Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/17ca7b45-83e1-4a1c-8713-317adea0e270/04c65629-73ec-3cbf-acdc-7545f7023802.roa
File: 04c65629-73ec-3cbf-acdc-7545f7023802.roa (raw, json)
Hash identifier: +8XBrgioo3bXCOQ3aSzSI2A8QNrrUqIWjenBOYbqAqk=
Subject key identifier: 86:94:65:64:CC:9C:F2:71:FB:A9:CC:C4:8E:99:CF:90:38:29:92:CD
Certificate issuer: /CN=17ca7b45-83e1-4a1c-8713-317adea0e270
Certificate serial: 010D0C9F4328584894A5E47CF5781976541A7E00
Authority key identifier: 5D:A6:1C:DE:6C:60:FE:16:B5:3C:6F:5F:98:DF:91:C1:D7:64:40:E5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/17ca7b45-83e1-4a1c-8713-317adea0e270.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/17ca7b45-83e1-4a1c-8713-317adea0e270/04c65629-73ec-3cbf-acdc-7545f7023802.roa
Signing time: Sat 18 Jan 2025 02:00:38 +0000
ROA not before: Sat 18 Jan 2025 02:00:38 +0000
ROA not after: Fri 18 Apr 2025 01:00:38 +0000
asID: 16509
IP address blocks: 2607:b40::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:94:a5:e4:7c:f5:78:19:76:54:1a:7e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17ca7b45-83e1-4a1c-8713-317adea0e270
Validity
Not Before: Jan 18 02:00:38 2025 GMT
Not After : Apr 18 01:00:38 2025 GMT
Subject: CN=73fa3ada-9f47-41a8-8f4b-f10546795469
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:92:16:48:12:b7:c2:c7:42:f2:cf:5c:ec:fb:
f0:bc:1f:6c:98:61:00:b8:4c:a1:54:20:29:93:c8:
47:da:b6:3f:90:e6:b9:6a:97:d6:4e:46:99:c8:05:
b8:b3:0f:43:61:52:51:81:56:ab:88:0b:ed:3b:00:
ff:21:7c:6e:4a:fb:ea:cd:bc:47:21:be:48:e1:ec:
51:b3:a1:1c:e6:2b:49:36:86:65:1e:02:41:88:e5:
21:61:50:21:3d:b9:ea:7f:b7:28:1a:33:e5:6a:1a:
04:d4:4e:e9:b1:66:03:08:34:03:e2:12:b7:76:4b:
73:d9:69:dd:4f:02:ab:ca:fd:2e:a7:2d:2d:54:e3:
a4:2e:2b:2b:8d:f5:72:28:f0:6b:69:b3:6d:39:af:
ca:aa:84:d7:17:f6:0d:d5:8a:e6:74:59:e0:fd:2f:
94:70:b6:bd:ac:0d:7e:24:36:a1:95:ff:99:d0:0e:
8e:65:b3:6f:6f:98:c8:0f:8d:21:52:30:88:4f:17:
f1:16:f8:3f:43:7e:fa:28:18:69:c1:40:77:4c:28:
8c:ea:d1:fe:11:79:e5:8e:4d:2b:cf:66:3a:f0:81:
6a:1a:db:b9:17:12:51:d2:81:29:61:7d:3c:f7:3c:
36:86:07:a6:b7:f5:af:61:cd:58:aa:d8:e7:c3:09:
c9:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:94:65:64:CC:9C:F2:71:FB:A9:CC:C4:8E:99:CF:90:38:29:92:CD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/17ca7b45-83e1-4a1c-8713-317adea0e270/04c65629-73ec-3cbf-acdc-7545f7023802.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/17ca7b45-83e1-4a1c-8713-317adea0e270/17ca7b45-83e1-4a1c-8713-317adea0e270.crl
X509v3 Authority Key Identifier:
keyid:5D:A6:1C:DE:6C:60:FE:16:B5:3C:6F:5F:98:DF:91:C1:D7:64:40:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/17ca7b45-83e1-4a1c-8713-317adea0e270.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:b40::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
11:b9:9b:08:b1:c5:ae:d3:37:47:c0:52:c2:44:ae:57:f5:1b:
c9:0e:a3:85:d3:14:4e:6c:aa:35:b5:fa:77:d0:29:0b:15:e2:
78:fd:95:56:b7:eb:5f:f1:7b:e2:d2:07:4e:bf:3d:35:25:df:
bc:fc:84:d2:95:0f:7b:41:c2:de:e1:d2:1b:1d:dd:26:92:6f:
1c:68:ee:8f:1e:5e:03:dd:47:07:80:e4:84:4a:3a:53:02:7f:
40:8a:72:61:6a:99:d4:41:41:7d:27:8f:90:49:1c:88:3e:d0:
16:d2:b7:04:b2:98:55:21:75:95:21:53:bf:ac:7a:e7:a0:6c:
cb:9a:5b:13:11:a8:c9:50:89:36:61:c3:82:19:67:bf:2d:62:
f6:3f:f8:d5:c3:ea:2b:32:66:8e:bc:64:2b:e5:db:7e:06:85:
ec:c4:f3:5e:df:88:29:62:4d:00:7f:1c:cb:0a:b5:29:65:b4:
9e:b9:9b:f4:3d:27:5f:15:95:02:f5:ea:60:2b:d1:bd:a2:46:
d0:a5:28:c2:6c:ae:59:b8:ca:43:3d:da:22:f9:19:40:dc:3c:
e9:d9:f6:98:39:15:79:b6:a5:cb:3f:8d:ee:4a:5d:1b:eb:a7:
4a:47:71:f7:48:34:57:54:b0:05:f2:ad:52:0b:71:13:c1:d2:
0b:32:e1:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:22:41 2025 by rpki-client