Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0412f035-b376-4807-a8ac-e98680ab0e36/8370a0b9-b3bb-3794-b676-98a3ff12db47.roa
File: 8370a0b9-b3bb-3794-b676-98a3ff12db47.roa (raw, json)
Hash identifier: 3peANxin71kchWCWZTO69TlP8rmmVdJ3PIVUAvopUnc=
Subject key identifier: B5:69:FC:F2:9F:7D:94:1C:0D:8D:F5:C5:83:58:77:61:A4:EF:37:D2
Certificate issuer: /CN=0412f035-b376-4807-a8ac-e98680ab0e36
Certificate serial: 010D0C9F432858486695C55B41C53A9D9077A200
Authority key identifier: 89:71:A9:FF:83:E0:46:16:D8:3E:5B:E7:78:2B:13:F8:84:29:F0:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0412f035-b376-4807-a8ac-e98680ab0e36.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0412f035-b376-4807-a8ac-e98680ab0e36/8370a0b9-b3bb-3794-b676-98a3ff12db47.roa
Signing time: Wed 01 Jan 2025 14:00:53 +0000
ROA not before: Wed 01 Jan 2025 14:00:53 +0000
ROA not after: Tue 01 Apr 2025 13:00:53 +0000
asID: 6142
IP address blocks: 2620:9:a004::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:66:95:c5:5b:41:c5:3a:9d:90:77:a2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0412f035-b376-4807-a8ac-e98680ab0e36
Validity
Not Before: Jan 1 14:00:53 2025 GMT
Not After : Apr 1 13:00:53 2025 GMT
Subject: CN=44a639bf-235b-442e-8fc0-0c6d3c8e834e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:a6:05:e1:84:bf:8f:72:81:22:93:05:ad:4f:
87:45:54:d7:7d:09:01:ea:a0:b3:94:b7:c3:5e:fd:
e7:25:a9:cc:a8:2c:34:d7:15:c7:2f:58:e2:59:2e:
7f:ac:97:8b:c1:13:b4:56:d7:be:a6:b1:6e:31:d3:
17:50:e4:dc:f8:84:20:9a:de:f8:9e:52:21:fa:65:
85:fe:59:7a:60:64:33:0d:63:d0:32:1b:bd:76:f0:
9e:fd:a6:8e:fe:ca:50:f8:52:eb:90:d2:23:49:7a:
6b:4c:47:7b:9a:fa:06:43:ae:fd:1c:b2:7a:9a:e1:
b3:e8:5c:81:80:1d:08:90:72:d7:5c:aa:78:ab:1a:
99:f1:e5:ad:e7:39:f6:b8:78:bc:49:fc:e2:1a:92:
b9:07:0f:11:65:00:ba:b1:a3:d3:87:d2:f0:6d:63:
0c:d1:d1:ed:d9:4b:6f:0d:90:72:04:b1:c3:d0:e9:
37:f8:c9:ea:2d:84:a8:9e:61:55:44:ff:6d:dc:45:
fe:16:eb:e5:fe:cd:a7:c6:38:23:7c:31:b6:e0:00:
96:19:22:f1:f4:bd:fe:58:fe:00:64:4b:c7:37:44:
55:a7:10:9f:6c:94:ad:da:e3:4c:37:f6:30:65:11:
e5:02:3d:62:33:73:38:e2:78:37:a2:33:8e:1e:a1:
0c:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:69:FC:F2:9F:7D:94:1C:0D:8D:F5:C5:83:58:77:61:A4:EF:37:D2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0412f035-b376-4807-a8ac-e98680ab0e36/8370a0b9-b3bb-3794-b676-98a3ff12db47.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0412f035-b376-4807-a8ac-e98680ab0e36/0412f035-b376-4807-a8ac-e98680ab0e36.crl
X509v3 Authority Key Identifier:
keyid:89:71:A9:FF:83:E0:46:16:D8:3E:5B:E7:78:2B:13:F8:84:29:F0:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0412f035-b376-4807-a8ac-e98680ab0e36.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:9:a004::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8d:8c:b3:11:04:4a:35:22:66:8a:f6:1c:b7:78:ef:5b:56:f1:
68:85:b2:67:52:62:dc:ab:aa:b8:4a:58:5c:8e:00:a0:86:9a:
26:e4:33:18:02:d5:9c:4a:f2:68:2c:be:d5:fb:83:7e:d6:4d:
c7:7e:75:6e:af:1f:94:bf:38:ac:7f:19:49:70:c9:63:6b:e6:
34:bc:1d:f1:09:47:37:c5:03:8e:03:06:e5:fa:ab:6e:16:ab:
d0:61:63:d1:23:c8:c1:6f:af:6c:54:28:37:53:13:63:80:48:
48:d7:31:e7:ce:86:47:0f:aa:5f:c2:f1:ac:4c:e1:59:f4:ea:
ff:64:3b:23:79:63:68:1d:4d:34:d5:f0:f3:3d:31:6b:42:23:
bb:6f:d7:34:4d:a3:c8:fb:d2:c9:38:81:0f:f7:57:23:8d:8d:
4b:8a:70:21:b5:07:a6:30:91:f9:c4:36:43:c9:a7:4e:37:c5:
c3:6a:2b:50:81:99:9e:22:28:15:3c:3d:40:5c:c6:17:ff:7f:
5f:e9:d2:22:52:90:66:0d:e3:68:7b:0b:7b:6d:43:55:4f:23:
24:c1:2d:4a:54:d7:dd:a1:ef:74:f1:fb:47:60:5e:5d:e5:b2:
e8:49:91:63:02:61:46:3d:6c:f5:d8:91:69:6b:bd:7c:dd:bf:
d0:78:f9:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 10:25:09 2025 by rpki-client