132e61422.roa (raw, json)
Hash identifier: OfJZm34SCQAAnWWnZwwbOHOhfAipoRTKdmJTyCoSPFM=
Subject key identifier: AF:F9:6E:7A:C9:9A:B5:ED:FE:C8:9E:44:62:0C:80:90:66:B3:A4:9C
Certificate issuer: /CN=fd356b15-92b2-4e72-b8d9-fa490480d177
Certificate serial: 010D0C9F43285848159FDC68F4B52D47B59A8B00
Authority key identifier: 1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/5ad059d5-c2f7-31c1-abd5-db5132e61422.roa
Signing time: Tue 03 Dec 2024 14:00:52 +0000
ROA not before: Tue 03 Dec 2024 14:00:52 +0000
ROA not after: Mon 03 Mar 2025 14:00:52 +0000
asID: 30133
IP address blocks: 2001:500:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:15:9f:dc:68:f4:b5:2d:47:b5:9a:8b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd356b15-92b2-4e72-b8d9-fa490480d177
Validity
Not Before: Dec 3 14:00:52 2024 GMT
Not After : Mar 3 14:00:52 2025 GMT
Subject: CN=e85a2ba0-81ed-4a2e-833a-d15b2e4c849c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:9f:0b:70:78:97:4a:e1:67:cf:6e:ff:15:1a:
a9:3f:cf:10:30:8c:9f:b7:5f:f7:2e:2d:7f:3d:25:
1e:f3:37:05:35:cf:ee:d7:cb:bd:6a:da:76:6e:fc:
56:1d:d8:b2:7e:cb:5c:2d:3d:da:0b:24:fd:b9:75:
0b:76:91:c0:ac:ec:a0:68:88:6a:84:45:97:41:98:
8e:bf:53:78:1b:05:cd:28:8e:18:2a:ee:36:d8:e2:
f0:28:86:62:01:94:23:45:c1:8a:40:da:b2:aa:b0:
75:3d:f6:13:17:aa:0e:40:96:d9:cf:ef:63:77:8a:
98:e7:ce:09:96:03:82:a2:3d:4d:53:f5:3e:11:f3:
ef:2e:25:00:66:2b:f1:25:1e:0a:72:bd:09:b1:bb:
48:d1:aa:6c:db:9c:a6:9d:f4:e2:aa:47:67:1b:e4:
62:58:e5:bc:71:34:7f:38:e8:6c:bc:7f:80:34:ed:
a6:f7:23:47:47:6c:43:68:98:57:ed:c4:21:45:96:
73:bc:ef:2f:51:71:70:a4:9c:00:70:bf:35:1f:a7:
e0:ac:e1:da:49:16:aa:1c:16:2f:bf:07:0d:a4:73:
05:d2:43:4a:29:a4:6e:e9:3c:63:86:4c:5d:5d:a9:
a7:61:3e:3e:dc:fe:9f:49:0a:b6:6e:7e:dd:2c:ea:
18:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:F9:6E:7A:C9:9A:B5:ED:FE:C8:9E:44:62:0C:80:90:66:B3:A4:9C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/5ad059d5-c2f7-31c1-abd5-db5132e61422.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl
X509v3 Authority Key Identifier:
keyid:1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:64::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2a:81:3e:92:38:d2:e8:8b:1e:8b:fd:fc:de:38:d1:ad:fe:69:
d7:98:06:78:3a:b1:77:13:81:06:56:ca:94:6e:a3:dc:ba:9c:
f5:de:88:7c:98:5f:a9:45:99:bb:da:28:c3:81:d5:76:6c:1e:
74:3f:38:e3:16:c0:04:5f:64:3d:aa:6b:1e:24:45:3d:b3:22:
89:81:a0:95:f7:49:ff:df:15:43:43:17:c5:84:33:23:74:82:
2f:d6:f1:ba:17:8e:c3:d4:5b:37:9b:84:2a:44:4d:e8:c1:a5:
84:1b:16:1c:f4:c9:02:b0:63:ef:4b:00:a6:29:e5:f7:e2:45:
17:1d:12:4b:0e:cb:4f:d1:f5:81:3a:15:3f:77:59:71:b8:80:
9a:6a:ba:8b:c8:4e:13:39:ed:67:eb:fd:da:d6:7a:18:2a:29:
eb:e0:78:56:e4:db:c0:a3:26:66:ff:79:76:c7:09:32:67:74:
3b:7e:69:56:7d:83:90:22:51:7f:9c:38:b9:f1:83:63:e7:54:
2b:c3:b1:8c:7b:58:bc:13:a1:7b:d4:9f:a3:ad:eb:af:54:db:
72:30:a3:7b:4c:a8:e0:74:0b:95:c5:fd:f6:fe:be:62:de:b1:
16:6e:83:d6:09:66:86:c6:41:be:b3:84:ae:48:7d:e8:b4:4a:
50:72:2c:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:14:38 2025 by rpki-client