Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/5e197e82-6568-36db-8744-a92186db0276.roa
File: 5e197e82-6568-36db-8744-a92186db0276.roa (raw, json)
Hash identifier: 3cx8HlBViMFdM0l2GAXxUZqbniR3qeuwuHFdPUoql1s=
Subject key identifier: 5E:62:89:55:3A:A4:34:4A:72:42:4B:74:F3:72:1C:43:47:A3:AC:EC
Certificate issuer: /CN=78a3d836-1df8-4303-a944-17cd53d7d04e
Certificate serial: 010D0C9F43285848B090AF9C8C0279F0A5F4DC00
Authority key identifier: 89:D0:13:AC:DA:15:84:B6:C4:A7:42:B5:71:32:1D:0F:5D:0E:A2:D2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/5e197e82-6568-36db-8744-a92186db0276.roa
Signing time: Tue 28 Jan 2025 02:00:39 +0000
ROA not before: Tue 28 Jan 2025 02:00:39 +0000
ROA not after: Mon 28 Apr 2025 01:00:39 +0000
asID: 40623
IP address blocks: 2610:20:8020::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b0:90:af:9c:8c:02:79:f0:a5:f4:dc:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78a3d836-1df8-4303-a944-17cd53d7d04e
Validity
Not Before: Jan 28 02:00:39 2025 GMT
Not After : Apr 28 01:00:39 2025 GMT
Subject: CN=e8f63bf5-e3a8-4836-b633-4ccc1220abe6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:4a:39:ef:cc:4b:6a:80:ae:80:a0:54:c6:64:
bd:24:94:2e:40:ee:80:41:63:a6:17:f1:17:ba:c0:
17:e8:05:09:a4:4f:dd:d4:1e:8e:41:7a:74:c9:5d:
4e:14:b1:3a:b5:02:db:2e:3f:d7:3b:3f:05:63:f1:
0f:92:52:76:d7:9c:76:3d:e9:e7:2c:83:97:f6:f1:
f6:62:db:b6:79:20:c0:de:d3:50:fa:78:2e:42:30:
e3:07:36:0c:3f:5d:fc:41:8c:10:4d:e4:76:21:07:
e4:53:32:95:2a:0c:02:1f:c6:a2:16:f7:25:48:82:
46:75:31:61:5e:35:7c:fd:ba:6b:33:ae:45:d9:73:
9a:19:f7:52:38:27:ae:29:b4:80:6f:d9:a7:b3:d3:
ec:26:e4:f8:9a:6c:ae:f8:a5:7d:10:fc:51:50:f1:
0e:fc:32:4b:83:ed:e3:87:63:e3:3d:e6:15:2d:09:
e3:9d:41:59:0c:25:77:4d:a4:cf:7e:d7:fb:a4:f2:
67:3d:4c:21:b1:a6:8b:6a:72:a4:d1:5d:1a:dc:9b:
0d:cf:0b:3a:f6:0e:d4:a1:b0:56:a1:8b:63:2b:4b:
d7:80:42:96:28:d7:b5:04:22:d4:8a:d8:e2:5b:51:
43:fa:99:99:1e:a0:3a:45:64:bb:07:e0:3a:3f:38:
c2:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:62:89:55:3A:A4:34:4A:72:42:4B:74:F3:72:1C:43:47:A3:AC:EC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/5e197e82-6568-36db-8744-a92186db0276.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.crl
X509v3 Authority Key Identifier:
keyid:89:D0:13:AC:DA:15:84:B6:C4:A7:42:B5:71:32:1D:0F:5D:0E:A2:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer
sbgp-ipAddrBlock: critical
IPv6:
2610:20:8020::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
84:b8:60:41:85:4a:e8:89:c0:98:9e:0d:6d:6b:27:ec:4b:83:
3c:5b:7b:b0:5a:50:5c:e8:df:f7:b7:03:b1:3a:2d:18:11:80:
15:1c:6f:8a:f0:60:02:e9:25:fd:ef:19:5a:76:0e:50:84:dd:
f5:f2:c7:c6:6d:90:b7:fd:5b:0d:a6:33:94:ce:59:93:f2:1a:
b9:42:2f:23:51:67:9b:31:a1:f3:03:a0:17:2e:11:03:b6:4a:
05:fc:50:25:01:44:91:bc:6c:ac:54:c0:0b:9d:0f:7c:47:0f:
20:d6:6e:ba:6d:d1:87:4b:75:aa:ea:1f:f0:b3:14:ec:20:46:
48:0b:83:23:24:5b:16:ef:55:0f:07:67:45:52:a6:6e:ee:1e:
c4:4e:f3:f4:c5:ae:3b:40:0c:9f:ea:48:ff:1b:2c:b7:61:24:
31:cf:38:52:b8:af:68:fa:7d:2a:af:83:e3:28:d9:20:d8:f9:
6e:f0:a7:c7:9e:d5:e8:a2:cc:8d:22:38:e4:71:d0:61:68:5a:
2a:5b:88:78:0f:df:fc:1e:b8:33:a4:1f:e9:38:58:4b:20:c8:
75:a5:d3:55:f8:6c:ab:a4:dc:6a:7f:47:c5:b4:8f:43:8b:f9:
47:17:1d:16:df:e9:91:78:12:85:cd:c8:e3:ef:eb:ac:9d:eb:
61:bf:eb:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:44:50 2025 by rpki-client