Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4920092f-307e-44b3-b55a-cc5a8c6224dc/2df64e44-816b-3c0c-9079-b7f614ea30ec.roa
File: 2df64e44-816b-3c0c-9079-b7f614ea30ec.roa (raw, json)
Hash identifier: Gixe2/f1DPk3efca/RpiE9xks50fxtk9PC9i6DR/sYk=
Subject key identifier: EA:7C:36:05:24:AE:2C:5A:77:D0:70:0B:A1:8B:31:82:87:99:F2:58
Certificate issuer: /CN=4920092f-307e-44b3-b55a-cc5a8c6224dc
Certificate serial: 010D0C9F4328584957F416ED50B96531B7C9B680
Authority key identifier: DA:E1:0A:D3:80:D5:CB:93:08:68:20:0B:23:8C:28:D3:C8:96:0C:BD
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4920092f-307e-44b3-b55a-cc5a8c6224dc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4920092f-307e-44b3-b55a-cc5a8c6224dc/2df64e44-816b-3c0c-9079-b7f614ea30ec.roa
Signing time: Sat 29 Mar 2025 01:00:39 +0000
ROA not before: Sat 29 Mar 2025 01:00:39 +0000
ROA not after: Fri 27 Jun 2025 01:00:39 +0000
asID: 16509
IP address blocks: 2606:69c1:1000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:57:f4:16:ed:50:b9:65:31:b7:c9:b6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4920092f-307e-44b3-b55a-cc5a8c6224dc
Validity
Not Before: Mar 29 01:00:39 2025 GMT
Not After : Jun 27 01:00:39 2025 GMT
Subject: CN=3c107df9-1b52-4b19-a9c3-c0b2c1f67bb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:56:86:ce:93:2c:f4:bf:64:67:23:de:8f:54:
3b:79:1c:89:67:a9:0a:c3:95:34:4d:1f:87:2c:2a:
e9:e6:79:50:33:97:af:e2:03:73:88:27:c3:5f:e8:
32:a2:67:69:a7:e1:68:f2:bb:3e:5c:39:65:3b:a2:
95:7a:e8:91:78:c0:13:93:ae:ff:03:30:00:05:af:
4b:21:68:41:cc:32:e8:f6:d5:c3:96:22:63:42:73:
a1:35:a2:c6:61:ec:99:fc:e7:23:61:74:e3:63:51:
2f:fd:e7:c1:af:3e:ea:ff:12:24:1d:f0:55:81:ac:
a6:e9:87:4d:46:c9:08:66:88:20:5e:b5:5a:33:96:
66:60:8f:80:1f:08:51:77:79:6d:07:27:21:39:17:
9d:4d:f2:ba:d9:56:21:23:7e:98:43:f4:49:e9:38:
d6:2c:17:8d:57:46:fb:37:1d:7c:1e:b8:50:f2:eb:
f7:02:e9:ed:c9:42:ad:ed:8d:d8:f8:79:fb:c3:80:
32:43:27:3d:17:85:eb:7d:f6:22:8a:03:c2:a7:d6:
44:af:ce:66:5f:5d:0c:7c:65:c2:4a:3d:b2:56:28:
1d:24:1d:d0:e8:57:c0:74:45:eb:d2:02:dd:07:b0:
1d:2f:2c:ea:96:91:ee:41:d0:10:1d:89:46:4c:85:
32:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:7C:36:05:24:AE:2C:5A:77:D0:70:0B:A1:8B:31:82:87:99:F2:58
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4920092f-307e-44b3-b55a-cc5a8c6224dc/2df64e44-816b-3c0c-9079-b7f614ea30ec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4920092f-307e-44b3-b55a-cc5a8c6224dc/4920092f-307e-44b3-b55a-cc5a8c6224dc.crl
X509v3 Authority Key Identifier:
keyid:DA:E1:0A:D3:80:D5:CB:93:08:68:20:0B:23:8C:28:D3:C8:96:0C:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4920092f-307e-44b3-b55a-cc5a8c6224dc.cer
sbgp-ipAddrBlock: critical
IPv6:
2606:69c1:1000::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
34:a9:27:98:ee:46:89:9f:70:c8:6f:bc:63:bc:a5:fd:14:5e:
fa:38:04:c2:4d:66:35:9d:00:fe:f1:f9:84:7b:18:4b:7b:5c:
4b:4d:0e:46:ca:a3:a2:18:ec:63:08:3a:62:9d:3d:2c:04:1f:
2a:70:17:aa:39:fe:d4:a0:e0:c1:bb:b6:e6:d8:9f:67:2d:f3:
68:86:dd:4d:58:f1:73:3d:11:70:a2:69:2d:9f:7d:c6:f0:58:
23:ee:c2:d9:67:f9:49:a7:e5:f4:30:d0:43:df:da:09:ab:f5:
91:e6:ed:ca:9c:78:67:cd:c6:d8:07:b5:00:ff:81:12:21:0e:
8a:60:96:9b:dc:1e:71:cb:5c:c5:da:27:1b:b9:2c:54:11:fc:
80:b7:84:31:0f:7f:1c:83:8e:d3:4c:3f:ba:bb:da:07:c5:45:
a5:3f:cc:b1:10:38:72:40:5a:3f:76:c7:a2:6f:2c:e9:d0:f5:
c9:7e:96:4b:57:f0:bc:24:1e:ee:b4:cc:78:54:9a:27:da:5a:
71:86:8b:ca:1c:0c:4d:fe:9a:12:8f:81:9c:b0:33:0e:ed:47:
bb:e6:ea:3c:ad:b1:72:c0:c3:de:d3:66:18:cd:21:13:6f:e1:
26:92:99:ad:0f:c1:f5:16:30:c2:35:dd:0b:d3:16:53:02:53:
b3:a5:7c:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:12:16 2025 by rpki-client