Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3f51e877-1ec2-3992-a53c-c0a0b4652f10.roa
File: 3f51e877-1ec2-3992-a53c-c0a0b4652f10.roa (raw, json)
Hash identifier: rgxPfKFUcVFkLgiBKeOEvNz1m5Vd0LRTYGYixCHipPw=
Subject key identifier: 8E:DF:9D:E1:57:29:E7:5E:C9:A0:60:4B:6F:36:BE:1C:7B:34:30:62
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285848C5818F4E4B8A5D929596D480
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3f51e877-1ec2-3992-a53c-c0a0b4652f10.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 32381
IP address blocks: 2001:4860:480c::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:81:8f:4e:4b:8a:5d:92:95:96:d4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=a4464b3b-b920-4e61-9f7b-704981678ba9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:70:f9:38:f6:ee:78:39:f3:9d:61:b3:3b:16:
5e:83:e9:0f:ce:31:1f:b8:df:11:a9:7a:52:43:b8:
a6:40:ed:1d:e1:4d:0f:84:bf:ae:69:a3:4a:1f:18:
b8:c0:1f:44:14:1c:d3:fc:cc:63:18:17:d8:1d:b5:
29:5a:a9:e8:fc:03:02:c7:5d:cb:2f:ea:ef:0f:75:
6d:01:60:84:62:17:8c:49:c0:b4:e3:6c:cb:ac:b7:
a1:c8:97:31:68:0c:35:b6:16:7e:ff:c7:66:77:30:
47:68:25:e5:ba:95:49:36:19:63:b5:68:5e:eb:af:
53:d5:3e:31:8a:b9:38:b9:2a:3a:9e:77:3a:73:3e:
6d:9a:af:d2:ac:d9:db:81:7a:99:61:1b:01:8e:ed:
b3:36:49:23:ba:f2:4c:8e:c5:e8:61:ec:3a:fb:83:
8a:56:ed:e1:5d:6d:d5:37:61:b6:cd:8e:10:b1:f0:
ea:fc:74:fa:e5:17:60:c9:70:58:0c:13:19:98:d3:
84:cb:10:4a:64:a9:35:29:0a:13:9c:21:d5:9c:d4:
4f:b6:62:f8:47:b7:06:70:43:0a:2a:f2:8c:d7:1f:
a2:a2:0b:78:a0:c8:db:e2:3c:b8:9d:c2:7e:12:59:
8f:05:8c:c0:e4:5a:9f:99:01:75:61:cb:c8:42:e9:
9f:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:DF:9D:E1:57:29:E7:5E:C9:A0:60:4B:6F:36:BE:1C:7B:34:30:62
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3f51e877-1ec2-3992-a53c-c0a0b4652f10.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:4860:480c::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3f:7a:83:79:58:4c:59:27:bb:f1:b8:92:a4:c6:56:e7:60:18:
0f:d9:6f:d1:8f:85:70:24:bd:09:33:da:52:fe:0c:8a:52:52:
44:15:40:dd:0b:e8:9d:44:c2:34:29:33:2a:99:17:b4:8c:c3:
ba:e3:40:e1:00:0d:08:6a:66:47:19:8c:3b:d2:85:e4:24:ea:
64:e4:a2:fb:c8:83:90:95:f4:49:96:5d:e9:70:90:3e:53:b0:
72:04:f0:ee:32:4d:62:6a:1b:4f:64:d4:01:a2:24:33:a4:20:
70:31:4c:45:77:15:c7:fb:dd:30:4f:96:17:6c:2e:43:84:dc:
98:8a:a7:89:35:d8:be:dc:5d:73:8d:b7:d8:a4:fb:80:76:05:
36:05:dd:54:22:bb:8b:ca:f8:22:3b:55:b1:99:3a:23:40:35:
24:23:35:2f:08:d4:fa:8f:db:8f:8f:ec:a8:a8:f1:10:0c:ea:
e0:7a:3b:fb:4a:3c:97:51:4d:3d:45:e3:4a:16:27:46:b2:84:
40:26:c4:dd:9f:0f:9d:ed:99:5a:86:79:9a:30:fa:18:10:71:
d0:a7:5c:96:88:be:bf:9a:88:59:1f:e8:31:a6:39:a3:43:fa:
1c:23:f6:33:57:bf:ef:29:fb:39:18:3e:55:e6:95:23:4c:db:
29:6a:7d:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 09:51:42 2025 by rpki-client