Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/838607c9-7d41-392b-8c5d-4e6bf3826f5e.roa
File: 838607c9-7d41-392b-8c5d-4e6bf3826f5e.roa (raw, json)
Hash identifier: NQ2REhb78UE5236ga86EaxZsEGMMAQC7jcmnvJCt6Ls=
Subject key identifier: 7C:6B:3E:3B:B1:13:3C:3E:1E:07:30:CA:2E:4E:EF:0E:6D:71:B8:18
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285847E62B6CF5F88FA3C9CCAE9D60
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/838607c9-7d41-392b-8c5d-4e6bf3826f5e.roa
Signing time: Sat 16 Nov 2024 14:00:41 +0000
ROA not before: Sat 16 Nov 2024 14:00:41 +0000
ROA not after: Fri 14 Feb 2025 14:00:41 +0000
asID: 15169
IP address blocks: 2607:f8b0:4016::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e6:2b:6c:f5:f8:8f:a3:c9:cc:ae:9d:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Nov 16 14:00:41 2024 GMT
Not After : Feb 14 14:00:41 2025 GMT
Subject: CN=dfec5cbd-aa60-40a0-a240-be081b051282
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:7a:55:a0:57:08:b5:21:fc:e1:1f:c2:14:4c:
a4:1d:bf:10:a0:b8:3e:0b:62:f5:1d:00:68:b6:ff:
e1:49:3b:ec:ad:79:06:28:ba:1d:99:a3:d4:2a:60:
92:8b:f9:06:76:0c:70:b9:0f:90:61:be:b9:ae:de:
18:7d:5d:62:3f:34:8d:2f:63:1b:d5:1c:bb:88:fa:
0f:0c:d3:32:36:d5:18:66:2f:4b:78:2e:46:62:d2:
28:d7:1e:1c:f4:b4:05:0a:2a:36:69:67:8b:a1:ff:
07:43:09:f9:64:40:d5:a9:6b:c1:e7:e5:a2:55:45:
63:b3:59:0c:d0:1b:aa:62:f7:14:82:28:ac:ce:57:
b5:11:8a:8a:a3:ee:5c:a3:6c:16:e6:15:31:5c:3b:
95:af:22:4e:1f:51:3b:c9:94:7c:7f:0a:0b:bf:b3:
3e:8b:45:a4:a2:4f:40:f1:d3:d7:26:74:a5:74:9f:
8a:d2:ad:64:dd:e5:b9:dd:8e:3a:0c:b5:07:f8:79:
c5:89:8d:88:17:81:01:45:60:99:af:fb:74:69:b9:
24:c2:15:e7:f4:0b:df:8e:39:ee:14:52:4f:e6:5e:
fc:97:a1:8b:c0:85:3d:f7:66:e3:fd:e5:35:63:9a:
fd:63:eb:9c:d2:12:90:da:0d:c9:2c:7e:21:94:16:
d8:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:6B:3E:3B:B1:13:3C:3E:1E:07:30:CA:2E:4E:EF:0E:6D:71:B8:18
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/838607c9-7d41-392b-8c5d-4e6bf3826f5e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:f8b0:4016::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
02:c7:1e:5f:fb:93:e3:e0:ef:bc:e0:c6:c6:06:f8:27:5f:b0:
27:03:b0:43:dd:e1:ec:34:f3:a7:10:0b:d1:b0:9c:4a:cb:78:
a8:38:b9:39:a8:61:31:c7:7e:dd:3c:35:99:75:09:61:ec:1f:
0a:92:b5:e7:97:2d:00:2e:de:2d:83:b3:90:ec:11:66:67:c0:
fb:2e:0f:28:2d:9d:5a:3a:81:d1:2f:0f:b4:eb:a6:a3:7e:27:
a0:45:f3:ff:c1:a7:0d:ef:7b:5b:9b:5f:47:1e:c9:83:58:3b:
2b:f8:1f:25:b9:91:8f:64:d3:d6:50:5f:69:49:b5:28:e9:63:
a6:d4:a8:bf:1a:60:a7:e1:91:66:80:8d:df:4c:7c:4c:3d:af:
97:36:87:41:74:a4:38:8d:ef:a2:62:71:00:27:85:c7:23:a8:
62:30:bf:0e:8e:37:d8:56:e0:66:40:70:36:9a:33:32:d4:41:
16:e1:67:a3:c9:5a:7d:3e:ff:b8:cb:2d:fb:61:8a:08:6f:ce:
83:e6:92:46:26:ba:9b:7b:62:e2:72:e7:23:1e:6c:d3:1a:0b:
75:68:46:b6:ef:c8:cf:fa:a5:dd:d4:e2:b8:0e:42:bc:0f:4b:
8e:71:5a:2f:76:ad:26:aa:23:10:5f:b0:fb:4b:9f:dd:8c:6e:
08:f5:28:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 19:45:46 2025 by rpki-client