Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e77d852-ed63-3985-aa23-e8aa56c369a2.roa
File: 5e77d852-ed63-3985-aa23-e8aa56c369a2.roa (raw, json)
Hash identifier: Y5iFEFPoL5Yum+ydXM7VvdJwSEXWN+s6rBHYYI16aQ4=
Subject key identifier: 35:3B:71:AD:1A:5D:D5:2B:71:A3:53:A7:C6:76:DA:68:FE:88:01:7B
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285848C5818D418310FFC9009A7730
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e77d852-ed63-3985-aa23-e8aa56c369a2.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 11344
IP address blocks: 2001:4860:3::/64 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:81:8d:41:83:10:ff:c9:00:9a:77:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=26d58a25-1f49-42b2-9fd0-489cb0c0a2eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:4b:ac:6f:5b:09:21:95:97:ae:fc:9f:b8:df:
9d:ef:24:bc:02:73:e8:7b:48:7e:47:24:0e:71:11:
88:b6:02:c0:46:e8:cf:b3:9b:d7:d9:22:dd:06:54:
da:61:1f:54:73:c3:02:88:fa:5d:83:e9:b6:f4:5a:
31:38:35:a1:8a:d6:82:92:60:d3:50:63:47:40:06:
80:49:a9:4d:89:26:18:b0:3e:c8:b4:53:2b:e0:17:
a6:b3:cf:21:48:b5:e3:22:06:36:fc:80:b7:d9:2c:
0d:7e:e6:91:d2:71:5d:1f:57:87:75:14:b5:8c:95:
b2:e8:d6:ca:d5:7a:59:8f:c2:1a:fc:4a:79:af:d4:
33:34:de:3d:e5:2f:1f:c9:4d:86:ad:b4:c8:bb:b8:
48:93:d6:6c:39:40:ab:f5:63:b1:4f:db:b9:52:36:
40:c5:3b:75:59:a9:e9:00:c8:2a:70:da:bb:41:3d:
6b:da:54:27:f2:f8:43:da:0e:72:f4:57:8f:19:07:
ae:41:df:aa:4f:b3:66:17:0b:36:a6:73:c4:61:c7:
d5:a1:5a:e5:f3:7b:18:2b:58:7c:24:93:b2:4a:2f:
f7:1b:e3:03:2a:a6:3f:58:0b:67:cb:87:a2:27:44:
fd:9f:b5:d5:e1:f0:b5:2d:e5:b1:c0:30:46:f3:ec:
8d:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:3B:71:AD:1A:5D:D5:2B:71:A3:53:A7:C6:76:DA:68:FE:88:01:7B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e77d852-ed63-3985-aa23-e8aa56c369a2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:4860:3::/64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
98:38:4e:ef:be:51:ab:59:63:7f:f5:69:9d:26:e6:4c:e7:ba:
b1:af:e8:ea:a1:8e:7a:7e:a9:c3:55:da:c4:54:f1:1e:f6:3b:
f8:0f:f2:cf:24:2d:18:8c:65:2a:5f:28:99:d6:60:2c:c9:35:
7e:12:03:1d:c6:21:17:21:bd:1f:77:ca:b5:1e:86:50:be:86:
d4:ce:2c:1b:d2:3e:be:7c:72:39:65:c9:3f:c8:54:f4:3c:91:
7d:3e:c4:44:4b:21:25:11:c1:dd:c8:76:aa:4b:01:ce:b5:ea:
b2:0e:9c:dd:87:61:db:42:97:6c:c9:4d:36:19:7c:42:ed:ab:
3c:de:9a:47:9b:1a:93:b7:2d:b5:ac:07:e8:61:3a:32:e4:e0:
0d:28:5c:51:c6:69:20:b3:b4:d9:36:88:cf:e2:eb:55:56:8d:
8b:d7:9a:71:73:9a:7d:35:77:8c:5e:81:ee:b2:c5:b2:8e:85:
01:79:db:b2:83:33:ef:3f:fc:d9:45:49:c1:97:a5:c6:f2:3f:
63:db:ae:52:8f:3a:60:aa:37:dc:11:63:2e:31:61:80:1b:08:
19:a2:c0:92:aa:a1:c4:d0:bd:68:97:ce:05:3d:9c:da:b5:76:
5d:d0:82:d8:5a:e7:00:3b:94:71:bc:41:66:db:3d:1b:0a:48:
23:ce:a3:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:05:02 2025 by rpki-client