Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/12fd7a2a-fa17-3ec2-83e3-17b185260ffd.roa
File: 12fd7a2a-fa17-3ec2-83e3-17b185260ffd.roa (raw, json)
Hash identifier: mPf86IxK2bVcWzdJfq7zvRiwntpC+ypPXxHsyGzE56c=
Subject key identifier: 43:5B:C5:11:13:CE:27:4C:A0:A8:79:40:75:B4:4F:0F:C0:9B:62:26
Certificate issuer: /CN=aad22c3d-3c14-42b7-a324-b1bb21649378
Certificate serial: 010D0C9F4328584871C071AB7BFEA72F4F01FFC0
Authority key identifier: 67:AE:97:3F:92:B0:66:C4:36:11:D4:7A:D2:24:7A:6F:AC:55:B1:43
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/12fd7a2a-fa17-3ec2-83e3-17b185260ffd.roa
Signing time: Sun 05 Jan 2025 14:00:52 +0000
ROA not before: Sun 05 Jan 2025 14:00:52 +0000
ROA not after: Sat 05 Apr 2025 13:00:52 +0000
asID: 14618
IP address blocks: 2620:116:800b::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:71:c0:71:ab:7b:fe:a7:2f:4f:01:ff:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aad22c3d-3c14-42b7-a324-b1bb21649378
Validity
Not Before: Jan 5 14:00:52 2025 GMT
Not After : Apr 5 13:00:52 2025 GMT
Subject: CN=074f0c25-0dd2-4df2-9e4c-2487bc730b7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:78:86:be:63:88:b2:77:07:88:31:b0:c3:0a:
a2:ee:15:57:75:d6:b4:85:4c:5f:3d:26:0c:7c:f8:
8d:56:97:86:29:d8:88:3d:da:ef:54:81:ce:36:35:
ce:73:a2:32:80:f1:95:39:67:5b:d1:9c:33:7b:fb:
53:50:96:70:26:a6:fe:1b:25:cc:1a:fa:d1:be:89:
44:ac:01:65:71:81:2f:b5:f6:9e:98:d8:20:57:71:
18:3b:fd:f6:72:32:8f:42:ac:ef:44:84:3d:31:7d:
6b:20:67:cf:35:6e:16:f5:4c:50:90:56:a0:10:b8:
0e:45:81:6b:c0:0f:63:f6:e1:6f:57:af:74:7b:da:
b1:da:c8:c1:b2:46:6a:16:ce:ec:06:12:ec:4a:a6:
bf:56:de:5f:e1:2e:de:bb:7a:72:1c:c2:82:24:0e:
e6:b6:1b:08:e5:48:37:c8:77:a6:17:1d:a1:79:d7:
7e:24:65:8a:79:0e:be:b0:6e:2d:e3:e2:7e:45:26:
7c:88:70:de:9c:04:de:6f:8c:13:30:fb:5a:51:c4:
fb:98:9f:02:d3:ea:d4:e6:3c:ba:0e:d4:68:0f:1f:
50:6f:2d:28:26:48:2f:a2:bc:05:f0:90:01:49:83:
d2:d0:d3:96:8a:21:01:6d:92:52:ec:32:92:17:d6:
c8:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:5B:C5:11:13:CE:27:4C:A0:A8:79:40:75:B4:4F:0F:C0:9B:62:26
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/12fd7a2a-fa17-3ec2-83e3-17b185260ffd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.crl
X509v3 Authority Key Identifier:
keyid:67:AE:97:3F:92:B0:66:C4:36:11:D4:7A:D2:24:7A:6F:AC:55:B1:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:116:800b::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
56:1a:dd:7d:a8:7e:a5:ee:18:47:6e:3f:7b:87:41:a0:80:f9:
a4:5a:8f:f6:af:1f:fa:8e:9d:b9:0b:40:18:51:4a:bc:1c:1f:
a8:2b:4a:61:eb:db:78:da:65:0b:1e:3b:08:c0:7b:6c:b5:28:
48:1d:a6:45:99:06:e5:75:f2:8c:41:97:9b:1e:d7:36:87:2e:
12:52:82:76:1f:88:23:a4:f8:96:ff:a6:cd:1e:3f:05:c0:2b:
14:7d:01:91:fd:40:ab:cc:ea:21:53:97:f8:9e:92:d7:41:40:
01:aa:c7:95:95:3a:42:a2:98:3f:b2:41:73:d4:88:dd:b6:66:
39:23:11:0e:83:37:cc:be:b3:a3:45:6f:c5:ab:4e:a6:50:c6:
7b:4e:1b:fd:f2:93:dd:9c:0f:4e:49:a0:5f:f8:23:be:f7:ab:
97:2f:ab:ef:24:f5:cf:a9:b1:6b:e4:e2:39:ee:b4:2f:88:c9:
44:5f:be:39:c3:49:3e:1b:dd:ab:8c:f1:46:f6:f0:ce:e3:33:
2d:c2:1c:d5:6b:b1:ba:b0:3e:44:f3:d2:50:15:aa:24:5f:43:
d3:11:4b:22:99:e7:ff:8c:bb:3d:f9:94:56:b9:d9:9a:d1:c4:
37:d3:cc:38:b4:14:6e:62:6b:0d:33:bc:2a:5e:e3:23:27:53:
63:c4:68:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:35:43 2025 by rpki-client