Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/3af3759a-1d33-3553-bb4a-6789e2c80c41.roa
File: 3af3759a-1d33-3553-bb4a-6789e2c80c41.roa (raw, json)
Hash identifier: dhLmQ6rbqOCYaYKa+YBZ8LtL6TpL2yA4GdkLiSszc+M=
Subject key identifier: C7:94:F0:50:04:58:75:47:52:42:0A:84:C5:78:8F:BC:0D:52:DB:E7
Certificate issuer: /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial: 010D0C9F432858487755E15D5B1F73EE6640F780
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/3af3759a-1d33-3553-bb4a-6789e2c80c41.roa
Signing time: Tue 07 Jan 2025 14:00:53 +0000
ROA not before: Tue 07 Jan 2025 14:00:53 +0000
ROA not after: Mon 07 Apr 2025 13:00:53 +0000
asID: 30103
IP address blocks: 2620:123:200b::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:77:55:e1:5d:5b:1f:73:ee:66:40:f7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
Validity
Not Before: Jan 7 14:00:53 2025 GMT
Not After : Apr 7 13:00:53 2025 GMT
Subject: CN=c53cda80-599e-42da-ad0e-4f46c7385031
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:a8:3a:a5:37:d2:41:76:ca:30:fc:31:9f:03:
25:2d:ae:9d:bf:ac:f9:e5:13:2f:9e:bf:81:e3:b7:
20:9a:1c:04:8a:e8:17:28:32:90:5a:eb:f2:a5:ed:
3e:b8:18:73:19:66:50:cb:b0:90:df:e0:a0:69:6e:
2a:49:1f:9c:1c:36:7e:d1:2e:e9:70:c7:76:7f:fc:
c3:95:51:73:98:14:ac:15:bd:29:5b:6d:94:a2:45:
f9:f4:df:5f:88:e6:dd:f0:60:e1:73:89:ba:37:fc:
5f:5e:f4:37:83:2a:39:9b:46:d0:99:ef:d5:a4:ed:
54:5e:23:d5:18:79:44:2b:73:61:9e:ca:19:20:6a:
37:fd:65:73:aa:87:79:b1:23:e8:c6:84:77:ab:dc:
2d:f2:de:68:40:88:17:e6:e4:9b:22:ef:81:78:f5:
6c:86:5a:b4:c9:28:3e:3e:de:83:61:1e:a5:c0:c6:
d4:a5:25:1c:44:37:4e:33:ab:94:89:ba:e8:c8:62:
a9:4f:22:d5:f2:99:45:1f:23:c8:e0:e8:32:07:c1:
9a:f0:cc:ba:e6:51:3a:99:c6:c4:d6:50:16:d6:78:
97:ff:94:c0:2f:6e:51:01:20:60:3a:e9:70:c4:f8:
c2:2f:4e:f0:a9:08:67:ee:1b:b3:4a:dd:cc:5d:c3:
79:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:94:F0:50:04:58:75:47:52:42:0A:84:C5:78:8F:BC:0D:52:DB:E7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/3af3759a-1d33-3553-bb4a-6789e2c80c41.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
X509v3 Authority Key Identifier:
keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:123:200b::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2c:7c:31:ea:df:71:c9:e5:3a:1f:f7:b3:61:e2:03:d5:51:dc:
c9:59:91:d4:3d:b7:81:67:7a:5d:de:f7:40:c5:34:1b:52:02:
41:b4:ce:a3:a9:c4:85:85:15:a2:68:4c:b0:ef:a2:2e:cc:b5:
b7:7e:33:d2:82:55:43:8a:ef:00:85:4b:7d:1b:96:ce:83:da:
12:7d:f5:0a:02:49:9a:d0:8c:8e:33:a8:fa:c2:c9:43:4b:78:
8f:70:e9:46:9b:cc:fe:ac:95:cc:cb:7d:aa:67:d7:f0:9a:35:
c8:2f:90:78:e5:34:6a:99:63:55:09:e5:a2:dc:9a:df:54:89:
a9:dc:5d:f4:18:e2:e5:20:31:a6:0f:36:c8:ea:72:a7:42:28:
ae:f5:9d:c7:56:0c:58:1a:fc:6a:ce:58:f9:f4:07:fa:14:37:
c9:d9:43:60:47:9d:8f:4e:70:0a:ec:9c:08:93:20:3f:e4:e7:
54:ca:5e:a0:ec:17:99:e8:84:64:1a:72:4d:16:f8:b2:cf:b1:
3c:e9:73:57:46:87:84:93:66:36:7e:df:53:48:05:5e:32:70:
a7:f7:0e:d5:e1:b6:e9:c6:49:48:35:24:ee:12:6e:6c:ca:9f:
e9:94:9e:e3:d3:f1:d5:fb:f7:ea:4d:b6:27:c4:6d:0b:e9:2d:
84:0b:d9:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:43:21 2025 by rpki-client