Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/253905c7-5040-3e96-8afb-d1fd24d275f9.roa
File: 253905c7-5040-3e96-8afb-d1fd24d275f9.roa (raw, json)
Hash identifier: J6J6gt73hnVdPClRZ2cNsMdu8KPTMDVwuYCk5AK6jJk=
Subject key identifier: 61:BC:21:B3:D0:76:A3:27:E8:D2:F1:F7:70:DE:FB:E1:5D:B8:B6:3E
Certificate issuer: /CN=aad22c3d-3c14-42b7-a324-b1bb21649378
Certificate serial: 010D0C9F4328584871C07179182EE8EAA7F8AF00
Authority key identifier: 67:AE:97:3F:92:B0:66:C4:36:11:D4:7A:D2:24:7A:6F:AC:55:B1:43
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/253905c7-5040-3e96-8afb-d1fd24d275f9.roa
Signing time: Sun 05 Jan 2025 14:00:52 +0000
ROA not before: Sun 05 Jan 2025 14:00:52 +0000
ROA not after: Sat 05 Apr 2025 13:00:52 +0000
asID: 16509
IP address blocks: 2620:116:800a::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:71:c0:71:79:18:2e:e8:ea:a7:f8:af:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aad22c3d-3c14-42b7-a324-b1bb21649378
Validity
Not Before: Jan 5 14:00:52 2025 GMT
Not After : Apr 5 13:00:52 2025 GMT
Subject: CN=ca83e7f0-95de-4213-af40-be10fb8acf75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:1d:cf:61:64:d0:f2:86:d1:78:6f:e8:15:35:
80:5a:d3:2d:e6:56:ee:f7:12:f3:5a:8a:00:9c:96:
30:a3:45:6c:df:4a:87:42:d7:16:ea:d4:df:b5:93:
d1:a6:e0:43:e7:31:1b:64:2b:42:10:a5:a5:16:c5:
6f:ec:21:17:32:3f:ad:56:d0:72:7b:98:51:85:ac:
b4:0f:8f:07:40:1f:40:db:60:5b:13:20:b9:f0:5e:
a4:f0:3f:66:38:18:70:65:43:11:72:51:b6:37:37:
43:8f:d1:e6:07:91:4e:1f:68:f2:44:8c:42:e3:47:
32:19:35:0d:16:89:de:c3:94:e5:8f:e8:11:c6:0c:
2a:99:26:b7:28:d1:a1:1b:45:cd:0f:c9:a4:84:9b:
60:67:7a:6f:6c:56:40:b1:93:6a:b1:96:db:8d:52:
80:5d:af:72:eb:d6:86:a4:44:66:83:58:1f:47:6d:
97:99:f1:c5:2d:a1:3b:fe:37:47:15:73:f2:cc:a4:
39:71:c4:5b:ea:c5:2d:6f:0e:1f:bd:0c:51:eb:b0:
68:da:0b:77:43:99:b1:5c:20:a9:10:d9:96:72:6b:
cd:9b:a9:cd:f6:cb:d2:a4:39:7d:5e:18:e1:70:01:
a3:37:7a:51:ed:14:f5:05:33:80:17:d5:6f:c5:94:
bc:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:BC:21:B3:D0:76:A3:27:E8:D2:F1:F7:70:DE:FB:E1:5D:B8:B6:3E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/253905c7-5040-3e96-8afb-d1fd24d275f9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.crl
X509v3 Authority Key Identifier:
keyid:67:AE:97:3F:92:B0:66:C4:36:11:D4:7A:D2:24:7A:6F:AC:55:B1:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:116:800a::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5e:14:dd:d0:69:c7:42:97:68:05:52:e7:b1:d8:94:97:d4:d9:
3a:4c:41:97:a4:a8:84:50:e7:54:89:02:bd:19:0e:67:cf:6a:
99:80:63:df:3b:9d:77:bf:51:74:7a:25:88:04:02:a1:d3:26:
20:33:4d:42:5c:c1:f3:3b:81:5e:41:03:94:f7:24:b2:e1:f3:
9f:38:3b:b1:a8:8b:b2:e9:12:de:8e:e3:48:38:b2:5f:b6:d6:
c4:ee:02:5c:27:e6:11:63:fa:b9:70:34:9b:80:d3:d0:8b:80:
02:8f:b3:57:f5:2a:1b:5d:b1:69:8b:a9:f6:c9:90:86:32:49:
d0:1f:e0:ae:ae:ac:78:80:1d:5b:4c:d6:49:a3:da:eb:f1:ab:
0f:05:f4:59:eb:d6:bf:b4:d3:04:d5:27:31:c7:57:02:4d:56:
97:9b:6d:f2:19:e6:60:61:5c:0c:8d:57:04:37:37:27:82:14:
40:21:78:c4:fa:b6:3c:2f:e6:fa:55:5b:18:8f:9a:aa:cd:df:
a5:cb:ec:71:6e:25:eb:8f:73:e8:71:2c:38:6c:d2:97:6e:fb:
59:00:4e:a9:c7:6a:3f:4b:9b:6d:56:a2:6b:c5:48:1d:b6:52:
a5:de:83:e6:f5:66:44:d3:49:c8:cd:00:59:52:87:52:a0:36:
18:f9:fc:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:28:59 2025 by rpki-client