Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/693bf772-b1c2-4f2f-976c-528b6f1d8e16/30a4a3af-0d7c-3196-8c2b-1ff6e8fe81e4.roa
File: 30a4a3af-0d7c-3196-8c2b-1ff6e8fe81e4.roa (raw, json)
Hash identifier: WWHETHBlZzizjcwdqZAWi1xUlL8dw9LdKrGQnlLjzgw=
Subject key identifier: 91:90:AA:20:10:09:39:67:9E:49:C7:1C:04:AA:BD:03:79:F9:A0:93
Certificate issuer: /CN=693bf772-b1c2-4f2f-976c-528b6f1d8e16
Certificate serial: 010D0C9F43285848A29B4BB124F928FF51DE3580
Authority key identifier: 04:3B:91:26:43:5A:E5:3D:B9:21:35:BF:18:C6:36:D0:DA:9D:41:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/693bf772-b1c2-4f2f-976c-528b6f1d8e16.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/693bf772-b1c2-4f2f-976c-528b6f1d8e16/30a4a3af-0d7c-3196-8c2b-1ff6e8fe81e4.roa
Signing time: Thu 23 Jan 2025 02:00:40 +0000
ROA not before: Thu 23 Jan 2025 02:00:40 +0000
ROA not after: Wed 23 Apr 2025 01:00:40 +0000
asID: 33501
IP address blocks: 2607:19c0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a2:9b:4b:b1:24:f9:28:ff:51:de:35:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=693bf772-b1c2-4f2f-976c-528b6f1d8e16
Validity
Not Before: Jan 23 02:00:40 2025 GMT
Not After : Apr 23 01:00:40 2025 GMT
Subject: CN=b539c445-2560-4a23-b561-4cf9fffc6f39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:70:7c:97:60:96:ed:dd:5b:21:bc:ef:03:ec:
a2:de:1b:2f:df:ba:ea:38:43:b3:75:2e:59:c0:38:
6a:18:e3:db:92:48:44:ae:7c:3a:4c:9a:7b:5e:e1:
4b:3a:a5:cf:68:2c:ad:a9:83:e7:f2:ba:5b:6a:80:
17:5b:2f:50:c1:72:53:dc:ca:a1:ab:18:08:c4:1e:
69:46:5f:40:f3:2d:93:44:ca:10:de:60:fb:85:2b:
2e:3f:d0:e7:ae:f8:bf:d1:e5:31:49:53:9b:82:e0:
97:74:8e:53:4c:b6:c5:70:02:7f:d6:15:30:cb:cb:
44:c4:09:85:31:dc:76:89:1a:6d:de:f9:af:16:2a:
c1:4a:70:cd:f5:08:26:b3:5e:82:8b:6a:be:ba:8d:
10:ab:29:62:46:ed:9f:ac:66:8e:12:98:ea:cb:8e:
ac:e4:de:48:f6:b1:85:73:95:62:2f:52:70:e4:b6:
46:aa:11:91:c4:bd:12:f3:d7:f0:d3:89:48:2d:12:
ed:38:b4:24:a3:54:29:aa:3f:99:60:1a:eb:bd:cb:
12:1b:d7:cc:19:8b:df:7f:ef:31:c4:2f:c8:ca:e2:
06:d3:44:30:82:3f:de:94:c2:09:47:f3:81:06:df:
31:16:a8:49:72:87:e9:3a:59:be:bc:1c:b3:70:1e:
5a:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:90:AA:20:10:09:39:67:9E:49:C7:1C:04:AA:BD:03:79:F9:A0:93
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/693bf772-b1c2-4f2f-976c-528b6f1d8e16/30a4a3af-0d7c-3196-8c2b-1ff6e8fe81e4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/693bf772-b1c2-4f2f-976c-528b6f1d8e16/693bf772-b1c2-4f2f-976c-528b6f1d8e16.crl
X509v3 Authority Key Identifier:
keyid:04:3B:91:26:43:5A:E5:3D:B9:21:35:BF:18:C6:36:D0:DA:9D:41:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/693bf772-b1c2-4f2f-976c-528b6f1d8e16.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:19c0::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5a:c2:20:e4:a1:65:b4:b5:f5:e0:9f:05:db:f6:5b:1d:8c:89:
23:0b:6e:7f:63:bd:19:a6:ca:41:dc:90:89:55:57:66:92:3c:
c9:03:69:07:ce:4a:bb:21:25:e1:bb:1d:45:dd:a2:d9:cf:b0:
14:46:1f:57:20:0f:ab:70:9d:0f:97:12:e1:2c:29:e8:50:d2:
53:61:c8:62:fb:5e:e9:9d:8d:fb:b2:59:ec:a6:c6:4c:c9:6c:
11:5a:6f:a2:f1:66:cd:ee:13:3b:25:df:d2:f5:e0:b0:17:1f:
c2:08:55:1b:2d:87:08:ab:77:12:95:b8:6a:db:48:69:3a:3b:
70:56:4e:21:c1:7d:24:56:97:a5:77:ed:84:ee:9a:24:1a:6d:
31:d8:44:ea:20:92:dd:34:28:0a:70:7c:d7:53:46:67:08:f1:
63:be:b1:4e:78:54:c3:d6:3b:3b:94:66:8c:6b:fa:21:d1:01:
93:c0:39:7e:32:5e:0e:1b:75:81:87:08:b2:09:21:62:4f:ff:
99:de:ad:e0:6b:e2:3d:7a:7d:69:8d:4b:10:a9:4a:d1:35:20:
f0:a4:36:0d:ef:5f:c4:72:4a:f4:d0:4f:40:52:d6:98:4c:80:
d1:80:b1:7c:ef:a6:7d:22:e3:db:1a:d7:cc:fb:8d:5b:de:c1:
23:d6:72:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 23:33:24 2025 by rpki-client