Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/c36241c5-6e73-3acd-81af-a58fa4976633.roa
File: c36241c5-6e73-3acd-81af-a58fa4976633.roa (raw, json)
Hash identifier: gIc0pYITmYGX12PRj3Q7q4Vvmg+gVzd6Ph/w3NZsgFo=
Subject key identifier: AA:A4:AE:52:54:41:BE:5F:AB:BD:D4:3E:5C:AA:46:4E:15:75:32:DD
Certificate issuer: /CN=fd356b15-92b2-4e72-b8d9-fa490480d177
Certificate serial: 010D0C9F4328584855D598CF4CF688F755322A80
Authority key identifier: 1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/c36241c5-6e73-3acd-81af-a58fa4976633.roa
Signing time: Thu 26 Dec 2024 14:00:52 +0000
ROA not before: Thu 26 Dec 2024 14:00:52 +0000
ROA not after: Wed 26 Mar 2025 13:00:52 +0000
asID: 1280
IP address blocks: 2001:4f8::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:55:d5:98:cf:4c:f6:88:f7:55:32:2a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd356b15-92b2-4e72-b8d9-fa490480d177
Validity
Not Before: Dec 26 14:00:52 2024 GMT
Not After : Mar 26 13:00:52 2025 GMT
Subject: CN=ab28da8d-5048-44dd-b90e-6239f5ebe19b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ee:48:d9:ed:27:36:5d:9a:bd:14:7b:78:83:
a7:39:e6:92:eb:c5:40:80:48:79:f4:3e:82:f7:43:
a1:75:41:a8:1f:ce:b1:d6:b9:6f:b7:5e:a4:d2:ec:
82:6a:d0:2c:49:9b:a6:70:05:5b:b6:1f:93:ee:2d:
07:bd:92:73:8f:2f:b6:67:85:2c:fe:7d:0e:29:35:
c7:bd:64:4a:57:fb:ba:69:2e:91:63:9c:ef:33:63:
fb:6a:7f:b5:12:33:1d:95:fe:5b:e2:8f:57:fe:f9:
9f:27:e2:90:ec:47:bf:0d:09:5b:f8:3d:cf:35:1c:
e5:43:7f:8c:bc:89:80:10:00:44:19:fb:9e:2c:01:
e8:b8:4b:7e:55:f9:c2:fc:a6:c0:2d:50:ca:24:22:
18:ee:c4:10:2d:2c:f4:79:f3:0d:8c:d7:a5:1f:4e:
8f:90:95:5e:23:14:75:83:3d:8b:b1:be:9a:50:6b:
1c:c8:6b:bf:a3:b8:27:bc:53:ec:5c:a5:79:73:59:
0a:1a:f5:72:a1:a6:50:d0:11:db:1b:17:6f:d0:e5:
e1:70:83:c0:c1:2e:2c:8c:e4:92:7e:fc:49:08:dc:
8a:5f:52:91:7f:8f:34:09:46:97:68:92:93:e4:64:
c8:59:c8:8d:07:d8:9e:26:a7:c6:f1:14:15:5d:6f:
a0:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:A4:AE:52:54:41:BE:5F:AB:BD:D4:3E:5C:AA:46:4E:15:75:32:DD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/c36241c5-6e73-3acd-81af-a58fa4976633.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl
X509v3 Authority Key Identifier:
keyid:1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:4f8::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
81:b4:f1:05:86:f1:fc:37:0b:c8:c8:c3:6d:90:bb:dd:04:06:
b3:11:61:17:ae:9b:85:8a:fd:91:80:ab:0d:5f:b0:e5:44:f7:
72:0f:0a:6b:2f:8b:24:a4:99:d2:37:02:c1:51:c5:c0:db:42:
64:df:4d:bf:54:3e:d3:9b:bd:ee:f9:33:40:9e:1d:d6:1f:7f:
33:69:13:ce:63:bd:30:a1:f6:e4:02:af:37:13:0b:50:21:cc:
ad:09:19:2a:bf:20:45:f1:60:80:21:86:cd:18:51:f7:de:a5:
36:56:c7:bc:db:ac:2d:15:39:e9:6a:b2:a1:d3:2e:65:50:78:
ea:a2:04:99:b9:27:14:fa:ad:6e:28:70:70:ce:9f:be:01:70:
95:4d:ef:56:f0:cf:0a:c8:54:ff:65:18:88:f7:1f:6b:5d:3f:
af:cc:f4:f6:4c:e0:01:81:c3:fd:d0:7e:81:4d:6a:ad:4d:1a:
1b:5e:ee:78:ac:ab:74:ea:3c:da:be:5d:89:79:e5:0c:6e:d8:
02:4f:c1:69:c5:51:46:c3:4a:05:32:bc:78:bb:7d:70:40:4e:
5d:6e:56:5a:5a:2f:27:4c:28:43:09:e9:fe:f7:37:71:5e:fc:
6b:7f:fe:84:5c:c6:5c:a9:42:94:35:0c:62:a1:53:df:2b:47:
a2:68:49:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 11:28:30 2025 by rpki-client