Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7253783d-7f55-32b9-a22d-7d952f8e056c.roa
File: 7253783d-7f55-32b9-a22d-7d952f8e056c.roa (raw, json)
Hash identifier: NXeZkG8BaCULC9b77LAnUJnNXiygr+gaNeACdAxx18s=
Subject key identifier: 59:EC:F3:1E:C8:08:C6:E5:0B:75:22:A0:34:8B:E7:E9:D0:A7:B8:53
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285847E62B6CA30E6BAFC678652180
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7253783d-7f55-32b9-a22d-7d952f8e056c.roa
Signing time: Sat 16 Nov 2024 14:00:41 +0000
ROA not before: Sat 16 Nov 2024 14:00:41 +0000
ROA not after: Fri 14 Feb 2025 14:00:41 +0000
asID: 15169
IP address blocks: 2607:f8b0:4002::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e6:2b:6c:a3:0e:6b:af:c6:78:65:21:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Nov 16 14:00:41 2024 GMT
Not After : Feb 14 14:00:41 2025 GMT
Subject: CN=7e2d9517-d6e1-4f3d-b44b-ba911d8390b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:42:6f:53:d6:33:d4:b4:da:1a:a3:ca:06:10:
8a:40:f1:10:7b:b9:91:19:d0:9c:82:57:42:c5:71:
55:b1:49:bd:1c:b3:c0:00:4a:8f:98:b6:17:37:d1:
72:ed:d3:16:21:90:45:b5:ce:92:c3:17:29:e6:41:
d4:e2:8d:13:1e:ff:b7:ed:84:ab:2d:23:bd:f7:ba:
4a:52:02:64:d0:a4:c2:2b:e1:92:2a:4b:9c:33:7d:
e8:cc:5d:8b:e0:df:35:22:bc:5e:4b:0b:e1:90:0a:
bc:68:39:7a:58:3b:3e:fa:a7:90:4e:8d:ba:d3:83:
98:5c:96:46:b8:1d:fd:03:12:f8:56:3d:37:87:3f:
91:ad:2f:03:3d:a7:30:20:06:39:6a:71:a6:22:f7:
3b:51:d6:20:b1:65:b3:b7:a6:e5:48:b3:78:d4:a2:
82:53:99:55:cb:6b:41:3a:d2:a4:a8:32:19:b8:fd:
70:39:5f:75:4c:26:8f:a3:fa:87:1f:6f:1d:1d:03:
b6:3c:61:eb:69:22:5b:4e:60:86:57:11:bc:55:93:
9b:36:82:0b:6c:63:37:a3:70:92:b6:3a:22:89:6d:
86:1a:2d:0a:61:ae:f0:c8:8f:5b:cc:1c:74:51:db:
a5:de:53:dd:da:c4:bc:54:0d:66:14:73:b4:12:f8:
8c:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:EC:F3:1E:C8:08:C6:E5:0B:75:22:A0:34:8B:E7:E9:D0:A7:B8:53
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7253783d-7f55-32b9-a22d-7d952f8e056c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:f8b0:4002::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
96:09:13:28:e6:81:35:cc:a5:4c:23:df:f6:4f:ef:c9:da:af:
30:64:41:92:91:f0:00:5f:ff:75:a4:81:cf:b4:bf:c0:ff:5b:
57:90:c2:01:95:f5:68:96:bf:b0:9d:68:8c:12:cf:be:be:f7:
25:f8:66:10:74:be:64:bb:02:78:58:42:4c:a0:65:d6:22:10:
2b:17:79:8a:ae:b3:c6:6b:49:99:82:4a:cf:85:07:43:b4:a4:
d9:04:65:c0:1d:83:c6:20:5a:d3:ae:be:0e:0d:24:16:d6:36:
f3:88:8b:b8:75:bd:52:43:2c:c8:29:d5:d1:12:84:bf:1b:54:
66:19:c3:29:14:2d:5e:cd:63:53:9c:dc:1d:80:75:a0:a0:f4:
0f:7e:26:49:3f:37:91:01:66:b5:31:d1:73:64:3f:44:bc:82:
61:1c:9e:fb:ce:54:bf:6a:4f:4e:02:27:04:fd:1d:2a:4c:87:
9e:1b:db:d3:6d:e0:ee:01:b0:e9:d2:31:a1:17:7a:6e:87:4c:
ef:e9:04:c7:1d:a3:77:f7:c5:bf:6e:79:4d:ec:99:1b:fd:d8:
89:28:ce:67:2c:87:e2:7c:47:dc:85:43:5f:9b:35:c7:d8:08:
d3:d0:45:a5:46:be:a7:8e:8a:e5:3e:4f:7d:d4:04:ec:2e:b5:
ec:54:ac:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 18:57:57 2025 by rpki-client