Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/0ba20da9-894c-3074-8646-2dce7b9bd518.roa
File: 0ba20da9-894c-3074-8646-2dce7b9bd518.roa (raw, json)
Hash identifier: RtaBYACi0ShNoS8u8G4bvfShGuObhqglDe8JNo/8kv0=
Subject key identifier: D2:16:D1:39:DB:33:2E:16:F3:60:F5:15:AE:59:7A:8E:52:E5:49:45
Certificate issuer: /CN=9906748d-5823-4cd3-9a11-f3dc69a3e751
Certificate serial: 010D0C9F432858487A2080327805F4F2DB62CC00
Authority key identifier: A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/0ba20da9-894c-3074-8646-2dce7b9bd518.roa
Signing time: Wed 08 Jan 2025 14:00:51 +0000
ROA not before: Wed 08 Jan 2025 14:00:51 +0000
ROA not after: Tue 08 Apr 2025 13:00:51 +0000
asID: 14618
IP address blocks: 2620:147::/36 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7a:20:80:32:78:05:f4:f2:db:62:cc:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9906748d-5823-4cd3-9a11-f3dc69a3e751
Validity
Not Before: Jan 8 14:00:51 2025 GMT
Not After : Apr 8 13:00:51 2025 GMT
Subject: CN=ef2f081a-4dd9-41fc-95b8-7cf817e282a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:b1:13:3a:96:e6:fe:64:50:69:fd:ba:16:41:
26:d4:3b:6e:93:fa:98:ba:f3:4e:3b:a8:a7:20:31:
40:fa:ed:89:d0:9b:b1:ce:0c:42:b3:1b:1d:8b:10:
85:b8:30:f7:2f:85:08:4f:84:32:0c:59:a3:eb:60:
a9:a9:1c:26:54:2f:96:f2:7c:da:a7:f6:fe:e6:97:
7f:62:51:c7:60:04:f0:61:1e:13:d6:fc:81:69:31:
c0:0e:ca:dc:72:4a:b6:23:c4:de:e6:1f:ba:56:7e:
87:07:a4:c7:e3:78:a5:53:f6:b5:4d:89:b3:e7:7b:
d0:03:ca:11:e6:13:70:d3:de:d7:38:71:ae:e2:04:
56:d9:72:04:51:35:9e:6d:ac:02:fc:e8:af:7e:22:
73:fc:97:36:48:44:de:27:92:b9:a6:d1:78:d6:55:
9e:e6:9e:be:7e:3c:75:d9:ac:c6:71:32:56:44:23:
65:b5:86:62:ca:8b:c8:fa:9a:d1:37:aa:68:ab:a3:
c7:c1:b0:3c:4b:1d:57:22:03:e1:bb:e3:56:fa:77:
c0:1b:8c:4c:42:4e:b5:c1:99:c3:1a:f3:28:74:72:
8a:94:c1:1c:f9:89:58:0a:c0:9a:d7:41:6a:8f:81:
00:85:05:a8:d4:91:6a:ab:86:21:0d:22:ea:b0:d4:
47:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:16:D1:39:DB:33:2E:16:F3:60:F5:15:AE:59:7A:8E:52:E5:49:45
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/0ba20da9-894c-3074-8646-2dce7b9bd518.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl
X509v3 Authority Key Identifier:
keyid:A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:147::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
75:36:0f:95:d9:8a:1c:f0:6a:6d:9b:53:44:ab:78:fe:4f:a6:
ed:41:45:a6:89:96:f6:64:0d:99:b7:f7:3e:36:c4:d2:c2:3e:
7d:02:30:ae:e5:16:e7:9d:10:44:44:1b:e6:07:11:31:83:ec:
2b:eb:00:b9:c9:91:eb:ae:7e:ce:67:5b:41:71:ad:20:09:50:
c9:2b:d0:38:3c:53:c5:04:51:24:8a:c7:b1:e2:bc:0b:6c:df:
b3:c1:9a:ff:e8:b1:b2:68:64:33:82:9b:9b:80:19:2e:c5:81:
dd:1c:5f:39:36:54:3d:8e:4d:68:81:9c:9a:90:cd:9c:f6:a0:
ea:cf:fe:d4:fa:ba:48:7e:86:cf:72:0f:57:d6:f0:d2:42:d7:
b6:3e:28:9e:d6:5f:a9:f6:23:5e:86:98:5f:83:e4:47:8b:73:
77:47:97:13:86:f1:2f:2f:c1:43:de:86:d1:4f:a6:62:65:82:
e8:18:9f:dd:a5:92:16:ce:c0:17:cb:6f:3c:67:fe:9f:a1:a9:
47:d2:9d:02:be:4c:80:4e:25:5e:6d:74:44:43:2d:8b:f6:68:
23:44:6b:b3:ff:b5:98:3d:d0:d7:5c:30:f1:6c:5d:64:3a:fd:
38:78:2d:63:bf:66:94:a3:29:70:52:4f:f2:4c:7a:b0:4b:e2:
b0:f2:13:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:55:48 2025 by rpki-client