Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/d40687bc-8b22-3cb5-8bb1-15d7445b69ca.roa
File: d40687bc-8b22-3cb5-8bb1-15d7445b69ca.roa (raw, json)
Hash identifier: L5qk5KaQrarsSkPVFHOgGH0eTjlYfWZbcm9ZTI52L2s=
Subject key identifier: CD:CA:AC:CA:89:C6:C5:14:97:90:9E:20:5B:E5:2F:71:E2:17:36:70
Certificate issuer: /CN=8d499d1b-9023-4410-8b4a-909ca6a083df
Certificate serial: 010D0C9F432858489075EDF97975CEBE835A1000
Authority key identifier: B1:8D:63:7D:ED:62:E0:A3:E0:64:3A:23:99:64:92:6D:21:B9:3F:D2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/d40687bc-8b22-3cb5-8bb1-15d7445b69ca.roa
Signing time: Thu 16 Jan 2025 14:00:50 +0000
ROA not before: Thu 16 Jan 2025 14:00:50 +0000
ROA not after: Wed 16 Apr 2025 13:00:50 +0000
asID: 397666
IP address blocks: 2602:fd9e:f00::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:90:75:ed:f9:79:75:ce:be:83:5a:10:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d499d1b-9023-4410-8b4a-909ca6a083df
Validity
Not Before: Jan 16 14:00:50 2025 GMT
Not After : Apr 16 13:00:50 2025 GMT
Subject: CN=bcc24e0d-7732-42e7-98c6-7825660542d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:5d:2b:81:60:c7:43:06:89:3d:df:c5:24:41:
dc:1d:c5:fc:19:3b:6f:b0:0e:07:dc:5a:39:44:d0:
f7:8c:5d:e8:eb:7a:32:e0:38:7f:63:d2:16:9c:34:
dc:e1:9a:2e:2a:c9:94:13:45:e1:fe:13:2e:4d:79:
df:54:76:de:e8:7d:10:b6:68:4b:66:50:1a:d8:97:
5c:23:ec:e5:13:d1:a8:40:68:3b:8d:f4:91:2b:74:
61:51:b0:d8:86:7b:67:57:2c:84:14:17:6c:0d:2c:
ed:58:54:5c:15:bb:15:e8:6c:76:31:ec:8e:4d:97:
c6:a9:e1:29:6b:5a:3c:98:ad:e2:e9:5f:d3:8b:ff:
c4:25:2b:9c:ff:20:73:ae:2b:fc:02:db:d0:d9:4c:
53:c1:b1:37:15:66:3b:04:f4:79:4a:6c:85:f8:37:
8e:e6:c0:70:5c:18:cd:95:0c:ce:89:f7:43:15:c5:
5f:a1:dd:2e:9c:4b:4d:52:65:32:85:2c:72:07:26:
c9:22:71:34:d5:93:b9:71:18:b0:93:01:a9:a1:73:
3e:7d:a5:a1:82:20:6b:19:84:47:fd:26:0b:d6:8c:
94:40:15:cc:a4:c7:25:99:1c:c6:c9:d2:50:31:b5:
a2:bc:11:44:f2:c2:ae:41:a4:c7:19:b5:b4:ab:42:
72:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:CA:AC:CA:89:C6:C5:14:97:90:9E:20:5B:E5:2F:71:E2:17:36:70
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/d40687bc-8b22-3cb5-8bb1-15d7445b69ca.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/8d499d1b-9023-4410-8b4a-909ca6a083df.crl
X509v3 Authority Key Identifier:
keyid:B1:8D:63:7D:ED:62:E0:A3:E0:64:3A:23:99:64:92:6D:21:B9:3F:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:fd9e:f00::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1f:67:5d:aa:4a:a9:b8:32:82:b9:0f:ff:bd:c2:3f:e6:06:8f:
ff:0c:3b:7e:eb:d5:d7:8d:d7:9b:70:7c:2a:49:d4:3e:a9:2c:
51:74:16:bf:5d:03:94:fd:ac:a8:43:09:ae:dd:0f:f2:4d:99:
c7:81:e7:36:54:bd:59:da:2e:72:f8:96:72:27:7d:2e:91:68:
f2:88:ce:01:56:47:11:48:20:0b:20:3a:b5:f5:40:23:af:bb:
8f:18:bc:64:b4:92:f0:1f:38:a7:a3:4d:07:38:f1:6b:23:24:
d8:8d:f9:10:ab:a1:e7:db:17:82:53:4e:1e:11:24:e4:25:2d:
74:03:86:b5:c5:60:ea:2b:1c:01:d7:dc:5b:6d:98:7a:73:a3:
ba:94:b4:16:2c:9c:22:53:18:94:c5:21:c1:4f:49:ab:20:56:
7e:36:b1:31:2c:64:d2:b3:f9:04:44:27:a8:c2:f4:11:f2:08:
16:be:2b:e0:16:2d:b9:36:e4:72:08:ea:12:1b:ef:ef:f0:81:
67:7c:53:36:46:d2:02:f5:6a:96:f1:fc:bd:12:6f:45:37:2f:
18:c6:39:be:de:4a:0b:bf:8a:7e:10:17:ef:91:4f:1d:d3:3c:
86:bc:3d:4e:12:2d:ae:72:79:90:a4:2d:be:50:d8:1c:37:29:
cc:d7:6a:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:28:42 2025 by rpki-client