Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dc4cc6c8-47aa-4b0e-b0b0-04400f7f99b0/6c012601-5967-36bb-8cf9-ef0310269f45.roa
File: 6c012601-5967-36bb-8cf9-ef0310269f45.roa (raw, json)
Hash identifier: HwRLZc0EKAzE4kJGh8jPoh07a83y9PJnN7jxfZOF1lU=
Subject key identifier: EB:A6:7D:D2:7B:A6:60:85:AD:D6:33:95:23:E0:85:68:3F:A8:77:8F
Certificate issuer: /CN=dc4cc6c8-47aa-4b0e-b0b0-04400f7f99b0
Certificate serial: 010D0C9F432858494B640E49D70E6B576F024DC0
Authority key identifier: 6C:55:D1:A4:32:7B:96:D3:67:EE:5C:4D:89:D6:D2:3C:9C:76:27:9E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dc4cc6c8-47aa-4b0e-b0b0-04400f7f99b0.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dc4cc6c8-47aa-4b0e-b0b0-04400f7f99b0/6c012601-5967-36bb-8cf9-ef0310269f45.roa
Signing time: Mon 24 Mar 2025 13:00:53 +0000
ROA not before: Mon 24 Mar 2025 13:00:53 +0000
ROA not after: Sun 22 Jun 2025 13:00:53 +0000
asID: 2701
IP address blocks: 129.130.0.0/16 maxlen: 16
192.31.97.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:4b:64:0e:49:d7:0e:6b:57:6f:02:4d:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc4cc6c8-47aa-4b0e-b0b0-04400f7f99b0
Validity
Not Before: Mar 24 13:00:53 2025 GMT
Not After : Jun 22 13:00:53 2025 GMT
Subject: CN=54de0fc1-c239-4f00-b14a-d40bfa6fe830
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:5a:d8:d5:a8:37:0e:b8:d6:a9:34:db:e6:9e:
4f:1a:96:f9:7a:d3:c3:16:c2:42:34:08:8a:19:3b:
ef:28:b0:50:85:10:29:e9:20:8b:3f:34:df:14:8a:
35:01:c5:2e:b5:4c:03:7e:91:02:40:f2:4b:f6:d8:
c2:76:32:92:3e:34:cb:34:91:be:10:99:91:47:c8:
51:b7:0b:92:3b:e5:2e:cd:9d:f9:1b:a3:ff:fa:37:
87:35:a7:bc:6c:a3:28:dc:3f:58:34:02:a8:d4:be:
d5:81:34:c4:64:e4:83:72:8b:db:eb:76:46:55:9a:
06:41:a8:ef:ca:6a:2e:0c:ef:b9:ac:17:d6:04:00:
9c:57:30:49:19:87:d8:2e:c3:9b:b5:36:cf:42:dc:
ed:cf:76:1f:fd:f1:48:58:a6:dc:cb:8a:56:32:46:
bc:e5:3c:ba:1f:8f:fa:b7:33:9c:12:68:bb:ba:92:
e1:4c:7b:da:ee:b0:04:69:22:10:7e:e1:90:01:09:
6d:79:2a:45:05:ae:4e:7c:ee:e1:37:4d:49:f1:ba:
e9:19:53:e3:f9:1a:f4:69:f6:09:e2:6f:34:01:45:
af:cc:e9:1a:df:e6:a8:7f:0a:e9:ef:fb:b5:c9:a6:
95:9e:28:09:dc:70:45:f2:9b:87:37:fd:42:e7:a1:
5f:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:A6:7D:D2:7B:A6:60:85:AD:D6:33:95:23:E0:85:68:3F:A8:77:8F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dc4cc6c8-47aa-4b0e-b0b0-04400f7f99b0/6c012601-5967-36bb-8cf9-ef0310269f45.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dc4cc6c8-47aa-4b0e-b0b0-04400f7f99b0/dc4cc6c8-47aa-4b0e-b0b0-04400f7f99b0.crl
X509v3 Authority Key Identifier:
keyid:6C:55:D1:A4:32:7B:96:D3:67:EE:5C:4D:89:D6:D2:3C:9C:76:27:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dc4cc6c8-47aa-4b0e-b0b0-04400f7f99b0.cer
sbgp-ipAddrBlock: critical
IPv4:
129.130.0.0/16
192.31.97.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0f:85:1f:18:1f:da:62:f4:5d:48:67:46:a1:18:ae:17:cd:4b:
dc:f1:66:d2:94:ff:7a:ca:44:90:bb:72:fc:80:1e:89:60:31:
30:66:97:33:0f:a5:da:c0:b3:3f:fb:ad:d7:d5:13:2a:e9:a1:
51:78:b7:81:ea:4f:00:4c:33:5e:e0:c3:d3:a4:4f:ea:6e:27:
b0:73:b3:fc:c4:e1:b8:a9:f7:53:e8:dd:91:e4:77:85:c4:44:
9f:e9:25:d6:cd:30:cc:0f:45:5a:7e:89:0d:19:28:ec:cf:9f:
6d:49:41:de:71:f6:aa:09:74:d4:a1:0d:5c:dd:8a:5c:d1:d6:
3f:12:7b:27:bf:18:c4:fb:03:02:65:77:fa:ae:95:7a:d0:ec:
e9:03:1d:b5:70:b5:f9:28:d6:31:46:d9:1e:ad:54:a6:6a:61:
c6:e5:57:74:b4:af:20:2f:03:3c:b8:6a:19:54:8f:be:c0:71:
58:6a:b6:6c:52:f6:60:34:b4:4f:f2:05:b3:9c:c1:fd:c3:84:
88:cd:13:32:61:b9:d8:e1:70:58:9a:04:ec:43:d7:1b:37:20:
4c:e9:cc:78:f2:6f:46:56:1e:b9:c5:b1:43:5f:70:4b:25:8f:
17:ac:18:c9:8a:b6:2e:d9:f1:b9:a3:7e:18:05:43:df:09:13:
a8:d1:56:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:58:19 2025 by rpki-client