Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/cd6a1700-04af-3bd3-962b-95d88018923c.roa
File: cd6a1700-04af-3bd3-962b-95d88018923c.roa (raw, json)
Hash identifier: 8VT+ET16FBVWxirc5rumHn67dxSpBXCfGykoq6KAFVY=
Subject key identifier: 80:57:DA:D1:89:97:14:30:FF:FB:FF:55:9E:94:AB:70:16:60:E0:3D
Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial: 010D0C9F4328584930DE7658FCA802727285F600
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/cd6a1700-04af-3bd3-962b-95d88018923c.roa
Signing time: Sat 15 Mar 2025 01:00:39 +0000
ROA not before: Sat 15 Mar 2025 01:00:39 +0000
ROA not after: Fri 13 Jun 2025 01:00:39 +0000
asID: 394643
IP address blocks: 2607:ff00:d00::/40 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:30:de:76:58:fc:a8:02:72:72:85:f6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
Validity
Not Before: Mar 15 01:00:39 2025 GMT
Not After : Jun 13 01:00:39 2025 GMT
Subject: CN=55c54b2f-3db2-4f31-8787-b776420fa3a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d6:20:95:e4:36:a3:23:3d:a7:57:08:86:2a:
6a:7c:43:70:f8:b8:dc:99:74:d2:4d:37:b8:bb:c0:
62:98:f4:b6:75:d0:88:9d:c8:5d:a9:68:8b:49:c0:
01:40:2a:50:83:59:65:c8:f7:43:1d:7a:00:52:13:
42:1d:6e:85:0c:ed:2e:11:05:a3:02:f8:76:3d:96:
93:37:49:39:b6:75:b7:70:95:49:c4:36:42:de:7e:
a2:05:67:1d:85:7c:43:e5:a9:4b:49:55:43:82:67:
cb:5a:d4:cd:dd:6d:7b:90:c3:c4:0e:37:08:0f:4e:
07:c6:5e:50:a7:28:9f:a7:10:7d:c0:76:01:be:ed:
38:b2:d0:7d:eb:7d:22:b1:45:3f:f9:02:66:a3:49:
16:cc:9d:98:95:81:dd:f7:f6:d7:9d:58:46:13:bd:
09:d2:eb:a7:d6:44:d4:5d:0e:4a:88:61:43:cd:79:
bb:05:d4:76:2c:a4:91:9c:de:51:ce:39:78:03:19:
f0:f4:18:03:6b:93:4a:09:81:60:e6:c9:3d:c1:88:
45:83:93:be:3e:f2:2f:1b:33:23:83:e6:da:37:d8:
b4:70:46:a4:51:2c:90:72:eb:24:97:b5:08:34:37:
f7:5c:04:f4:75:43:b9:5c:e2:f6:9b:46:19:1e:44:
18:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:57:DA:D1:89:97:14:30:FF:FB:FF:55:9E:94:AB:70:16:60:E0:3D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/cd6a1700-04af-3bd3-962b-95d88018923c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl
X509v3 Authority Key Identifier:
keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:ff00:d00::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
62:5d:a6:9b:9b:15:46:6f:27:69:e6:69:8a:40:b6:27:90:30:
2b:3b:c1:9f:71:8f:47:5c:3c:f8:e4:1c:41:43:7c:2e:42:c8:
3e:b9:60:7a:17:28:2c:fe:a1:d0:de:08:42:a8:f7:59:1c:17:
83:b6:b9:5f:c9:1a:88:5f:c4:54:42:67:78:99:dd:5a:b8:e9:
69:45:d9:a3:38:43:ab:9a:fc:9e:9a:22:68:80:91:08:5e:0d:
e3:77:93:3f:17:06:a7:84:03:ba:02:4b:7f:8f:6f:6c:bb:9a:
c0:04:fb:6a:ca:7c:c3:d2:7c:9d:ac:62:2b:ef:93:e1:e8:1a:
3c:f2:fc:2f:30:a7:19:49:ad:fe:3d:d0:13:28:4f:d4:42:00:
51:0c:ed:80:64:29:5a:a5:4c:d3:cf:f5:82:16:b9:09:c0:4e:
2c:ef:da:c6:27:4a:23:b8:50:a3:ab:13:43:b4:ac:b1:0b:51:
fd:70:39:bc:12:b2:49:39:a9:09:4c:84:99:17:79:c4:aa:bd:
96:78:33:31:eb:37:09:3f:75:16:57:78:1e:74:2f:2e:0a:52:
4e:8e:1f:53:5a:5c:60:ee:4f:6a:d8:47:a3:47:e6:dd:cb:d3:
3d:8c:21:ab:d0:67:d0:99:64:3c:4c:65:f4:e3:76:46:ef:9d:
96:19:1a:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:28:17 2025 by rpki-client