Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9fbd098f-9e01-4c26-9395-e5b63399acaf/fc0d5aef-c278-3570-819e-b626d1a7cd3e.roa
File: fc0d5aef-c278-3570-819e-b626d1a7cd3e.roa (raw, json)
Hash identifier: lrMrcZG6C83I2M6iYwltshlXL2NlJbLwSzIqrMvjy0M=
Subject key identifier: AE:4B:64:48:0D:38:F4:4C:BE:FD:03:4E:5D:C6:36:55:BF:22:3B:89
Certificate issuer: /CN=9fbd098f-9e01-4c26-9395-e5b63399acaf
Certificate serial: 010D0C9F43285848A996241BA7088184471CFD00
Authority key identifier: 38:52:68:1E:F9:A1:C1:15:72:67:A3:05:E1:1A:68:FC:23:8B:73:10
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9fbd098f-9e01-4c26-9395-e5b63399acaf.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9fbd098f-9e01-4c26-9395-e5b63399acaf/fc0d5aef-c278-3570-819e-b626d1a7cd3e.roa
Signing time: Sat 25 Jan 2025 14:00:52 +0000
ROA not before: Sat 25 Jan 2025 14:00:52 +0000
ROA not after: Fri 25 Apr 2025 13:00:52 +0000
asID: 7752
IP address blocks: 2604:5000::/36 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a9:96:24:1b:a7:08:81:84:47:1c:fd:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fbd098f-9e01-4c26-9395-e5b63399acaf
Validity
Not Before: Jan 25 14:00:52 2025 GMT
Not After : Apr 25 13:00:52 2025 GMT
Subject: CN=78500648-291f-476d-92fb-495a22fa4776
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:dd:53:8e:0a:f5:bb:b5:03:ac:7a:56:43:8b:
9a:c6:ab:42:f3:42:8d:50:96:56:8b:66:e0:10:7e:
b0:14:d3:56:bf:fc:42:be:71:7c:4f:af:40:0c:12:
01:71:e1:81:38:84:cc:48:a3:20:85:2f:de:f9:ee:
4a:01:68:a5:37:23:10:42:0e:56:ad:e4:48:96:c8:
f5:84:e8:56:0b:fa:78:e2:cf:1b:c1:d9:dd:1e:92:
d3:f7:44:47:63:2b:37:34:39:71:54:8a:fc:17:6e:
78:60:ae:09:b7:ef:62:fe:d7:fd:d2:ff:c1:84:a0:
bf:69:de:bb:a4:8c:8a:b7:52:ed:af:36:f3:74:a1:
25:42:34:80:63:12:a6:37:c1:fc:b2:b3:91:4a:d0:
91:27:3b:52:9b:90:78:a3:d7:3f:96:de:74:3c:35:
7f:4c:81:ab:4e:d7:80:5f:e3:73:13:da:8a:e9:c2:
93:c6:6b:e3:f6:a2:49:74:64:b9:d4:91:db:ff:9e:
5d:1c:9b:d7:99:95:76:b0:7d:22:3d:56:4a:1e:50:
3b:c2:b8:fc:97:69:f1:0a:50:bd:92:e8:2d:a8:6a:
55:5b:59:e9:d0:cb:aa:b9:68:e2:29:b6:ff:bf:1d:
95:45:68:0c:41:d3:06:3c:18:c0:72:4e:97:f4:e7:
88:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:4B:64:48:0D:38:F4:4C:BE:FD:03:4E:5D:C6:36:55:BF:22:3B:89
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9fbd098f-9e01-4c26-9395-e5b63399acaf/fc0d5aef-c278-3570-819e-b626d1a7cd3e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9fbd098f-9e01-4c26-9395-e5b63399acaf/9fbd098f-9e01-4c26-9395-e5b63399acaf.crl
X509v3 Authority Key Identifier:
keyid:38:52:68:1E:F9:A1:C1:15:72:67:A3:05:E1:1A:68:FC:23:8B:73:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9fbd098f-9e01-4c26-9395-e5b63399acaf.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:5000::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0f:f3:f1:22:f0:a2:92:fe:d8:31:22:2a:28:95:ed:be:44:f5:
fb:5b:82:e6:9b:03:04:b3:6e:7c:95:b3:67:64:02:26:6e:82:
e2:9a:61:22:96:00:5c:1a:a7:d2:50:f8:a9:73:ff:0a:e7:cc:
84:e5:13:7f:8f:e5:a2:3b:d4:ab:23:6b:cd:86:1a:ee:1e:a3:
76:c0:f1:eb:44:c9:90:bc:ef:c5:96:f1:ae:77:fb:84:10:8c:
e3:f9:ad:cc:0b:2d:3a:9c:1c:94:b6:41:c0:93:86:14:1e:3d:
10:d8:4b:63:22:3f:1a:ef:96:61:9e:18:ba:2e:ce:e9:38:2d:
0a:91:d8:46:f5:6d:08:0c:b5:ad:eb:cf:8f:67:3e:76:b5:fb:
0d:2b:73:a1:f4:06:ce:8d:36:0f:ab:d5:27:83:c0:db:26:6b:
df:9c:9d:5a:e8:b2:5b:4c:0a:a9:e5:81:59:ca:54:81:e0:d9:
92:4a:43:69:87:38:e4:38:e9:d0:73:1d:49:08:97:c9:31:e7:
63:ab:26:41:e3:ee:1d:a4:42:88:7a:e9:cb:1d:65:e6:6c:4e:
e3:29:c2:ea:0b:a5:9c:ea:ad:ce:b0:d1:63:9c:ae:ea:7a:3f:
cc:31:e9:c0:19:e1:36:8b:48:c8:47:b8:53:95:53:fe:02:db:
e8:7d:d7:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 01:16:07 2025 by rpki-client