Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/429b7a0a-fe87-3890-8ac4-5cb5975e8748.roa
File: 429b7a0a-fe87-3890-8ac4-5cb5975e8748.roa (raw, json)
Hash identifier: czpxHJ3baTyFxBJHHkM0wa2kvkON0yO0yjxGfjK1tU8=
Subject key identifier: F1:F7:76:35:F5:AD:67:37:6A:85:54:35:FD:D1:00:48:68:17:54:0E
Certificate issuer: /CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
Certificate serial: 010D0C9F43285848C580F3D30855006195686088
Authority key identifier: B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/429b7a0a-fe87-3890-8ac4-5cb5975e8748.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 2734
IP address blocks: 2605:6c00:7000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:80:f3:d3:08:55:00:61:95:68:60:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=19ed33ec-6ee1-459a-b344-ac06f3ed97b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:86:92:4a:95:b1:bb:d6:d7:ed:a2:df:e4:86:
18:25:74:b9:a9:3f:e4:3c:2a:88:cd:89:7c:a1:99:
d2:cc:8f:c3:db:e9:bf:c7:20:30:08:90:22:a7:a4:
dd:a1:5a:66:d1:ac:8b:11:fb:0e:a3:0a:ff:38:92:
d7:97:78:0f:b2:54:be:ee:d1:d2:7a:45:f0:8e:21:
3a:83:9e:34:07:ad:88:c9:f4:7e:90:83:bc:12:99:
3e:9a:d8:bf:12:bb:d6:bd:7b:0e:8c:20:37:60:85:
03:47:53:f5:00:19:a9:8d:7c:13:19:7f:99:93:57:
3e:ba:21:8e:af:17:4a:0b:1e:a4:fe:8c:86:8f:df:
e7:89:9b:16:c1:10:88:67:11:2f:61:4f:1b:07:44:
34:cf:5d:dc:d6:9a:cb:07:7a:67:09:23:80:ef:86:
76:c4:18:1d:8b:93:ad:cd:28:1d:f8:73:2b:25:dd:
e9:23:1a:88:e8:70:97:90:e1:03:c3:66:b2:f3:e7:
7c:b6:b6:8c:72:b8:4f:47:5f:56:c6:fd:34:d3:25:
91:02:50:bb:51:ba:3e:8b:8b:84:c6:59:db:42:2b:
16:fa:db:85:d7:8e:75:3a:35:be:58:d4:5f:cf:cc:
e1:78:83:84:8c:bb:f9:47:cf:c1:a9:f4:95:9c:3a:
ee:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:F7:76:35:F5:AD:67:37:6A:85:54:35:FD:D1:00:48:68:17:54:0E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/429b7a0a-fe87-3890-8ac4-5cb5975e8748.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl
X509v3 Authority Key Identifier:
keyid:B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
sbgp-ipAddrBlock: critical
IPv6:
2605:6c00:7000::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
34:44:f8:b0:75:39:08:f1:56:a5:c2:bb:69:a8:1a:34:98:39:
4f:aa:19:67:66:9d:61:ea:2a:27:f8:52:f0:e3:d0:eb:6b:4c:
7a:c3:ac:d5:82:5a:c6:da:77:80:1c:44:23:eb:92:c2:a9:c4:
f6:0e:8b:e4:30:ad:d4:ac:dc:54:99:5f:07:25:84:7a:74:96:
d8:d7:f9:8c:a0:05:12:07:e4:c7:20:dd:60:7f:44:1c:17:0d:
cf:d2:65:c2:b1:c2:fe:9e:a0:e0:0e:23:23:67:78:de:7c:10:
ed:24:a9:9e:6a:9c:36:0d:a9:49:e7:e3:f7:4e:ee:1e:a8:7a:
c8:68:f1:5f:7a:53:fd:40:36:ad:a8:8c:44:5b:5d:16:e1:b9:
85:d8:84:86:0f:3a:f5:ac:f0:5f:8b:60:ad:d7:dc:46:50:77:
50:a8:1c:41:16:03:80:5b:48:f3:d5:f9:7e:85:7d:3f:b7:46:
92:92:de:1e:dc:15:11:ff:cd:82:2f:1c:7f:bf:c6:67:e5:64:
47:62:ed:a9:e0:eb:b1:d0:57:51:0b:6d:22:76:20:e1:69:0b:
5a:67:cb:f7:a4:83:a4:5a:2c:73:06:49:81:41:68:af:e7:05:
9c:47:5b:3d:0b:19:66:41:1a:da:41:0f:95:9e:b1:32:d8:84:
b0:03:61:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 14:06:28 2025 by rpki-client