Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2/e234c5cf-6ad7-350b-9018-aeef40195ca6.roa
File: e234c5cf-6ad7-350b-9018-aeef40195ca6.roa (raw, json)
Hash identifier: aAUUBBx2iU6rZ3nCSeHKTsg8lvO5oxCpy+/KG0iWi6M=
Subject key identifier: A8:A5:89:69:84:2C:29:87:CE:0F:7D:0B:B4:6C:36:E2:6B:64:91:86
Certificate issuer: /CN=89dfa952-929a-4c50-a372-96882b2b33e2
Certificate serial: 010D0C9F432858486C2B1FE2495D70EC1EED6400
Authority key identifier: 39:AB:0C:9E:E4:5D:F8:25:0A:DF:8C:85:5D:D8:EC:B1:27:27:62:93
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2/e234c5cf-6ad7-350b-9018-aeef40195ca6.roa
Signing time: Fri 03 Jan 2025 14:00:51 +0000
ROA not before: Fri 03 Jan 2025 14:00:51 +0000
ROA not after: Thu 03 Apr 2025 13:00:51 +0000
asID: 17
IP address blocks: 2607:ac80::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6c:2b:1f:e2:49:5d:70:ec:1e:ed:64:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89dfa952-929a-4c50-a372-96882b2b33e2
Validity
Not Before: Jan 3 14:00:51 2025 GMT
Not After : Apr 3 13:00:51 2025 GMT
Subject: CN=1fea2192-eda3-4134-92bb-23772039811d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:33:a1:27:b2:f0:db:0e:d9:9a:f8:50:47:77:
fc:5b:87:6f:24:65:a6:e3:cb:d8:7c:66:44:50:a5:
05:c6:07:ec:d8:61:6b:bc:31:be:00:4a:6e:57:7b:
c1:7a:2b:ad:85:04:93:77:66:b5:9a:51:52:d8:de:
2b:4f:f3:e4:af:84:54:e3:71:0d:d4:47:ee:75:92:
33:f2:18:64:be:d9:22:fe:22:ea:61:ca:f5:51:ad:
77:c5:f8:d9:01:01:44:26:c1:25:c6:7d:a2:2c:c2:
20:46:a0:44:0b:ee:d0:c0:a2:3d:70:dc:8f:bb:9c:
ff:36:0c:75:df:86:3b:43:e2:f2:50:22:e7:57:18:
45:b0:a2:3d:ec:e1:1d:53:05:fb:be:13:ef:f7:a4:
58:39:00:96:81:a2:5b:b9:99:be:da:0c:48:4d:b5:
78:8d:13:25:8a:03:86:e0:4d:7b:7f:6d:25:3d:bb:
53:77:fc:ea:19:62:71:8d:0a:b4:67:78:9e:49:59:
d3:c0:74:7e:04:ff:d1:b0:da:cf:86:44:ce:9f:2b:
0a:aa:85:1f:63:3a:38:59:93:dc:81:93:12:a3:16:
78:cd:cf:fd:d4:57:aa:2a:e7:b0:86:97:58:6f:84:
75:70:89:dc:20:43:1e:2f:f7:33:16:3a:6b:c0:71:
b3:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:A5:89:69:84:2C:29:87:CE:0F:7D:0B:B4:6C:36:E2:6B:64:91:86
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2/e234c5cf-6ad7-350b-9018-aeef40195ca6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2/89dfa952-929a-4c50-a372-96882b2b33e2.crl
X509v3 Authority Key Identifier:
keyid:39:AB:0C:9E:E4:5D:F8:25:0A:DF:8C:85:5D:D8:EC:B1:27:27:62:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:ac80::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
32:d6:dd:25:b7:eb:c4:b9:27:bd:a1:bc:f6:fa:2e:0f:f8:ad:
c3:be:0b:7b:d9:73:d1:92:75:33:ed:e3:fc:a1:80:ab:0e:76:
6d:3a:90:b0:12:d5:76:b1:b5:e5:2f:9f:cd:6c:4b:cd:cb:da:
34:b6:df:8c:5f:c1:25:b1:3e:ac:17:69:b5:21:04:11:5f:3c:
1b:52:05:e9:27:8d:bc:ad:7e:c6:81:ba:3e:7d:64:6d:9b:21:
e7:17:da:50:5e:50:0a:72:a6:09:63:1f:77:13:41:75:da:09:
8d:e5:51:20:dc:f9:64:80:8b:a9:b1:4c:37:9a:84:b7:0d:f7:
4d:f9:6f:43:95:78:78:66:74:a2:16:3c:8a:95:2c:b0:06:e8:
44:d0:05:ca:e2:d5:89:ee:8c:08:9e:9c:f8:0d:cb:51:33:61:
e5:11:2d:fc:38:42:66:a4:8c:c4:7c:59:89:62:43:8e:7e:d6:
26:b6:db:b9:46:a1:f4:a2:96:8e:23:2c:58:10:e5:46:b1:ae:
98:a4:55:74:9f:8d:d0:d7:c0:3f:6d:33:18:a7:fa:3d:b0:1e:
77:67:23:9d:f2:54:b0:8a:92:27:68:40:e9:d1:5b:63:ca:17:
0f:da:b0:c0:b7:fa:a8:79:66:79:06:45:6f:12:44:56:e9:39:
6b:a4:60:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 21:32:34 2025 by rpki-client