Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/84f025aa-f12b-3ffd-8316-3f7e3ba07332.roa
File: 84f025aa-f12b-3ffd-8316-3f7e3ba07332.roa (raw, json)
Hash identifier: ZhYrX3EYdfW6infL38NRAAoAYGt+C8hQXpYQF03YwXM=
Subject key identifier: AA:D9:A2:6A:A6:F3:8F:1A:11:9D:8C:77:4F:DA:8C:6F:99:E7:F6:93
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285848C5818D4F188CA3F333EC2880
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/84f025aa-f12b-3ffd-8316-3f7e3ba07332.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 36040
IP address blocks: 2001:4860:3::/64 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:81:8d:4f:18:8c:a3:f3:33:ec:28:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=79d3db48-f34c-47e3-9715-32f6e1358d03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ac:25:47:23:81:95:c7:8d:32:bb:90:2b:46:
04:24:dd:d5:3d:7c:40:6f:f8:fb:3a:89:87:d0:3d:
3a:8b:a8:d9:64:8b:e0:50:48:08:25:cb:0b:8c:ac:
67:47:26:7a:94:97:34:08:30:3d:ad:dd:55:a8:8f:
7c:29:a0:07:fa:57:a5:54:8b:cc:61:ce:7e:6f:c4:
1a:95:19:fb:56:22:d8:c5:a3:0f:bd:93:27:b3:4a:
85:70:0a:3e:39:a1:d3:ee:c8:c2:8c:27:03:8d:b9:
19:5c:e5:70:f9:09:1e:40:05:b8:9e:c3:c3:94:d2:
1c:51:c7:f7:87:09:8b:3c:ad:9b:0e:e6:f1:6e:8a:
a7:9f:d3:5c:6c:58:fe:3b:0b:ab:cb:12:4b:b8:f1:
0b:5c:c0:41:20:8b:27:0c:d6:86:48:a5:18:97:49:
f9:08:c7:31:32:e4:05:33:1d:03:29:d7:57:dc:c1:
10:41:de:df:7e:95:98:c5:fb:05:38:55:fe:f1:bf:
08:31:b0:70:85:11:43:28:e6:b7:7e:a8:2f:01:8b:
38:02:34:c9:49:80:57:5b:6c:32:0a:6d:05:ee:db:
59:1a:9c:0f:3f:34:f4:68:0a:10:01:61:4d:27:3f:
0f:c5:2e:61:52:42:45:ca:dd:d9:9a:f5:bc:00:a2:
f9:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:D9:A2:6A:A6:F3:8F:1A:11:9D:8C:77:4F:DA:8C:6F:99:E7:F6:93
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/84f025aa-f12b-3ffd-8316-3f7e3ba07332.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:4860:3::/64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
03:66:68:32:9c:d1:d3:0e:a3:58:a4:c8:b3:d7:d4:8e:33:f5:
ba:96:24:e5:b2:3e:34:d1:f0:24:f6:a5:2a:84:0e:db:86:20:
ce:2b:98:1a:c8:7b:5d:0b:ca:88:d7:ee:e1:59:6e:cf:15:2b:
46:54:16:de:06:ed:eb:37:c1:a3:67:62:54:99:d9:0c:71:95:
6d:41:38:e4:3b:1a:cf:db:6d:85:56:f8:ec:cf:bb:56:78:d9:
1e:bb:56:5d:11:2f:ef:13:f1:da:9e:9c:73:38:c1:64:f6:19:
17:35:d1:dc:eb:a0:d0:29:4f:8a:b5:88:67:26:50:96:60:fb:
e9:8a:58:2c:9a:90:92:8e:5b:d9:13:1d:8a:29:3a:6c:7e:dd:
5f:77:57:11:f8:0e:57:28:5a:3e:03:a9:fd:05:ea:65:01:f4:
73:02:d5:66:78:6c:34:6e:53:11:20:1e:44:6b:3e:29:3f:71:
a1:fa:66:0f:1c:e5:f5:75:21:ce:2a:87:e2:8f:b7:fb:37:b5:
d3:85:3e:eb:18:83:e7:5c:b4:d6:1a:1b:98:a1:b0:17:71:f9:
c3:e3:fe:91:a3:3c:33:09:c5:81:8a:85:fc:ef:35:46:dd:d4:
86:a1:67:bc:3f:eb:61:21:0c:41:03:91:b7:e4:5b:4c:ad:15:
19:bd:10:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:11:35 2025 by rpki-client