Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/9df4a168-5353-3835-8ec0-fd968df0dab7.roa
File: 9df4a168-5353-3835-8ec0-fd968df0dab7.roa (raw, json)
Hash identifier: pSvXhYibWAwni+5P5RelcQy44wEFm8mWnUKy+vZ+en0=
Subject key identifier: 9F:FE:6F:7A:EE:88:3C:9A:F7:22:5F:CE:3B:BC:6C:8A:BD:38:73:2D
Certificate issuer: /CN=1e268aaa-6306-4988-99f7-d5802a67b577
Certificate serial: 010D0C9F432858491C0C1DFFEA598F24982A1980
Authority key identifier: 6E:EA:DD:B7:88:28:8A:01:91:6E:A3:89:AB:C9:61:FD:20:7D:73:CC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/9df4a168-5353-3835-8ec0-fd968df0dab7.roa
Signing time: Fri 07 Mar 2025 14:00:52 +0000
ROA not before: Fri 07 Mar 2025 14:00:52 +0000
ROA not after: Thu 05 Jun 2025 13:00:52 +0000
asID: 397763
IP address blocks: 2605:59c7:f081::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:1c:0c:1d:ff:ea:59:8f:24:98:2a:19:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e268aaa-6306-4988-99f7-d5802a67b577
Validity
Not Before: Mar 7 14:00:52 2025 GMT
Not After : Jun 5 13:00:52 2025 GMT
Subject: CN=df1fda4e-4951-42e9-b5a9-02fb0c5fe579
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:87:4c:c8:38:92:71:19:37:c3:6f:5b:92:86:
69:6a:6c:b6:18:2f:26:b5:b8:0b:66:8f:36:cf:65:
26:21:29:1b:5f:de:75:21:1c:a1:ba:b2:a9:fc:6a:
42:f9:a3:7f:02:cc:df:2c:5d:db:e2:3d:ff:14:42:
c7:a6:3a:2d:e8:50:16:8c:ae:95:30:7d:1b:90:46:
9b:db:d9:d5:08:e1:ea:8f:95:d3:ab:93:30:4c:e5:
70:02:02:74:12:bf:6c:a6:ab:0a:5b:72:d0:2e:e8:
ca:44:07:08:26:70:d3:80:5f:14:3e:ba:9b:c8:85:
02:3b:88:27:84:1e:6e:9d:ea:0b:61:22:55:aa:86:
e0:ae:13:6b:32:b9:9c:5d:d6:67:cc:63:53:dc:99:
48:d9:23:ee:d8:c7:1e:a4:88:28:50:b6:77:40:66:
62:3f:96:89:36:c3:03:2f:51:0b:9c:ab:61:90:72:
c0:88:a9:a9:d1:fe:d8:9b:ae:43:d6:08:22:d7:47:
76:68:76:e8:09:bf:b0:97:dc:ca:75:7e:7b:28:30:
fe:6f:f1:76:36:24:cb:a2:49:b0:62:e6:2d:c9:7d:
a9:de:aa:54:e6:8d:e1:c4:e6:f2:38:57:d1:71:38:
0b:1a:6e:ad:58:51:ab:00:43:9f:e0:20:e7:b1:62:
1d:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:FE:6F:7A:EE:88:3C:9A:F7:22:5F:CE:3B:BC:6C:8A:BD:38:73:2D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/9df4a168-5353-3835-8ec0-fd968df0dab7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/1e268aaa-6306-4988-99f7-d5802a67b577.crl
X509v3 Authority Key Identifier:
keyid:6E:EA:DD:B7:88:28:8A:01:91:6E:A3:89:AB:C9:61:FD:20:7D:73:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577.cer
sbgp-ipAddrBlock: critical
IPv6:
2605:59c7:f081::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
18:30:3c:51:11:58:77:ac:b6:54:c5:cc:1f:45:6b:ee:63:bd:
7b:74:d2:ad:08:28:c0:16:33:2a:d0:21:0f:e5:07:ec:fb:f4:
88:e6:76:cf:a7:c0:63:10:d0:12:bf:0b:3a:39:f7:3f:90:b5:
f0:f6:38:25:70:ee:6d:28:e7:1d:48:07:9a:7d:ef:fd:bd:6f:
f4:42:7c:31:c0:6a:a1:76:59:42:7c:44:05:7d:f2:44:e8:48:
79:1d:70:72:24:3e:85:3c:4b:2f:87:8a:9b:f6:a7:7d:c1:15:
f4:2f:db:af:f1:3f:34:4f:5e:07:89:d3:e7:f6:84:c6:77:1d:
89:2c:4c:39:e3:8d:99:f7:4c:b2:8a:e5:48:cc:bb:16:02:ff:
8f:eb:d3:b1:6c:e6:2b:50:35:2d:96:6c:09:79:a0:75:40:b3:
8f:97:81:1c:53:e4:f1:04:56:c1:0b:15:a5:92:34:44:09:a6:
14:d3:35:1f:77:1c:61:88:e4:81:c4:5a:63:f4:2b:50:b5:99:
f0:dc:e8:62:c5:a7:9a:90:41:ea:13:ec:d0:dc:a3:9e:2f:f7:
56:88:48:f3:f9:24:95:b1:8d:0b:84:5b:4c:e8:d2:11:6d:cd:
55:c6:fb:07:ce:46:ae:a4:8c:10:37:45:45:55:2e:ed:40:e3:
02:86:5e:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:54:26 2025 by rpki-client