Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/baafe843-1100-3177-9505-bd29ba099cbe.roa
File: baafe843-1100-3177-9505-bd29ba099cbe.roa (raw, json)
Hash identifier: /dtcReNkwrnyAvvYde6yBFn78aeEJU+kfifTX30MVDs=
Subject key identifier: 03:0A:29:B5:BE:90:9D:78:D6:3A:42:D7:59:A4:A1:E0:4A:F0:67:98
Certificate issuer: /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial: 010D0C9F432858488AE0A2F6712AF1D7EA6F7100
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/baafe843-1100-3177-9505-bd29ba099cbe.roa
Signing time: Tue 14 Jan 2025 14:00:51 +0000
ROA not before: Tue 14 Jan 2025 14:00:51 +0000
ROA not after: Mon 14 Apr 2025 13:00:51 +0000
asID: 30103
IP address blocks: 2620:123:2010::/48 maxlen: 48
2620:123:2011::/48 maxlen: 48
2620:123:2012::/48 maxlen: 48
2620:123:2013::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:8a:e0:a2:f6:71:2a:f1:d7:ea:6f:71:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
Validity
Not Before: Jan 14 14:00:51 2025 GMT
Not After : Apr 14 13:00:51 2025 GMT
Subject: CN=75e2ef67-f7c1-49b9-879c-d9ee3b731dda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f1:fc:75:a6:32:70:ff:35:a1:70:29:ca:ed:
83:34:07:32:f7:00:fc:cf:96:78:5d:fc:b8:9a:36:
bb:f2:71:9a:e3:da:11:37:de:02:a8:3a:78:57:3e:
8e:a9:67:b1:75:02:b0:df:60:77:96:b2:a0:5c:a3:
14:18:7a:c1:38:d2:ca:46:ce:05:d9:57:e0:a5:df:
96:b2:8a:46:31:a0:c4:79:15:ed:f9:b3:91:13:53:
78:9a:0d:9f:ce:4f:57:dd:5f:d3:95:90:6a:db:1e:
c7:91:b6:b1:c7:19:7a:d0:12:a9:44:d1:28:68:a8:
6a:a4:04:88:13:de:7f:fb:8c:06:7f:0a:40:f3:d3:
0e:4a:a9:12:10:cb:93:be:47:d2:50:de:d0:79:03:
cf:18:9c:4c:ef:9f:64:28:fc:58:bf:8d:bf:b9:be:
62:03:b4:db:0b:1a:eb:5f:06:d4:e6:e3:06:5d:3f:
ac:e1:2b:f6:ad:42:18:68:9f:e2:76:c4:98:09:64:
cb:c8:cc:1d:f8:3e:59:de:b6:10:84:6d:66:d7:5e:
46:71:7c:b6:83:f8:76:05:f1:22:4b:40:3c:c8:67:
2a:3b:c9:7e:37:c8:20:98:6b:32:e9:5f:a6:7e:c2:
8d:0e:4c:7f:22:31:20:82:71:9d:24:39:42:8a:9f:
19:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:0A:29:B5:BE:90:9D:78:D6:3A:42:D7:59:A4:A1:E0:4A:F0:67:98
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/baafe843-1100-3177-9505-bd29ba099cbe.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
X509v3 Authority Key Identifier:
keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:123:2010::/46
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9b:0f:20:f5:f5:44:46:55:90:45:87:ba:31:76:7b:8a:37:6d:
38:b4:40:2d:6d:90:0b:af:5c:3c:96:f1:44:3b:f7:1b:81:a4:
15:76:a7:05:9c:ec:fb:83:22:36:a6:be:da:47:49:85:7b:87:
e2:a9:e9:25:34:7d:e5:c3:9a:df:42:ea:ef:41:53:a9:bf:e1:
d2:ae:1b:c4:80:ef:c2:e0:26:43:26:bb:7b:d5:74:b7:7a:bd:
98:41:b2:2f:6d:c9:f6:49:61:11:07:0f:69:57:e5:0c:2f:d5:
06:db:cd:11:82:2c:92:43:31:32:9d:77:89:f0:39:14:cf:77:
8f:f8:7c:b3:5e:0d:b1:19:81:a9:bd:2d:39:7b:3e:52:84:6b:
32:51:3b:69:da:92:94:84:3d:d3:a5:96:7f:83:3d:0e:3b:8f:
39:57:27:aa:ae:40:d1:6c:79:3e:2d:7d:b9:48:fc:a1:b6:63:
98:66:33:87:c3:09:08:a9:68:60:93:ce:63:fd:a9:c9:65:00:
5b:66:ad:1d:a3:6d:81:52:bc:16:4f:eb:cb:88:18:3d:69:f3:
ce:32:e5:f7:29:7b:8f:db:96:e1:e5:e2:a6:cd:fa:cb:e6:e7:
bf:90:d1:88:5b:f1:4f:22:b3:17:d0:05:bb:44:f8:fb:42:0c:
48:d6:b1:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:43:21 2025 by rpki-client