Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81/df12f078-5456-3917-8525-a66090296939.roa
File: df12f078-5456-3917-8525-a66090296939.roa (raw, json)
Hash identifier: pJp2Axme4mlg5cOUNlTetGhTm1+0Nq2qD/k/kkjq0Qw=
Subject key identifier: 44:EA:F1:AC:01:0A:3F:25:61:C3:13:B3:58:D2:3E:9F:2F:A8:78:13
Certificate issuer: /CN=082ca3a2-9e2b-49da-aaee-2b02d0898f81
Certificate serial: 010D0C9F432858487CEB3CD3F9F2FF420E734280
Authority key identifier: 85:B8:6E:76:79:36:38:96:03:F5:DA:8D:DE:1B:AE:D9:B4:1F:4C:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81/df12f078-5456-3917-8525-a66090296939.roa
Signing time: Thu 09 Jan 2025 14:00:52 +0000
ROA not before: Thu 09 Jan 2025 14:00:52 +0000
ROA not after: Wed 09 Apr 2025 13:00:52 +0000
asID: 26383
IP address blocks: 2605:e440:24::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7c:eb:3c:d3:f9:f2:ff:42:0e:73:42:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=082ca3a2-9e2b-49da-aaee-2b02d0898f81
Validity
Not Before: Jan 9 14:00:52 2025 GMT
Not After : Apr 9 13:00:52 2025 GMT
Subject: CN=90b14379-001e-492a-bb2a-09f1eda0aa3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:97:6c:65:e5:24:4d:bc:db:e8:0a:54:00:57:
45:d7:5c:3c:4b:f4:5d:95:e4:6c:00:64:50:34:07:
a1:ba:a7:a1:de:c9:4b:25:cb:a6:87:db:de:b3:b0:
22:28:fa:17:4f:ce:66:f9:a2:57:cb:97:48:ae:3e:
c3:65:40:3c:fb:fa:e7:da:34:65:47:4f:29:49:51:
00:0c:2b:c2:da:a3:c9:77:af:d6:7c:33:51:37:49:
ee:aa:92:6c:e1:52:2e:28:8f:b4:4b:bd:f7:9a:8f:
1b:15:21:4c:10:6f:1c:71:18:e1:de:21:2d:84:c9:
a0:d0:f9:09:06:54:88:d4:17:eb:0b:8d:21:e4:7f:
31:07:86:69:f8:00:52:87:20:67:ac:03:07:5e:2d:
b4:c9:79:3f:80:9c:56:b7:a5:a1:97:6a:6a:db:b4:
bf:93:07:e1:5a:9e:22:b6:62:5e:36:9c:d9:b5:4e:
51:12:72:99:e2:7d:ce:05:7b:f8:1e:cf:29:fe:b0:
f8:8f:a5:20:7d:b7:2c:a4:90:f9:96:cd:58:a2:8d:
9c:da:67:a3:90:d5:ff:f6:4a:a5:b7:ee:af:cb:6c:
2c:13:ba:d0:5a:c8:2f:aa:6f:f4:99:c3:d8:bf:d0:
3e:0b:96:9d:8f:7b:ed:d5:6d:27:03:c8:37:f2:60:
09:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:EA:F1:AC:01:0A:3F:25:61:C3:13:B3:58:D2:3E:9F:2F:A8:78:13
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81/df12f078-5456-3917-8525-a66090296939.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81/082ca3a2-9e2b-49da-aaee-2b02d0898f81.crl
X509v3 Authority Key Identifier:
keyid:85:B8:6E:76:79:36:38:96:03:F5:DA:8D:DE:1B:AE:D9:B4:1F:4C:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81.cer
sbgp-ipAddrBlock: critical
IPv6:
2605:e440:24::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
54:47:ba:00:d7:2c:cc:5f:a7:1d:32:fe:df:d8:ce:87:a7:bc:
a4:7d:4b:97:b1:ad:78:a8:9d:d5:36:af:dd:95:db:71:d6:c0:
4c:8e:88:79:1d:4d:61:28:d3:59:cd:1a:20:ad:6d:f4:fa:ac:
7f:6f:65:69:d5:6a:70:32:ac:40:5a:6c:97:75:21:1a:f4:96:
7e:fc:31:50:bb:e7:12:32:be:ca:90:c0:23:0e:f2:6a:54:e2:
98:20:d0:99:0f:af:bb:cf:d0:1e:71:d0:dd:41:52:c9:09:34:
b0:c8:85:9c:a1:7c:b3:a2:99:7a:1a:4d:29:ec:26:45:8d:05:
12:1b:50:5c:d7:7e:4f:e6:d2:d5:61:9d:ff:6a:ef:a2:93:7a:
bb:cc:b7:42:df:7e:ef:49:db:73:20:79:65:f4:79:ab:aa:ab:
d9:03:e8:ad:f3:70:52:f6:dc:74:9c:d2:2b:a4:e1:1f:8b:81:
1b:0f:e3:17:d3:01:5b:69:32:14:35:f0:68:d0:e6:17:ee:11:
9b:ac:28:8f:c7:8e:84:14:e5:0d:4d:2b:1d:b4:ce:76:e4:f0:
92:c7:5e:76:93:c2:96:44:d1:10:24:52:25:5d:f6:e5:c3:0f:
f8:bb:3e:aa:8e:e9:0d:ad:3f:e4:f7:d4:10:93:d2:83:29:89:
87:9e:cc:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:42:56 2025 by rpki-client