Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39fea962-7ffb-4d29-beb1-e588e6436410/8ca887e2-fee5-3544-b7d1-cab80697c43e.roa
File: 8ca887e2-fee5-3544-b7d1-cab80697c43e.roa (raw, json)
Hash identifier: ElmDw/BW0cCszNgWQaFOj7HUQHx2b07iUcV8XNiHGgo=
Subject key identifier: 2C:43:7B:FA:A5:93:1E:5A:B7:C7:B0:5B:16:35:04:C0:DE:70:E4:E5
Certificate issuer: /CN=39fea962-7ffb-4d29-beb1-e588e6436410
Certificate serial: 010D0C9F4328584953C447D02CF25155E73E1C80
Authority key identifier: C9:50:7A:AC:66:77:E6:E4:6B:E5:A1:44:C7:1C:D8:8C:25:C2:9E:FB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39fea962-7ffb-4d29-beb1-e588e6436410.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39fea962-7ffb-4d29-beb1-e588e6436410/8ca887e2-fee5-3544-b7d1-cab80697c43e.roa
Signing time: Thu 27 Mar 2025 13:00:52 +0000
ROA not before: Thu 27 Mar 2025 13:00:52 +0000
ROA not after: Wed 25 Jun 2025 13:00:52 +0000
asID: 30247
IP address blocks: 2607:b80::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:53:c4:47:d0:2c:f2:51:55:e7:3e:1c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39fea962-7ffb-4d29-beb1-e588e6436410
Validity
Not Before: Mar 27 13:00:52 2025 GMT
Not After : Jun 25 13:00:52 2025 GMT
Subject: CN=45ec0d34-37ce-49ff-9388-ae2980598258
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:45:94:97:72:39:6a:6f:5c:07:b6:7f:5b:10:
da:02:99:3d:39:81:ed:1f:4f:9f:b9:bd:ed:76:f1:
99:b6:7a:8a:95:31:b8:ac:74:06:44:1f:bc:16:a4:
e1:46:0b:14:9b:e2:37:07:60:67:47:7b:65:0c:a5:
3d:53:a7:81:61:d7:c7:ff:5a:f7:13:12:3e:db:02:
2a:9c:bd:08:0d:74:23:d4:88:6a:ff:07:5e:af:62:
ab:cd:1f:77:7d:4d:31:54:da:aa:44:5e:ac:be:c7:
fc:3e:22:d0:9b:b7:73:41:e8:f4:47:a7:6a:de:de:
8e:7a:67:e2:e1:94:e6:f0:05:cd:f3:a0:01:ca:78:
31:8c:89:53:f4:6d:fd:e2:23:a2:45:41:91:2e:c8:
a1:5e:68:ee:67:6d:49:27:97:62:54:0a:56:7e:7d:
97:a1:ae:61:b1:9b:67:cd:7e:90:c2:49:59:36:24:
b9:dd:44:9f:bf:a3:bd:ac:51:fb:59:51:cf:01:b6:
3b:ed:8c:ca:0c:46:99:9c:1b:03:db:12:7c:2d:2e:
d0:5c:39:d3:85:c1:73:6f:fe:31:c7:9f:82:bc:11:
95:72:dc:18:97:5c:57:9d:66:41:60:f7:a9:28:12:
fb:84:a2:97:7d:a4:88:47:fc:86:1f:e1:04:8f:86:
c4:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:43:7B:FA:A5:93:1E:5A:B7:C7:B0:5B:16:35:04:C0:DE:70:E4:E5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39fea962-7ffb-4d29-beb1-e588e6436410/8ca887e2-fee5-3544-b7d1-cab80697c43e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39fea962-7ffb-4d29-beb1-e588e6436410/39fea962-7ffb-4d29-beb1-e588e6436410.crl
X509v3 Authority Key Identifier:
keyid:C9:50:7A:AC:66:77:E6:E4:6B:E5:A1:44:C7:1C:D8:8C:25:C2:9E:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39fea962-7ffb-4d29-beb1-e588e6436410.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:b80::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5c:ae:b9:11:b6:bd:05:ab:53:04:d0:eb:fa:f4:01:08:9c:2b:
ff:f0:2c:36:11:bc:fd:8f:e2:0f:1f:f2:1f:1e:68:a2:ac:8a:
86:a0:d5:6d:d3:e6:73:4f:f9:e0:40:6f:8b:0f:48:10:4a:30:
ba:43:5d:a6:2e:34:c3:ab:62:20:71:1f:4c:44:79:b2:1b:28:
27:c9:f7:02:be:01:67:ea:99:72:6e:af:8a:d2:bc:5f:b1:86:
bc:92:8b:05:25:09:fa:5d:eb:17:db:32:8c:f6:cc:e3:b7:cd:
a2:92:bb:e9:12:e2:49:0c:c2:62:b8:0c:2f:d6:8a:42:0e:e1:
5f:99:10:5f:6d:ba:15:ef:6e:24:c9:81:39:f9:be:95:a4:fd:
cb:8b:6f:1a:c9:b2:99:35:2e:b9:05:f7:df:71:d6:32:bf:cb:
f6:ad:fe:47:ec:53:9f:52:87:7d:e6:f3:34:c1:96:9a:92:b0:
44:94:a7:b6:b2:d3:92:8c:7a:1e:13:e7:54:35:da:a2:d9:28:
3f:a5:64:89:a1:78:c8:95:5d:b6:68:e5:71:72:c0:6c:d3:c5:
c2:ca:cd:15:21:e0:86:c9:d0:82:d2:c6:6e:69:fb:96:15:f4:
78:e2:4f:69:41:53:78:be:41:6e:d8:ca:7e:a9:20:db:50:f4:
6b:58:58:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 17:03:26 2025 by rpki-client