Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/9a0bcf29-1128-3b05-8d12-af227e9ade2e.roa
File: 9a0bcf29-1128-3b05-8d12-af227e9ade2e.roa (raw, json)
Hash identifier: JIRtRk2TI+LdT61tWq4cf++xMCFCd/54fWKBY12GOcs=
Subject key identifier: 99:D1:B9:6D:36:5F:8A:1A:ED:AC:32:DF:24:3B:56:C1:64:80:B0:06
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F4328584912470FDA59B0AD00ED54B3BC
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/9a0bcf29-1128-3b05-8d12-af227e9ade2e.roa
Signing time: Tue 04 Mar 2025 02:00:40 +0000
ROA not before: Tue 04 Mar 2025 02:00:40 +0000
ROA not after: Mon 02 Jun 2025 01:00:40 +0000
asID: 12008
IP address blocks: 2620:74:1b::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:12:47:0f:da:59:b0:ad:00:ed:54:b3:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Mar 4 02:00:40 2025 GMT
Not After : Jun 2 01:00:40 2025 GMT
Subject: CN=44c2c04e-afd4-4626-b809-b448d92b5913
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:a3:d3:67:9f:d2:7b:52:b1:ef:d7:82:8e:87:
79:f8:2c:06:a9:a0:2b:c3:18:5a:c9:e8:64:85:f5:
a8:6c:44:ec:7d:45:69:b0:d2:0f:73:8b:17:67:82:
52:79:fb:21:fd:8a:03:06:07:e4:2d:9f:12:1e:ad:
8f:57:35:c2:c8:46:e4:d7:9d:ec:ce:06:04:6e:d7:
33:16:e5:2f:de:c3:5d:86:9a:79:96:bd:e8:f1:44:
f4:be:fd:df:0e:91:57:ea:9f:13:f4:41:19:30:6f:
95:d5:de:ec:f4:ba:af:8e:aa:f1:00:3c:77:bf:67:
c8:0a:44:7f:e2:cd:9d:09:bc:f2:26:80:f9:42:4a:
47:c6:54:32:37:54:ee:51:66:c9:9e:bc:e8:dc:94:
50:e4:a3:f6:3f:35:dc:61:ad:b9:e3:04:65:da:51:
5c:0c:60:42:27:5d:a7:3e:12:22:e7:28:c0:dc:34:
6e:7f:f0:e5:88:0c:2f:94:b6:35:d0:4d:19:31:a7:
9d:6e:f0:3b:15:73:24:d9:6d:e7:3c:51:eb:f6:e0:
de:4e:32:bd:18:fd:5c:88:f9:f2:dd:d4:5d:04:5b:
bc:8b:8b:6c:44:e0:95:d5:54:62:d0:02:3c:26:19:
d3:2d:e7:a9:d5:a6:ed:39:58:6b:40:5a:b9:34:63:
1e:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:D1:B9:6D:36:5F:8A:1A:ED:AC:32:DF:24:3B:56:C1:64:80:B0:06
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/9a0bcf29-1128-3b05-8d12-af227e9ade2e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:74:1b::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
38:bc:30:ef:97:64:31:88:0e:f2:b5:0e:2b:3d:4e:80:60:36:
3e:56:0e:ac:da:0c:8b:3e:60:d7:34:d1:bd:8c:37:89:b9:d3:
0f:88:ad:9c:ae:ea:37:6a:00:1e:fb:6c:0e:64:b6:a1:4f:47:
2a:fe:a1:46:fd:74:cc:83:0c:2a:ef:ae:f8:36:4a:3a:30:b6:
14:bd:91:f2:63:95:33:c3:20:c4:38:3b:36:46:01:61:8c:fc:
7c:83:f8:a5:60:81:9b:b1:05:b8:94:fe:dd:27:b3:63:3b:0e:
b2:38:56:4d:4a:db:16:b0:a3:74:dc:ec:3c:78:26:77:88:2b:
64:07:d5:0c:9c:1f:68:cf:e6:0b:19:55:3b:95:9f:f4:3d:b3:
17:a4:02:bb:08:fe:a1:bc:bc:80:61:d6:bf:17:2c:b3:96:31:
39:fb:ea:3b:14:f0:54:99:63:9d:ed:0e:c3:bb:3f:f7:a9:0d:
b2:19:d4:f6:6e:0b:44:41:d4:1a:fc:c1:2b:4a:7f:50:90:04:
a2:ff:7e:02:21:7e:02:c7:46:81:4e:3d:ee:e0:1c:5c:89:89:
93:af:14:c8:b4:70:99:3d:c0:b8:a0:11:14:e4:be:60:cf:f3:
9b:a3:92:b8:cc:ae:e1:7a:f3:10:49:09:29:01:48:df:5d:b6:
9d:fc:c1:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 23:08:20 2025 by rpki-client