Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c/5ac0a3d9-be9f-36c9-9bb9-86dbc92658a3.roa
File: 5ac0a3d9-be9f-36c9-9bb9-86dbc92658a3.roa (raw, json)
Hash identifier: dTc21wm5D1X6qVe2NGY/7lotH6lCupf3a+wE8kr+Q6s=
Subject key identifier: A4:CD:98:B0:80:22:83:76:D5:15:D9:4A:73:96:E9:56:55:3D:96:20
Certificate issuer: /CN=09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c
Certificate serial: 010D0C9F4328584902EC1091F7221EA880145A60
Authority key identifier: C4:52:EF:29:27:F2:EC:5A:51:3C:C1:72:D6:73:BD:1E:39:05:95:26
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c/5ac0a3d9-be9f-36c9-9bb9-86dbc92658a3.roa
Signing time: Wed 26 Feb 2025 14:00:51 +0000
ROA not before: Wed 26 Feb 2025 14:00:51 +0000
ROA not after: Tue 27 May 2025 13:00:51 +0000
asID: 399989
IP address blocks: 2607:340::/28 maxlen: 28
2607:340::/29 maxlen: 29
2607:348::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:02:ec:10:91:f7:22:1e:a8:80:14:5a:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c
Validity
Not Before: Feb 26 14:00:51 2025 GMT
Not After : May 27 13:00:51 2025 GMT
Subject: CN=bd7ce6b2-25cd-4b76-aea6-7bb65b3c454b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:40:f7:d7:cc:f0:a1:c2:0d:a2:90:14:d5:da:
e6:68:41:02:26:90:28:2d:31:ae:fb:76:4d:f1:32:
d9:7c:aa:69:1f:28:6b:23:58:b5:0a:13:3b:57:1c:
06:80:97:4e:ae:30:b9:aa:23:ad:a2:b6:72:0d:4a:
16:b5:48:38:f4:d1:41:94:96:87:91:3f:17:8d:4f:
29:ba:c9:dc:36:3b:f0:ce:d3:ba:51:12:13:db:b9:
3d:09:fa:f4:cb:54:d6:94:2f:a8:8d:49:c6:8d:d2:
2e:13:79:51:9b:9d:7a:28:57:65:cf:5a:04:2b:2f:
13:06:06:7a:d7:a4:3a:10:5c:01:4e:70:cf:80:21:
56:3a:90:ef:00:01:4e:89:e4:b1:8b:a6:a8:ef:5c:
2d:40:eb:aa:6f:8d:af:b5:a0:7e:9a:1c:bb:19:61:
a3:57:65:66:32:c7:e1:0e:1d:dd:b0:a8:eb:dc:5c:
6c:f4:24:c9:f7:6e:36:69:1c:85:48:b9:24:3c:0c:
f7:b9:6a:90:76:f7:55:49:75:a6:29:fb:a9:61:1f:
a0:5b:cc:23:4f:2b:91:49:d8:66:fe:dc:88:fd:3e:
a0:23:ce:64:aa:77:79:27:67:07:0c:98:48:5a:6e:
4a:3c:ce:0e:af:8d:a9:6a:cc:d2:a6:14:44:4d:8f:
7d:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:CD:98:B0:80:22:83:76:D5:15:D9:4A:73:96:E9:56:55:3D:96:20
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c/5ac0a3d9-be9f-36c9-9bb9-86dbc92658a3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c.crl
X509v3 Authority Key Identifier:
keyid:C4:52:EF:29:27:F2:EC:5A:51:3C:C1:72:D6:73:BD:1E:39:05:95:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:340::/28
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
89:8d:9e:a4:11:f0:9e:78:83:a2:16:ee:a8:a1:95:f3:81:fe:
43:69:59:31:bc:c1:72:1b:7f:c7:ca:bd:8f:58:d8:da:54:a4:
c7:f9:7a:95:86:04:4c:75:5d:26:d7:d0:fd:52:bd:1d:b2:ea:
cb:e1:4f:c7:df:a3:d7:fd:d1:64:15:48:ce:20:84:4b:82:5e:
f6:46:89:92:7f:91:09:95:c2:53:6a:ea:ee:70:18:d7:2c:fc:
b0:88:dd:ac:4a:40:7b:c9:41:58:f5:36:54:ef:f8:27:86:9d:
8b:c7:95:12:43:0f:69:4f:a3:db:ab:6f:fa:9b:aa:3a:ba:d6:
31:61:42:9f:65:c6:17:fe:1b:64:b9:d6:63:09:fe:4b:f4:00:
38:4f:aa:9b:f3:29:b4:4f:83:9d:f9:0d:c6:cf:0b:db:cb:e0:
8e:35:20:48:fb:e8:36:ef:a2:6e:52:b9:2e:e6:13:f0:66:17:
6e:49:ae:cc:6d:94:f8:f6:8d:8b:8f:39:f6:07:ee:3a:4e:20:
4d:e6:55:b9:8e:ba:9f:02:bb:71:68:17:8f:07:ca:bd:8f:61:
1f:e1:31:0f:92:89:64:41:2b:e5:0e:79:20:98:8b:a2:79:99:
3e:e7:d1:b6:08:93:c1:f9:31:40:7b:d4:ce:5b:f4:3b:ff:ec:
db:88:aa:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:12:52 2025 by rpki-client