Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3bbdd71c-c30e-44ac-90f8-ba443134d8dd/870b3555-4770-357a-83a4-150807097e93.roa
File: 870b3555-4770-357a-83a4-150807097e93.roa (raw, json)
Hash identifier: wMBxKVsiS4fiGWLmZPScy9ysPt9+MtiXw54exDalecw=
Subject key identifier: FB:9C:B9:6E:8A:8C:82:A5:74:F8:E6:77:D6:62:DF:2C:0A:9C:E5:12
Certificate issuer: /CN=3bbdd71c-c30e-44ac-90f8-ba443134d8dd
Certificate serial: 010D0C9F43285848100A8889C11B63F927986400
Authority key identifier: B7:F4:1B:FB:03:A3:D7:21:03:F8:AE:08:6D:5E:76:BC:E6:BB:EC:73
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3bbdd71c-c30e-44ac-90f8-ba443134d8dd.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3bbdd71c-c30e-44ac-90f8-ba443134d8dd/870b3555-4770-357a-83a4-150807097e93.roa
Signing time: Sun 01 Dec 2024 14:00:51 +0000
ROA not before: Sun 01 Dec 2024 14:00:51 +0000
ROA not after: Sat 01 Mar 2025 14:00:51 +0000
asID: 6491
IP address blocks: 2620:67:a000::/48 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:10:0a:88:89:c1:1b:63:f9:27:98:64:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bbdd71c-c30e-44ac-90f8-ba443134d8dd
Validity
Not Before: Dec 1 14:00:51 2024 GMT
Not After : Mar 1 14:00:51 2025 GMT
Subject: CN=9d25f7b6-8388-492b-ace7-bb0d4d4f4fd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:4a:c6:4d:75:79:30:0e:ba:fb:bc:c1:eb:88:
45:ce:de:35:20:dc:64:41:4a:5e:25:21:50:5f:ef:
e1:b5:10:ad:c2:24:c9:89:b6:a4:35:65:2b:18:04:
4b:a4:42:f3:3c:96:cf:78:c6:5f:e1:a5:9f:a2:5e:
d4:4a:1e:27:27:61:19:1d:c3:a2:18:78:15:d5:b2:
b0:ec:02:6f:58:bb:32:c2:bc:4a:56:74:5d:e0:d0:
36:e3:8a:73:0e:12:e4:62:b0:52:df:b1:2c:73:ac:
f9:88:4b:80:8c:1b:09:de:82:ab:1c:12:36:6a:24:
2e:be:49:3c:19:7e:86:fb:4a:57:77:15:94:91:4c:
ed:5b:6e:e8:e6:67:58:b4:2e:f5:14:f9:78:b5:1e:
bb:e0:44:1f:ca:89:2e:62:73:1a:f4:07:21:c5:93:
ae:80:6e:a0:73:57:aa:83:99:a9:07:37:ac:1a:d6:
02:a6:b9:4a:53:20:03:97:d7:1e:ab:d7:79:b8:f7:
79:29:34:1b:69:71:c5:96:1e:cd:3c:e8:21:68:0a:
e5:24:1c:11:e6:5e:71:7e:4c:4d:79:da:cc:6f:cf:
79:e2:88:18:8f:d2:00:fc:07:5e:3f:de:52:b8:56:
59:43:20:65:42:05:88:52:c3:2b:ab:74:de:af:65:
65:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:9C:B9:6E:8A:8C:82:A5:74:F8:E6:77:D6:62:DF:2C:0A:9C:E5:12
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3bbdd71c-c30e-44ac-90f8-ba443134d8dd/870b3555-4770-357a-83a4-150807097e93.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3bbdd71c-c30e-44ac-90f8-ba443134d8dd/3bbdd71c-c30e-44ac-90f8-ba443134d8dd.crl
X509v3 Authority Key Identifier:
keyid:B7:F4:1B:FB:03:A3:D7:21:03:F8:AE:08:6D:5E:76:BC:E6:BB:EC:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3bbdd71c-c30e-44ac-90f8-ba443134d8dd.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:67:a000::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
36:38:ce:92:64:e0:82:7a:d6:5e:85:dc:09:85:58:b0:da:ab:
48:24:57:cf:21:a9:c1:ba:8b:80:5b:10:76:31:ac:6a:f8:24:
13:14:8e:0b:7e:34:5b:f1:4a:e2:77:5e:ae:f9:4d:bc:6d:a0:
57:e3:1b:76:4d:57:c2:98:29:cb:ca:cb:3c:0a:f8:43:19:b4:
70:cb:d0:3e:5f:35:84:6b:99:af:38:59:e9:4c:09:b3:a7:a9:
6a:76:56:36:e1:c8:d9:92:5f:33:36:32:46:f4:55:8e:4b:0c:
23:89:e1:ec:fe:a2:6e:b9:dc:14:fb:3d:58:b7:81:69:29:cc:
ed:5e:29:c9:0a:14:7a:2d:36:dc:97:93:2f:80:ed:a4:1e:e0:
43:78:16:77:95:63:0e:51:6d:d4:a4:cd:89:c4:ff:1f:5a:24:
4a:1d:af:4b:38:f9:e2:f5:20:77:96:b2:7f:f9:2f:8a:05:1a:
a3:f9:25:72:b2:a3:db:3e:00:49:85:9a:3a:55:61:de:25:6d:
e8:96:4e:cc:1d:ec:45:02:4a:1f:53:55:2e:fc:23:80:a3:47:
69:b7:9c:4e:32:57:ef:59:b6:59:4d:26:f1:9f:63:4a:1d:60:
2c:6b:32:fc:18:4c:f8:98:43:47:40:38:0d:0f:47:67:74:d2:
27:e7:f6:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 08:23:45 2025 by rpki-client