Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56/bbca6172-f0f1-3299-8cdc-f3d17115c85b.roa
File: bbca6172-f0f1-3299-8cdc-f3d17115c85b.roa (raw, json)
Hash identifier: 1Tju595T82/JhpkwBzoSDjoS2V42Ta5ZTZ3qcU5J1C8=
Subject key identifier: 56:2B:F3:8C:95:26:19:4D:ED:7F:2F:80:D2:AB:2A:F7:00:4C:70:3C
Certificate issuer: /CN=6a30b207-de04-425f-94e9-ee12d4529f56
Certificate serial: 010D0C9F43285848854B50216817EAEE96843300
Authority key identifier: 4F:F2:3E:B1:27:37:0C:2A:E1:E4:CE:A1:85:CE:AC:EC:21:4B:75:D6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56/bbca6172-f0f1-3299-8cdc-f3d17115c85b.roa
Signing time: Sun 12 Jan 2025 14:00:53 +0000
ROA not before: Sun 12 Jan 2025 14:00:53 +0000
ROA not after: Sat 12 Apr 2025 13:00:53 +0000
asID: 22828
IP address blocks: 2607:f220:300::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:85:4b:50:21:68:17:ea:ee:96:84:33:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a30b207-de04-425f-94e9-ee12d4529f56
Validity
Not Before: Jan 12 14:00:53 2025 GMT
Not After : Apr 12 13:00:53 2025 GMT
Subject: CN=645c1f7b-7c66-4afe-8c14-7fd2f2fb37f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:01:1d:5f:96:5e:e7:a5:28:42:0f:f3:ca:42:
2b:1f:6e:64:4c:7d:21:b3:83:e3:ab:9f:ba:4e:58:
1d:f7:cb:9c:5a:79:88:96:68:1a:69:c2:f9:b2:f2:
cd:16:21:ef:e3:10:a7:05:53:7a:da:91:1c:7c:73:
95:2c:6b:ca:2f:4a:18:fc:9b:81:ed:79:ba:c5:f9:
df:e0:c4:a4:3f:92:ee:55:a6:a7:0a:c5:5e:cc:d6:
ce:dc:78:77:d0:d8:c2:f6:9b:37:f8:34:c5:86:f0:
20:f0:a0:dc:69:16:11:c4:a7:3b:05:64:10:53:cf:
a1:e2:cd:1a:bb:47:d0:a4:40:f8:1c:f1:12:ea:21:
66:0a:dd:2e:a2:bf:a2:f3:cf:bd:a1:0e:fb:9e:d8:
31:d3:0a:7f:04:2e:d2:2b:28:45:f6:4a:46:dc:13:
fc:b8:f3:ef:87:56:70:ec:43:1d:1f:f1:d9:c3:9d:
3b:6b:2c:84:52:44:c9:05:8a:f5:4e:0c:01:ae:2e:
75:36:59:13:9a:de:00:e2:f5:06:3d:84:cf:02:65:
ee:63:c0:16:c9:4b:3e:41:28:b3:a5:1e:dd:c4:12:
49:c8:b3:2f:0c:26:67:a7:b7:a5:e9:e5:29:d2:0c:
eb:9c:dc:e1:39:c5:73:1a:38:98:ce:06:2c:67:e3:
07:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:2B:F3:8C:95:26:19:4D:ED:7F:2F:80:D2:AB:2A:F7:00:4C:70:3C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56/bbca6172-f0f1-3299-8cdc-f3d17115c85b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56/6a30b207-de04-425f-94e9-ee12d4529f56.crl
X509v3 Authority Key Identifier:
keyid:4F:F2:3E:B1:27:37:0C:2A:E1:E4:CE:A1:85:CE:AC:EC:21:4B:75:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:f220:300::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
80:a7:eb:0e:5c:3d:70:75:06:fb:45:15:a0:19:94:07:ef:01:
4e:c6:bc:f6:23:46:46:9f:f0:a5:f1:43:53:74:2c:c7:ed:0e:
01:ad:f3:9c:80:04:73:52:59:f5:4c:fc:9e:75:6d:44:eb:b0:
3a:62:68:ec:db:36:cb:75:50:16:b7:95:0d:05:a8:9c:4d:5b:
75:be:38:46:ed:74:14:a4:c4:67:9c:f9:b5:a9:d3:7e:59:a1:
a4:1b:80:b1:22:22:c6:bd:91:e9:db:ce:ef:86:a9:48:31:c1:
19:12:20:68:9f:de:a5:3e:01:e7:9f:0f:9c:4b:ac:34:67:0f:
cf:2b:aa:db:05:f9:22:91:12:a0:83:8d:fa:30:65:9b:be:67:
2a:8c:16:8d:c7:6e:89:7e:3f:f0:35:26:a9:a4:f8:f5:d3:fd:
6a:16:1d:1a:cf:f8:d9:2f:74:ad:56:0f:9b:ac:5c:18:e0:46:
9e:67:3f:15:48:19:06:b3:a7:df:19:59:2e:c6:25:ef:91:2b:
75:55:3f:e5:32:0e:49:8f:bb:73:12:76:0b:54:87:f3:c3:ba:
a6:08:f7:19:3e:41:68:9d:49:46:eb:c5:0c:8e:cb:5e:cc:b6:
7a:ca:19:b2:0a:e3:13:b4:21:a4:b7:d1:97:8d:f1:e8:5a:89:
9f:92:fe:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:32:40 2025 by rpki-client