Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/1e8c7c27-4087-3cf3-8f5f-f4a69d3b4b4e.roa
File: 1e8c7c27-4087-3cf3-8f5f-f4a69d3b4b4e.roa (raw, json)
Hash identifier: PgTIwYkFX2RCPcaPVDeNZX+T9Afc+ZX4sCtXxji8qIo=
Subject key identifier: 91:22:50:48:99:BE:46:CD:3D:F4:33:19:FB:0E:F8:29:8B:2A:D7:11
Certificate issuer: /CN=aad22c3d-3c14-42b7-a324-b1bb21649378
Certificate serial: 010D0C9F4328584871C06D6614519694D07CD580
Authority key identifier: 67:AE:97:3F:92:B0:66:C4:36:11:D4:7A:D2:24:7A:6F:AC:55:B1:43
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/1e8c7c27-4087-3cf3-8f5f-f4a69d3b4b4e.roa
Signing time: Sun 05 Jan 2025 14:00:52 +0000
ROA not before: Sun 05 Jan 2025 14:00:52 +0000
ROA not after: Sat 05 Apr 2025 13:00:52 +0000
asID: 16509
IP address blocks: 2620:116:800c::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:71:c0:6d:66:14:51:96:94:d0:7c:d5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aad22c3d-3c14-42b7-a324-b1bb21649378
Validity
Not Before: Jan 5 14:00:52 2025 GMT
Not After : Apr 5 13:00:52 2025 GMT
Subject: CN=04e661fb-3680-4fa3-a57e-9b6a6cada661
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:67:08:86:58:93:a4:e2:c8:cf:5d:58:37:ba:
94:2a:c0:87:02:00:74:8e:23:6c:da:44:74:8a:1f:
54:a8:5c:9a:16:80:e1:e6:0f:f8:a0:57:51:62:01:
0b:a2:fd:a4:84:e9:70:a6:5a:d6:06:6e:20:9d:b4:
eb:57:ed:37:30:2d:54:85:bf:88:f3:71:ea:7d:88:
f1:63:39:14:d1:0f:95:23:0a:ef:46:6d:b4:e4:c2:
a3:11:2d:99:d3:80:80:4e:5a:33:2e:7e:60:94:ed:
cf:74:f4:ed:b2:d1:87:30:e4:19:d5:16:eb:2f:06:
b2:91:35:21:61:dc:73:5d:a1:e8:2e:ef:51:53:62:
69:ad:54:06:38:f5:bd:c7:26:ac:df:e8:74:9f:0a:
ee:23:c8:9d:00:dd:32:a4:3a:94:db:fc:c6:4d:70:
6d:7a:31:5b:3b:e0:71:90:58:72:e3:23:97:fc:60:
8c:81:7e:b2:7e:ca:a7:4e:c2:1d:cb:8d:fd:79:8c:
77:7b:b3:0f:66:7f:aa:f6:c3:e6:7b:82:9a:12:de:
4d:16:2d:91:ac:79:a8:08:ac:33:47:e7:64:9f:32:
80:ac:c9:d9:e2:7c:39:0b:40:44:1a:84:b9:e0:5d:
50:c7:de:6c:bc:a4:c3:1a:60:92:2f:7e:0c:a1:fb:
d4:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:22:50:48:99:BE:46:CD:3D:F4:33:19:FB:0E:F8:29:8B:2A:D7:11
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/1e8c7c27-4087-3cf3-8f5f-f4a69d3b4b4e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.crl
X509v3 Authority Key Identifier:
keyid:67:AE:97:3F:92:B0:66:C4:36:11:D4:7A:D2:24:7A:6F:AC:55:B1:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:116:800c::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
08:ca:44:d3:18:c5:8d:a8:4b:73:57:29:24:9a:29:c4:b2:90:
bf:6b:c3:0a:ec:bb:62:0c:2f:89:b7:f0:af:e9:eb:9f:2b:6b:
73:18:a4:fa:38:b3:6f:b2:98:55:68:b3:f1:73:68:c7:8b:fb:
85:40:7f:36:cd:96:de:26:fa:67:de:c8:16:bb:d6:a2:8f:ed:
0b:01:5c:60:80:9c:5b:12:03:cd:d3:a7:a5:5b:39:31:92:b5:
a8:a4:82:f7:60:74:90:19:8a:e8:ea:0f:b6:86:03:0f:05:77:
c6:05:95:dc:56:7f:88:a8:a0:5e:38:27:07:f2:6f:a9:0a:6d:
29:41:40:7a:33:45:30:30:52:1b:e6:2b:4d:f1:a2:d3:14:77:
f9:01:bd:81:31:2e:5b:4d:eb:a0:48:d0:1a:0d:5a:56:be:1e:
c9:40:af:e1:66:ba:4c:72:ea:9c:4b:3b:97:1b:99:81:86:2a:
f8:a7:cd:cf:b6:ad:37:de:43:32:83:1d:49:81:15:a8:13:95:
43:15:3f:1e:e5:15:b4:ad:1c:5f:d9:69:d7:f0:79:86:f1:8a:
0c:8e:27:3e:b0:89:dc:36:81:bc:93:fb:da:bc:06:60:9f:42:
65:ae:54:dc:ab:b6:28:ca:16:a0:8e:67:cf:5f:23:a6:7a:d1:
65:aa:96:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:31:34 2025 by rpki-client