Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a2235d90-d905-4ef7-9447-870904044658/11d908fc-bc25-34ad-bf81-bad94a354c28.roa
File: 11d908fc-bc25-34ad-bf81-bad94a354c28.roa (raw, json)
Hash identifier: BofnTzPBb/Cx+SAupdcE4EqgodvU7Xti/LPpka9WGo4=
Subject key identifier: C1:91:5F:5C:44:D6:F1:2F:54:38:F4:37:8E:BD:C7:D2:72:03:F3:EE
Certificate issuer: /CN=a2235d90-d905-4ef7-9447-870904044658
Certificate serial: 010D0C9F4328584913AC3A784A95155FD4B10E40
Authority key identifier: 12:9D:20:82:1C:89:AE:7B:FE:2D:45:F0:6A:9E:F2:78:8B:0C:1A:DA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a2235d90-d905-4ef7-9447-870904044658.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a2235d90-d905-4ef7-9447-870904044658/11d908fc-bc25-34ad-bf81-bad94a354c28.roa
Signing time: Tue 04 Mar 2025 14:00:52 +0000
ROA not before: Tue 04 Mar 2025 14:00:52 +0000
ROA not after: Mon 02 Jun 2025 13:00:52 +0000
asID: 16509
IP address blocks: 2607:5ac0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:13:ac:3a:78:4a:95:15:5f:d4:b1:0e:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2235d90-d905-4ef7-9447-870904044658
Validity
Not Before: Mar 4 14:00:52 2025 GMT
Not After : Jun 2 13:00:52 2025 GMT
Subject: CN=8e7ac643-f8c0-4e4a-81ed-2745a9358855
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e6:46:50:5b:5c:55:b4:6c:16:8c:3c:08:77:
ff:0f:d4:14:a1:c6:87:9b:aa:ac:ff:0a:d6:51:4b:
1c:02:c8:7f:02:dd:db:66:3a:41:89:c7:70:db:f8:
43:d4:cb:6b:25:a2:bb:c1:dc:13:32:1d:15:94:ab:
12:e4:5f:cf:16:52:9d:73:c0:9d:40:59:53:13:77:
3b:fe:9a:20:7b:49:74:b0:22:d8:66:51:14:6e:0e:
61:20:3b:a7:b3:55:dc:c9:28:6a:24:90:48:f8:20:
d4:74:6b:11:20:cf:9b:f6:84:a2:fe:b5:10:d9:50:
5d:8b:af:49:3d:10:71:39:0c:47:b1:d1:06:44:50:
d4:af:0e:cf:92:e6:93:32:17:d0:f3:07:4e:91:0e:
93:a1:e8:88:da:91:91:24:dc:c6:90:48:8b:29:81:
fe:69:a8:90:74:e6:6a:14:18:c6:98:83:16:e9:d6:
20:af:e3:a0:d4:1c:87:2b:67:23:0e:c3:ff:fb:60:
d6:1c:11:c5:83:87:b6:05:ae:c7:1e:0b:85:7e:a1:
65:13:59:9d:b6:72:07:75:48:f2:61:3e:c1:bf:15:
22:45:3e:dc:2a:80:35:2f:bf:b0:42:fe:bb:11:fd:
4d:34:50:67:d5:42:96:12:92:30:4e:7b:bf:81:01:
d7:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:91:5F:5C:44:D6:F1:2F:54:38:F4:37:8E:BD:C7:D2:72:03:F3:EE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a2235d90-d905-4ef7-9447-870904044658/11d908fc-bc25-34ad-bf81-bad94a354c28.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a2235d90-d905-4ef7-9447-870904044658/a2235d90-d905-4ef7-9447-870904044658.crl
X509v3 Authority Key Identifier:
keyid:12:9D:20:82:1C:89:AE:7B:FE:2D:45:F0:6A:9E:F2:78:8B:0C:1A:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a2235d90-d905-4ef7-9447-870904044658.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:5ac0::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6c:66:51:75:2d:7e:7b:a0:c0:f0:3c:cb:8e:af:d2:f8:30:ca:
f2:05:10:0c:28:b5:72:60:d5:09:da:31:b7:26:0b:44:4c:70:
f1:06:9b:4f:3f:46:87:fa:d3:86:51:2f:18:99:87:71:c5:7d:
d0:64:2f:c8:4e:5e:57:8a:70:a2:dc:bc:1e:62:c1:84:71:cb:
2d:b0:4e:ec:fc:71:b2:6b:eb:7f:1d:40:34:9b:94:0b:b9:db:
aa:92:32:b1:d1:90:7a:87:da:03:c1:48:0a:30:78:2c:c5:c9:
9b:30:3f:32:ad:e9:16:49:c9:51:32:b1:04:6a:37:f6:7d:ea:
0c:06:3b:1d:02:ea:4d:4a:dc:d0:df:00:a6:91:55:7f:48:3d:
b6:f8:35:54:58:82:67:d8:27:d0:2a:76:de:82:1d:8c:24:0c:
db:bc:6a:b1:b7:ea:63:11:7f:bb:fa:53:29:31:98:e2:ff:0b:
3b:a2:74:21:ae:81:27:f2:b2:08:ab:9d:95:e0:3a:4c:de:73:
55:8a:65:7b:8f:83:45:8e:ff:ff:d4:c4:21:ec:3f:65:f2:72:
61:e9:2f:2d:37:c9:40:a5:76:aa:a9:f6:a1:a1:79:81:0a:48:
2c:b5:92:6f:e6:14:41:47:33:81:1e:a3:a7:e0:6c:db:52:1f:
68:7a:1a:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:15:48 2025 by rpki-client