Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a81433d8-133e-3df2-a702-ef8477e6f8ea.roa
File: a81433d8-133e-3df2-a702-ef8477e6f8ea.roa (raw, json)
Hash identifier: GLjfFZxnzRYTXfRbyJLvSIxAiyE4XA/fo9L/Dk7uEZM=
Subject key identifier: 4B:B0:10:96:8C:DD:A8:8F:B2:29:B3:9F:DC:D6:B5:A4:93:A8:93:6D
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F43285849213471A324167F84C6288A20
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a81433d8-133e-3df2-a702-ef8477e6f8ea.roa
Signing time: Sun 09 Mar 2025 10:21:10 +0000
ROA not before: Sun 09 Mar 2025 10:21:10 +0000
ROA not after: Sat 07 Jun 2025 10:21:10 +0000
asID: 7122
IP address blocks: 2607:ca00:8000::/33 maxlen: 33
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:21:34:71:a3:24:16:7f:84:c6:28:8a:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Mar 9 10:21:10 2025 GMT
Not After : Jun 7 10:21:10 2025 GMT
Subject: CN=9d363257-4464-4018-9148-680fcf51d6c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:8e:b6:d3:3b:06:4c:63:3b:53:45:aa:eb:06:
dd:45:00:fc:8d:72:d2:58:e4:e4:71:b9:b1:44:df:
2e:31:fc:8a:76:2d:97:e9:d7:f8:52:d7:4f:7f:9a:
f2:9e:cf:2a:99:87:3f:e5:35:ce:ec:ed:7c:df:a9:
cb:8c:a5:7b:fc:88:47:5d:57:66:c1:d1:6a:7b:4e:
67:95:3c:57:a9:41:39:b0:77:c3:b7:df:d6:8d:d3:
bf:e4:77:85:61:6c:49:1b:13:33:b0:8e:12:9c:b9:
1b:e3:bd:d7:6a:09:a7:86:9d:e4:8c:aa:5b:db:60:
ea:74:54:0e:30:f1:25:54:a6:ba:8b:2e:57:a0:79:
db:d7:67:cc:63:22:cd:dd:88:87:2a:87:07:bb:bc:
c7:00:d7:59:86:15:8c:07:6e:02:2d:b1:05:6b:0c:
a5:2f:3a:26:c8:6c:58:3f:f5:ef:d0:4b:13:a1:44:
f4:b6:10:ec:10:21:e1:76:9e:a1:26:6d:3e:bd:c8:
10:47:b5:c3:fa:28:b5:c5:9b:0b:a2:14:14:49:32:
a1:67:4e:35:d5:b4:8c:83:c4:1f:06:e7:4d:60:7e:
32:df:48:02:86:f3:8f:23:a2:9c:e4:99:f4:03:c6:
76:47:96:34:18:02:99:12:ab:66:8b:49:67:7f:a4:
01:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:B0:10:96:8C:DD:A8:8F:B2:29:B3:9F:DC:D6:B5:A4:93:A8:93:6D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a81433d8-133e-3df2-a702-ef8477e6f8ea.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:ca00:8000::/33
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
51:3a:0b:0e:ab:36:96:02:9c:6d:1b:b0:27:ee:f4:bb:1b:f2:
8e:5a:09:d5:e4:78:d8:02:5c:ff:44:25:ec:d0:ad:90:46:31:
f1:47:07:09:88:04:a4:01:0a:d9:c1:dd:b3:3b:45:44:98:44:
e1:00:48:da:25:0c:bf:bd:de:4f:48:c4:73:c7:80:1c:c3:57:
0d:04:48:9f:aa:a7:f0:55:ea:23:98:40:71:22:52:2e:16:5a:
cd:a7:7c:1b:3c:12:87:7d:d3:12:98:29:c9:d6:25:3b:d4:a6:
d0:2a:96:84:09:ff:36:71:71:10:cf:d2:ef:f2:b6:63:f4:c5:
1f:de:5d:0a:9b:ff:69:81:10:ef:f4:35:2f:13:01:16:f8:a9:
e9:41:25:dc:5d:ad:00:d0:49:53:87:f1:9f:f6:99:77:cf:0c:
98:10:8e:12:32:ba:0b:1d:91:69:66:a5:d7:7d:b1:bc:68:71:
47:1a:64:ec:57:bd:40:fd:bc:1e:d9:35:bb:99:c5:10:4a:47:
5a:87:ad:22:70:ec:13:a8:11:51:fa:ab:6b:4f:0e:af:0f:28:
6f:16:08:f5:db:69:b9:50:c8:69:42:22:05:64:a1:03:ae:7a:
72:7e:fa:89:3b:83:33:33:1c:9a:b4:16:f7:f0:5b:90:49:30:
70:25:70:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:56:35 2025 by rpki-client