Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/825fa98f-0ec6-3b36-99af-9a3297f602b9.roa
File: 825fa98f-0ec6-3b36-99af-9a3297f602b9.roa (raw, json)
Hash identifier: zPPCHLOnLdd9JfhWZNxAYRyGFt3oJubm309viFVvj+I=
Subject key identifier: 74:31:7F:2C:C5:ED:AD:30:2E:7D:D4:2D:4C:24:04:2E:87:B3:56:C2
Certificate issuer: /CN=5e808969-feb0-49b4-9189-5a46fde472b7
Certificate serial: 010D0C9F43285848C58233A038BA179E2052C058
Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/825fa98f-0ec6-3b36-99af-9a3297f602b9.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 43515
IP address blocks: 2620:11a:a000::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:82:33:a0:38:ba:17:9e:20:52:c0:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=dbbbfb15-17cd-4bca-aa8e-ad50c697dd01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:c8:a0:84:b8:37:b7:b5:bd:19:7e:b6:1e:5a:
1a:54:d1:21:9a:a3:e5:6d:a3:a8:e6:33:a6:d1:06:
a8:ea:3e:7f:ac:1d:12:04:c4:da:2d:95:5f:60:8b:
8c:7a:c7:af:6f:ed:dc:85:87:49:2a:54:17:0d:49:
bb:d4:d3:b2:6e:a6:6d:e6:b1:c8:c0:3d:70:53:5a:
9e:0a:c0:7b:fb:d3:bb:e1:aa:94:21:38:21:ff:3c:
76:91:6d:03:77:8c:d1:28:78:7e:1e:74:90:36:22:
92:55:8f:e0:a6:5d:71:22:8d:57:af:a0:7f:e0:e3:
ff:1e:59:96:b2:aa:ec:cc:63:83:a6:f5:43:e2:e9:
93:62:ea:45:32:b5:6c:0c:9b:d3:20:a1:86:b1:5c:
cf:57:b7:e7:89:f1:dc:72:45:9e:eb:62:29:00:23:
6a:9d:1b:95:27:47:c7:2c:a6:ff:d9:72:93:31:ce:
11:d4:81:e5:99:ec:36:30:3f:37:56:0e:d7:85:1e:
2d:96:fc:a4:8a:cf:6d:87:8a:34:39:d9:80:6f:1a:
a4:b2:b8:4a:9d:1b:e4:db:34:98:37:a0:d8:91:c6:
97:51:b2:c5:63:65:8b:0d:c3:75:b8:f8:42:75:34:
1b:42:68:a0:fd:20:65:d2:93:f4:c3:0f:51:4a:5f:
41:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:31:7F:2C:C5:ED:AD:30:2E:7D:D4:2D:4C:24:04:2E:87:B3:56:C2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/825fa98f-0ec6-3b36-99af-9a3297f602b9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl
X509v3 Authority Key Identifier:
keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:11a:a000::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
26:ac:07:4b:57:04:d4:11:97:62:13:4a:fe:8b:fb:44:6c:68:
c5:6d:9f:89:e8:b8:30:e8:99:69:c3:0a:15:77:1f:8a:de:34:
da:2f:bf:22:84:b4:b0:9c:69:f4:22:11:5d:45:9c:e8:df:1d:
db:55:e4:30:22:a7:b2:70:6e:94:3a:f8:1b:96:cc:cd:d3:b0:
6f:88:b7:a4:77:78:57:db:57:cd:fb:d4:f0:2d:84:80:23:2e:
31:0c:f0:37:4f:28:e3:4d:8d:0f:e9:d4:fc:d1:60:ce:96:ed:
83:64:a9:2c:ac:e0:02:fc:e6:e0:cd:df:2a:d7:d9:53:bd:fe:
31:05:0c:fd:57:2c:82:e3:23:4d:d3:28:72:97:31:9f:a5:e8:
97:0a:6b:7a:1b:48:22:fe:08:0d:cc:3e:a2:70:54:ce:a3:65:
68:48:3c:1e:34:5c:1e:92:8a:0f:76:72:4a:60:41:cb:86:9e:
77:ee:69:c0:17:af:7c:30:9a:62:cd:a7:34:58:12:e8:4d:96:
98:c8:34:45:11:0c:b7:ff:93:9f:d7:c8:f1:01:1b:01:2b:bf:
0e:3b:a9:cf:3d:f1:7e:81:aa:86:6b:a3:f2:8a:45:dd:3c:f2:
e0:39:4c:c7:d3:52:58:53:99:85:00:c6:e0:b7:50:5d:23:bc:
60:c9:ac:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:12:49 2025 by rpki-client