Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/8d32e85c-b042-3a2e-b416-c12385b69506.roa
File: 8d32e85c-b042-3a2e-b416-c12385b69506.roa (raw, json)
Hash identifier: +SY/Zms2VwFXNSV7hW6TX8DJ6RvYa+d9pQowUnh6WTE=
Subject key identifier: 1B:46:25:3E:C8:A5:E3:E3:7C:0F:D0:22:2B:7A:FA:50:5A:4F:99:2D
Certificate issuer: /CN=9906748d-5823-4cd3-9a11-f3dc69a3e751
Certificate serial: 010D0C9F432858492CAE9C6108BA8F1E78DA20C0
Authority key identifier: A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/8d32e85c-b042-3a2e-b416-c12385b69506.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 198949
IP address blocks: 2620:147::/36 maxlen: 49
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:ae:9c:61:08:ba:8f:1e:78:da:20:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9906748d-5823-4cd3-9a11-f3dc69a3e751
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=5f98e7d8-ed6f-4b12-8ebe-1f8ba025fb16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c5:ba:e3:03:fe:2b:0e:6d:2a:5f:50:53:79:
f4:09:36:48:4d:e1:73:5f:80:b6:bd:d2:4f:1c:50:
d9:55:63:39:2c:2e:fa:fd:de:96:27:81:4d:54:66:
fb:26:96:02:0e:bb:3a:96:fa:54:a3:b8:c3:e2:9b:
04:a4:94:91:ce:cd:e7:9f:77:b4:af:4c:30:c3:12:
d9:9d:10:ff:d8:a8:15:cd:74:a9:bb:94:63:52:46:
d4:f3:ca:a4:35:6a:ba:d7:a5:8d:52:9a:dd:1a:ee:
bc:cc:0c:13:e7:c3:1d:a6:d5:61:95:78:ba:ae:ff:
33:61:a9:d9:e3:69:28:97:43:5e:40:0d:7d:ff:49:
f6:9d:89:a8:39:0f:2b:48:b4:7c:4a:d2:05:69:8b:
01:22:c8:e0:5f:d0:9b:67:c6:91:58:01:1a:98:f6:
09:e1:9a:3c:13:a9:b1:8f:29:82:d9:d6:b1:61:70:
68:2d:f0:c3:47:82:6f:c4:75:cc:86:ab:65:90:e3:
d5:d9:50:b6:24:30:c3:6b:2b:63:59:16:29:b0:68:
02:ae:1d:8d:ea:80:7d:bc:fd:21:40:8a:d6:f9:37:
0a:6c:58:17:0b:42:52:e8:65:ae:28:16:cf:a2:8d:
4c:b7:61:f6:29:2d:94:8f:6f:f2:46:4e:80:93:bb:
1e:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:46:25:3E:C8:A5:E3:E3:7C:0F:D0:22:2B:7A:FA:50:5A:4F:99:2D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/8d32e85c-b042-3a2e-b416-c12385b69506.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl
X509v3 Authority Key Identifier:
keyid:A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:147::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4e:d1:83:38:4a:b1:81:32:e2:68:64:3c:ea:bb:66:59:dd:89:
2d:2b:07:5f:1a:2d:d5:a5:d7:f3:9e:c0:04:ac:19:d2:3c:15:
13:40:d8:26:38:c4:80:b1:ab:70:da:b7:a5:85:48:ce:37:46:
ce:9a:a0:f2:10:9e:e9:95:01:ba:41:e7:b9:9d:44:5f:5b:03:
92:7f:70:05:e2:e3:a6:76:60:a7:b7:8e:d8:07:e1:df:d1:14:
5c:cd:32:73:4a:ca:e1:d7:60:a2:a3:84:7c:9e:28:54:a0:5f:
f9:1a:b0:ba:36:60:a3:05:c6:b2:cf:48:f0:c8:a9:71:36:ff:
4a:de:6c:b6:b0:b8:e6:b9:77:8f:22:da:ff:8d:4f:17:42:bc:
80:75:92:90:66:2e:97:86:48:7c:3a:a0:78:3b:8a:77:01:5f:
88:a7:fc:2d:f2:88:1b:60:0a:7b:32:82:ea:1e:93:82:66:91:
a3:cb:6d:a9:92:07:e2:4b:49:85:46:5c:f5:5c:79:89:5f:2b:
54:4a:85:73:6e:29:00:fd:20:c2:8e:01:4d:fd:27:ed:e2:7a:
35:d0:92:0b:28:06:b0:de:c0:fe:07:3a:83:47:6b:15:b3:5f:
69:e8:f6:9d:86:35:92:cd:03:ad:d5:71:0a:4a:93:1a:72:12:
d8:29:ef:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:07:35 2025 by rpki-client