Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/676eb13d-9a49-36c3-a75c-5e0045fee327.roa
File: 676eb13d-9a49-36c3-a75c-5e0045fee327.roa (raw, json)
Hash identifier: 0aFpMKUMp1qpgyIcbYwlxi2WVabqKZITqw3hypS83dU=
Subject key identifier: A4:C2:5C:16:5B:B1:5C:70:EF:5B:77:73:99:31:DB:0C:AE:1F:DF:0D
Certificate issuer: /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial: 010D0C9F432858487325BE81378142AF5C088B80
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/676eb13d-9a49-36c3-a75c-5e0045fee327.roa
Signing time: Mon 06 Jan 2025 02:00:40 +0000
ROA not before: Mon 06 Jan 2025 02:00:40 +0000
ROA not after: Sun 06 Apr 2025 01:00:40 +0000
asID: 54113
IP address blocks: 2620:11a:c01a::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:73:25:be:81:37:81:42:af:5c:08:8b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
Validity
Not Before: Jan 6 02:00:40 2025 GMT
Not After : Apr 6 01:00:40 2025 GMT
Subject: CN=336b1c9a-93ff-424b-a029-6b04e4539cc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:b7:83:15:d7:7c:19:c4:26:9f:d9:13:a2:e4:
bb:c1:6d:0c:19:0e:e1:8c:f4:aa:28:6c:4c:20:2b:
93:80:30:38:c1:b6:bf:d0:95:d5:4e:b2:18:11:71:
f7:84:77:6c:ce:3a:b8:73:1a:30:0d:32:2b:b6:fb:
ec:25:98:ed:14:75:34:aa:15:fc:59:d0:2b:d4:96:
c3:93:e0:25:1b:82:2a:b4:7a:29:d1:b2:98:da:23:
25:40:ae:62:d9:00:21:8d:3b:5f:ac:d0:62:20:48:
25:16:7f:8d:a5:cd:d9:84:2c:8d:73:da:85:92:0c:
78:26:52:35:08:28:e8:b5:3d:c9:73:69:e6:2b:84:
44:7b:74:86:50:3d:b7:41:66:64:00:ae:00:4a:69:
76:b2:d7:b9:13:0e:70:8a:72:4d:04:54:1b:7a:34:
91:a4:f8:7a:9b:2d:13:e8:57:03:d7:2a:38:a2:c2:
5b:82:42:f1:74:60:9f:11:6b:b3:e4:82:b0:af:5b:
fe:72:e6:2e:4a:54:4b:c2:b4:c1:cd:28:aa:76:81:
0d:f6:4e:21:1b:f7:10:54:6c:3c:8b:a0:07:bd:43:
ba:56:2c:12:89:48:70:a3:c7:8c:6c:b8:2c:ca:8c:
07:9e:55:dd:eb:a4:e6:89:ae:e4:1e:1c:14:50:73:
f2:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:C2:5C:16:5B:B1:5C:70:EF:5B:77:73:99:31:DB:0C:AE:1F:DF:0D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/676eb13d-9a49-36c3-a75c-5e0045fee327.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
X509v3 Authority Key Identifier:
keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:11a:c01a::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
52:0f:fc:76:50:0a:aa:fb:3e:71:37:4e:d3:5b:d6:35:88:81:
77:36:a7:9e:22:5e:0e:de:b3:29:59:43:b6:15:b0:9b:f7:0d:
60:12:db:01:6c:db:fd:cd:d8:b4:5a:42:2f:ef:b2:bd:4f:44:
53:90:a7:55:c1:4e:53:52:db:76:ae:ca:34:99:d9:f4:9d:95:
50:02:a3:81:fa:53:fa:9e:9a:4e:bd:f2:d2:3e:ed:fa:8e:7e:
0d:ae:69:73:fa:37:8c:5d:bb:4d:12:67:e4:e0:5d:f2:3e:03:
8c:c6:f2:f8:d7:ee:d5:d9:cf:be:a6:5a:05:4d:3d:00:69:5a:
74:76:e4:1d:75:01:3a:7d:1a:c2:48:bb:2d:f2:bd:46:d2:3d:
7e:2b:63:62:88:ee:e8:c2:00:22:0a:91:f3:8d:47:73:23:90:
75:9f:9a:f0:f1:ab:3d:db:63:a6:d9:53:31:de:9b:34:1e:11:
d6:ec:c4:36:90:b2:4a:6c:69:fb:d2:22:9b:41:69:40:f2:7b:
6e:20:69:9a:c1:ab:04:eb:aa:6f:ed:a5:1e:cb:f1:e1:8e:0e:
02:84:2e:20:6e:a1:2c:57:dd:18:00:1f:da:33:e9:96:7e:fb:
0d:60:9e:c4:34:a1:f4:a5:79:a9:a3:07:2c:e8:d1:6e:a8:31:
68:5b:a7:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:00:30 2025 by rpki-client