Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e/681846f7-c88b-3855-a9c4-86d03b0db501.roa
File: 681846f7-c88b-3855-a9c4-86d03b0db501.roa (raw, json)
Hash identifier: +KUHkV1nfAYHhZJM3c6nAMAOphtLfaMLEcY1rLLMnks=
Subject key identifier: E9:EF:C5:E0:16:6D:9B:1E:D7:67:F7:39:4D:BD:9D:B2:EB:59:2C:00
Certificate issuer: /CN=8e2da239-793e-4082-afde-6458f2319e7e
Certificate serial: 010D0C9F432858491246C4D78C37C2D183B7DA00
Authority key identifier: B6:1E:B0:C8:29:6F:59:D0:64:2B:44:2F:41:AC:38:58:E0:07:01:E8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e/681846f7-c88b-3855-a9c4-86d03b0db501.roa
Signing time: Tue 04 Mar 2025 02:00:40 +0000
ROA not before: Tue 04 Mar 2025 02:00:40 +0000
ROA not after: Mon 02 Jun 2025 01:00:40 +0000
asID: 3754
IP address blocks: 2620:f:6::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:12:46:c4:d7:8c:37:c2:d1:83:b7:da:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e2da239-793e-4082-afde-6458f2319e7e
Validity
Not Before: Mar 4 02:00:40 2025 GMT
Not After : Jun 2 01:00:40 2025 GMT
Subject: CN=def03e2f-c4cf-4a59-b208-6c6346eea05c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:29:e1:bb:5b:ae:d5:f5:3a:a9:9c:0d:b4:59:
e3:88:78:1d:dc:7a:dc:e4:4f:02:9c:bf:16:bc:79:
09:d3:e9:26:43:73:4b:91:13:2d:08:9d:90:4b:70:
00:52:58:0e:9f:7e:2e:3f:df:c4:91:3b:ea:96:85:
55:28:73:5d:36:9c:1b:7b:29:ac:64:1c:38:98:aa:
80:97:36:01:41:be:8a:9d:83:c4:bd:f1:88:1e:62:
30:9d:99:4f:88:f4:df:fa:79:c3:ff:57:a2:83:08:
d7:cf:2c:92:7c:a1:32:2b:4d:40:ed:68:af:5b:15:
4a:14:a6:f1:2f:da:cb:13:03:32:48:a1:86:a4:61:
2b:94:06:62:f8:59:b4:e2:ce:1e:bc:67:c0:20:a1:
f9:71:46:6b:4f:f5:98:8e:6a:c2:82:5b:d4:61:a9:
7e:0a:3f:d1:10:e7:8e:43:4f:e1:22:3a:d6:7e:21:
c0:45:5d:95:6c:37:60:78:ec:9a:60:36:ac:04:35:
2e:aa:38:6b:c6:a1:90:dd:c5:9e:91:73:f1:1d:68:
1b:cb:39:5c:43:1c:d1:85:69:f3:1a:f4:76:fe:ca:
6e:e2:8c:ea:b3:90:bc:ed:04:95:97:ec:8b:5f:f9:
ca:aa:99:8e:4a:8b:20:7c:49:75:07:5e:7e:a7:d5:
2b:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:EF:C5:E0:16:6D:9B:1E:D7:67:F7:39:4D:BD:9D:B2:EB:59:2C:00
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e/681846f7-c88b-3855-a9c4-86d03b0db501.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e/8e2da239-793e-4082-afde-6458f2319e7e.crl
X509v3 Authority Key Identifier:
keyid:B6:1E:B0:C8:29:6F:59:D0:64:2B:44:2F:41:AC:38:58:E0:07:01:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:f:6::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
79:eb:41:d7:c4:94:33:49:a6:c1:4c:31:e4:e7:08:dd:63:44:
23:9c:8e:f2:06:47:26:29:44:44:91:52:66:c7:64:e7:d3:f4:
73:b1:15:2a:9f:fb:9a:26:23:41:a5:1c:cc:92:72:32:46:3f:
4d:3a:2c:53:6f:39:d0:dc:fb:61:9c:79:74:6c:86:61:27:37:
68:51:6e:a2:16:a7:0f:99:5a:93:c3:34:4b:fe:f3:0c:ea:36:
5f:e9:69:58:62:ee:d1:ff:8c:c7:85:98:8b:e8:ca:93:58:40:
19:9a:ff:20:55:b7:a2:c5:dc:4c:88:d4:fb:07:6e:96:35:24:
43:98:9b:ec:15:32:3e:93:e5:13:a9:ab:c9:7c:5e:e3:12:4c:
97:63:c2:1b:29:29:c7:4c:29:f4:97:fd:9a:ae:3b:1f:65:f6:
c3:53:00:c6:d1:49:f0:12:51:c8:8a:c7:e9:9b:a7:26:5e:1b:
04:94:8c:82:a0:6f:9f:5f:b4:25:cf:c1:c2:f9:0b:19:06:8a:
ef:b0:49:42:14:09:76:95:d0:77:fa:7e:c5:52:a1:c3:14:cb:
74:0e:c4:21:97:6d:9e:48:40:bb:7b:54:f5:e2:a8:bf:66:ff:
8b:f7:8a:20:bc:24:f6:64:ec:40:67:9b:0a:bf:c1:c5:d9:53:
ab:91:f3:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:37:13 2025 by rpki-client