Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/bf4b32fa-63bc-30f2-9e56-2aff7b193d4b.roa
File: bf4b32fa-63bc-30f2-9e56-2aff7b193d4b.roa (raw, json)
Hash identifier: R6Aajs1UhceRjpwGqwO7lCWWqoE3G/Qf6aXrhNAUvoU=
Subject key identifier: E5:D7:A3:6D:8C:DD:F7:F7:A7:B8:6A:C3:54:66:51:94:7E:2B:E8:B0
Certificate issuer: /CN=e15d3fdb-7c2d-4390-a72f-fa46f02f4078
Certificate serial: 010D0C9F4328584894A5E802FE47A9EE2085D400
Authority key identifier: 10:CA:AB:0D:A6:15:C3:67:12:DD:35:EC:D2:73:23:F7:9C:C3:AB:B0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/bf4b32fa-63bc-30f2-9e56-2aff7b193d4b.roa
Signing time: Sat 18 Jan 2025 02:00:38 +0000
ROA not before: Sat 18 Jan 2025 02:00:38 +0000
ROA not after: Fri 18 Apr 2025 01:00:38 +0000
asID: 2152
IP address blocks: 2607:cc80:3000::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:94:a5:e8:02:fe:47:a9:ee:20:85:d4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e15d3fdb-7c2d-4390-a72f-fa46f02f4078
Validity
Not Before: Jan 18 02:00:38 2025 GMT
Not After : Apr 18 01:00:38 2025 GMT
Subject: CN=ad46aa1a-c8d0-4779-aeee-5669a50cfd0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:bc:3d:a8:f5:34:34:b0:e7:1c:f2:c0:db:19:
c5:21:9e:69:dc:db:74:3f:b9:74:24:dc:f7:a0:90:
e4:74:9c:bd:f4:8e:d6:1c:cf:dc:c3:6e:d8:1d:14:
8b:a1:29:b8:de:24:ee:22:3f:17:a6:01:93:5c:40:
4a:4e:59:48:ee:7b:d2:66:81:76:ee:4e:a7:63:79:
22:70:c6:29:7d:5b:0b:5b:24:75:6e:cf:47:c8:6c:
b2:0c:42:38:d9:2a:a9:30:6e:bd:c4:35:27:54:cb:
ef:3e:ef:e6:d1:70:c5:9e:14:b2:4c:86:92:ac:5a:
a0:83:d8:35:67:df:53:2f:b3:b7:fa:8e:4d:2e:65:
5b:b0:94:36:9c:85:f8:b4:23:48:82:92:5c:2d:a8:
dd:28:6a:22:a6:a7:b4:8a:7b:10:f8:11:89:0d:4f:
9e:d5:90:a8:02:b1:d4:75:97:89:51:48:fa:9e:b3:
7f:2d:77:45:75:4a:95:ed:aa:e1:16:1b:1a:a7:ed:
9c:8b:0e:33:60:57:aa:36:25:88:de:4d:da:93:f6:
71:b9:51:56:9e:8c:da:94:cd:e1:5d:fc:19:6f:0c:
1a:72:fe:a0:d9:b5:22:7f:41:69:ed:01:f2:06:1f:
16:84:96:c9:48:c9:fa:bb:3c:61:d9:65:d5:35:53:
aa:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:D7:A3:6D:8C:DD:F7:F7:A7:B8:6A:C3:54:66:51:94:7E:2B:E8:B0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/bf4b32fa-63bc-30f2-9e56-2aff7b193d4b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.crl
X509v3 Authority Key Identifier:
keyid:10:CA:AB:0D:A6:15:C3:67:12:DD:35:EC:D2:73:23:F7:9C:C3:AB:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:cc80:3000::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1b:18:5d:2f:ee:c1:b0:dc:88:ec:11:d2:9f:f4:e8:9a:ed:8b:
28:b1:ad:06:33:d7:0c:50:a2:cb:b1:71:a0:66:ac:5d:fc:5f:
c8:7b:ae:c3:c3:6a:c8:9d:9c:59:b5:4f:aa:5b:bc:76:02:94:
a7:d2:1f:81:9b:62:61:62:67:b1:da:ca:7a:ea:8a:d3:0f:9a:
fc:8e:3c:17:af:1e:18:a3:b0:7f:16:90:13:c9:1a:67:36:00:
ab:21:a3:6a:6b:6f:0a:06:ab:92:64:81:8f:90:71:26:fb:5d:
43:8e:60:c5:e7:1a:8f:d9:87:fe:43:b1:b0:41:7d:c1:5a:c5:
0e:df:1a:58:80:68:5c:cc:a5:4e:07:0e:f4:d7:00:54:e6:6c:
28:65:1d:0d:f2:08:64:ca:6f:8f:93:59:6e:e5:92:ec:cf:1e:
ec:ac:57:8f:a9:dc:6f:cf:5b:e1:f2:88:c4:2a:f0:f1:dd:5e:
b9:d7:e4:58:d1:bc:e2:4b:81:58:7a:09:1b:90:eb:3f:c8:89:
ed:41:d6:61:2b:16:53:31:df:d6:ac:ab:77:06:30:4f:6a:54:
f5:2c:b0:03:65:ba:6a:6b:67:15:4b:3d:d6:51:77:76:06:be:
b1:a1:34:fb:ee:84:d9:5f:e1:19:3b:34:cd:b7:de:fb:51:4f:
3f:5d:47:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 01:02:25 2025 by rpki-client