Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/2d10269c-abaf-3198-90a0-8c1e927fe84e.roa
File: 2d10269c-abaf-3198-90a0-8c1e927fe84e.roa (raw, json)
Hash identifier: EfPMsZX+U8iaJ0axm0h2307YPJrgCRgpPn2iEqWehpA=
Subject key identifier: 0D:0E:5A:5F:0D:59:48:9D:31:0B:E0:17:2C:79:95:8D:37:C2:DB:0C
Certificate issuer: /CN=78a3d836-1df8-4303-a944-17cd53d7d04e
Certificate serial: 010D0C9F4328584929E3C886D3A849074A5C5180
Authority key identifier: 89:D0:13:AC:DA:15:84:B6:C4:A7:42:B5:71:32:1D:0F:5D:0E:A2:D2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/2d10269c-abaf-3198-90a0-8c1e927fe84e.roa
Signing time: Wed 12 Mar 2025 13:00:53 +0000
ROA not before: Wed 12 Mar 2025 13:00:53 +0000
ROA not after: Tue 10 Jun 2025 13:00:53 +0000
asID: 3477
IP address blocks: 2601:a012::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:29:e3:c8:86:d3:a8:49:07:4a:5c:51:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78a3d836-1df8-4303-a944-17cd53d7d04e
Validity
Not Before: Mar 12 13:00:53 2025 GMT
Not After : Jun 10 13:00:53 2025 GMT
Subject: CN=1db41869-28b5-4257-8b82-0096de2c254a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:53:82:d2:e6:94:74:67:7a:c1:48:6d:df:bf:
c4:bd:b4:06:00:02:76:1c:c9:c9:b7:62:57:7e:ac:
e6:59:36:01:d1:af:e0:03:8e:f4:83:5e:d8:4e:25:
4d:1d:62:03:78:fa:0e:2e:22:fb:ee:97:31:5b:0a:
62:5e:4a:d4:8c:1f:7c:ea:0c:c9:49:a0:98:ed:8f:
a2:32:84:38:8a:f5:0d:28:39:8e:71:6e:6c:c1:1c:
c6:92:d7:ef:7d:9d:13:c5:da:3d:be:a0:db:93:ca:
30:8b:a8:80:7c:44:dc:f6:f6:f9:bf:a0:6d:ed:48:
f1:ad:d3:a8:d6:ee:01:b4:70:22:fa:67:60:e6:3d:
73:15:e5:b3:fd:49:09:7a:7d:58:bd:77:59:da:63:
c8:ed:89:92:8a:85:8c:b5:af:37:43:fa:b4:da:cc:
c2:bc:2c:13:45:14:58:e8:1f:a3:c5:66:b8:cb:c7:
4c:9f:e6:7d:37:00:fd:34:19:d7:2c:8a:4c:5b:39:
ee:fb:4e:f6:69:a6:bf:e6:65:47:05:d0:a5:7f:92:
7d:e5:09:65:80:68:ac:87:07:6b:d3:4d:8b:76:a5:
a2:39:d6:ed:47:54:ec:f1:b9:6b:85:5d:07:60:d1:
52:67:a8:d6:29:f5:be:5c:19:00:42:60:8e:2d:a7:
02:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:0E:5A:5F:0D:59:48:9D:31:0B:E0:17:2C:79:95:8D:37:C2:DB:0C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/2d10269c-abaf-3198-90a0-8c1e927fe84e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.crl
X509v3 Authority Key Identifier:
keyid:89:D0:13:AC:DA:15:84:B6:C4:A7:42:B5:71:32:1D:0F:5D:0E:A2:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer
sbgp-ipAddrBlock: critical
IPv6:
2601:a012::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
56:5b:15:a5:4a:19:2d:32:82:aa:b9:08:92:ce:11:de:bd:80:
10:f2:56:f1:a9:40:82:7f:27:c5:1f:bf:31:c7:1e:61:fd:77:
84:9d:df:2e:ff:c9:0d:c1:9f:f6:fa:1d:ab:3c:b0:10:8b:66:
27:48:68:97:11:85:94:b4:45:ae:6a:1e:0b:f0:7e:6e:a1:1f:
54:54:dc:aa:36:8e:6e:d0:fb:9a:4b:3d:0f:20:f9:e7:3b:9e:
30:20:69:95:e8:a2:43:b1:ac:9a:3a:4c:4a:dc:11:e8:66:9b:
f2:1f:e8:b5:63:5b:86:3d:12:e8:75:98:c9:77:cd:32:c7:c1:
95:2b:be:c5:c7:d4:3d:22:10:2d:4b:9a:91:0f:38:a8:86:b8:
b9:00:dc:2e:f7:99:8a:7f:64:f4:79:ed:8d:76:43:2a:fb:06:
5c:40:cb:12:4e:5d:32:7d:42:f2:e1:e0:24:a9:de:a5:6a:49:
d6:4f:73:d7:f1:dd:b2:23:70:ae:42:cc:71:64:bd:d4:c1:61:
4c:2a:cd:cf:19:a7:a7:19:b6:9e:80:ff:8a:c1:53:42:72:14:
52:ed:93:90:d2:fb:09:7f:13:59:ea:73:3b:a7:db:d7:f6:34:
c2:ec:e8:b7:5c:29:d0:a6:8d:df:11:6f:1d:d0:be:4e:66:28:
4d:33:61:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:54:30 2025 by rpki-client