Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/308101b7-4f7a-334d-a356-35db7e3db0fe.roa
File: 308101b7-4f7a-334d-a356-35db7e3db0fe.roa (raw, json)
Hash identifier: 49qxYXipzgddkphwdEqS0EHqTn2fqA4I1n/efqHV0ew=
Subject key identifier: 5A:6B:27:4E:65:37:4E:F4:9D:61:26:CA:3B:1E:3F:51:06:1F:94:99
Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
Certificate serial: 010D0C9F432858486C2B3026B3F8AFB9DFAC2980
Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/308101b7-4f7a-334d-a356-35db7e3db0fe.roa
Signing time: Fri 03 Jan 2025 14:00:51 +0000
ROA not before: Fri 03 Jan 2025 14:00:51 +0000
ROA not after: Thu 03 Apr 2025 13:00:51 +0000
asID: 11404
IP address blocks: 2605:2980::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6c:2b:30:26:b3:f8:af:b9:df:ac:29:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
Validity
Not Before: Jan 3 14:00:51 2025 GMT
Not After : Apr 3 13:00:51 2025 GMT
Subject: CN=2f81b6f9-1c8f-4d43-8c96-b042ffff8c93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:47:00:cb:6a:9e:da:43:60:f3:d9:ef:87:72:
c5:18:59:73:f5:f9:12:bd:41:aa:1d:c7:f9:1a:67:
88:4d:c6:38:56:d0:88:d6:28:e0:2d:5c:f7:d2:74:
83:88:2f:ef:d2:f8:2d:72:65:21:c8:c2:c1:49:08:
95:0b:e1:1d:a5:81:46:df:d7:5d:52:91:98:d4:dc:
07:5c:95:69:82:33:e1:bc:71:f7:e9:b6:21:cc:4f:
e1:cb:5d:99:a6:ff:24:5a:0b:51:4b:69:91:bc:72:
e2:91:64:6f:0a:4f:7e:5f:fb:f5:e0:60:25:1f:6d:
ab:c8:af:b7:f1:68:11:2d:4f:41:a9:8e:33:ec:b8:
a3:15:0d:26:f8:65:13:9a:a9:6a:10:b7:94:a8:d3:
6e:48:1e:05:da:78:53:f9:d4:e1:61:6a:0e:ff:58:
97:55:18:56:aa:23:c2:44:b2:06:3d:41:69:14:bc:
d3:cd:6c:25:fb:dc:12:fc:31:3d:55:f3:9f:eb:b1:
a8:51:22:80:c5:9e:15:b9:10:e3:0a:dd:e5:39:ac:
b4:c4:83:ec:14:48:e2:d9:86:2d:95:3d:c7:c8:29:
39:69:47:48:c8:31:0d:c5:83:f7:46:35:d7:e1:78:
d4:97:39:9a:24:47:f1:b8:de:f2:06:7e:8c:08:04:
a5:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:6B:27:4E:65:37:4E:F4:9D:61:26:CA:3B:1E:3F:51:06:1F:94:99
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/308101b7-4f7a-334d-a356-35db7e3db0fe.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl
X509v3 Authority Key Identifier:
keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
sbgp-ipAddrBlock: critical
IPv6:
2605:2980::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
39:a6:3d:a7:14:bd:3f:c0:f6:ab:2e:6c:5b:fb:fe:8c:d3:15:
cc:c4:d2:0f:22:d7:36:fe:e2:98:13:ce:c6:1f:8c:f7:2f:b3:
cb:7a:35:02:3b:6d:a6:7d:a5:b2:45:5d:8b:51:c3:15:3d:52:
1f:89:6f:35:f9:f1:76:a6:c5:03:d9:e3:d0:58:8a:60:c8:e4:
07:8c:46:26:3e:7d:3d:af:46:71:62:b6:7f:e3:45:6b:56:66:
01:00:0b:97:c0:98:6d:c6:51:59:cd:5e:67:d7:3e:c3:fd:ce:
a1:06:a1:02:04:f6:42:dd:af:00:62:98:1c:13:bd:4f:b0:87:
7e:1c:06:49:60:e8:e5:27:2c:d3:20:fa:e8:7a:92:a8:24:d7:
4e:9a:11:83:51:a8:71:78:b4:67:73:fb:ec:16:3e:92:51:96:
db:74:36:fa:ef:6a:ee:cb:8d:c1:94:08:48:cb:f6:a7:5d:dc:
77:95:44:b1:bb:38:21:bb:b0:bb:be:7c:d9:c9:f3:b9:d4:1d:
f5:2c:35:fd:ac:8a:ae:5c:69:e9:64:bd:36:81:06:2f:58:6f:
09:ae:5d:ce:a4:15:b9:97:fa:ce:d4:f3:ff:cb:50:f6:cc:f9:
d7:43:68:38:e6:b9:ed:1d:51:0e:9f:21:e1:f0:90:1f:94:cd:
73:07:99:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 21:25:41 2025 by rpki-client