Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/10b5a04a-f4e1-44ae-be5f-312a5d1a57c8/c0745459-884b-33e8-a244-c9b69f9111e0.roa
File: c0745459-884b-33e8-a244-c9b69f9111e0.roa (raw, json)
Hash identifier: IUG3zqU+MOzXNTERjD3kzrvPJQq550d67iax1WnaAVg=
Subject key identifier: 28:CE:21:3E:29:28:63:FB:F9:BC:A3:70:DA:DA:10:60:56:0B:27:B0
Certificate issuer: /CN=10b5a04a-f4e1-44ae-be5f-312a5d1a57c8
Certificate serial: 010D0C9F4328584929E3D02AB03D08607F5072D0
Authority key identifier: ED:4C:8D:F8:79:6F:9B:C9:5E:AC:3B:10:BA:33:AA:5A:AE:B3:C1:B6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/10b5a04a-f4e1-44ae-be5f-312a5d1a57c8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/10b5a04a-f4e1-44ae-be5f-312a5d1a57c8/c0745459-884b-33e8-a244-c9b69f9111e0.roa
Signing time: Wed 12 Mar 2025 13:00:53 +0000
ROA not before: Wed 12 Mar 2025 13:00:53 +0000
ROA not after: Tue 10 Jun 2025 13:00:53 +0000
asID: 395649
IP address blocks: 2604:7c40::/36 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:29:e3:d0:2a:b0:3d:08:60:7f:50:72:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10b5a04a-f4e1-44ae-be5f-312a5d1a57c8
Validity
Not Before: Mar 12 13:00:53 2025 GMT
Not After : Jun 10 13:00:53 2025 GMT
Subject: CN=bfd0a7d8-063d-42fd-9e07-9c2989d507bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:6f:07:af:af:87:c4:85:8c:8d:cb:94:8c:fd:
4b:61:35:e6:33:d8:2e:6e:e5:1e:18:34:fb:9b:c4:
86:a9:6a:bb:2b:1c:36:eb:f6:12:be:3d:ff:0c:15:
04:21:3d:f6:cb:03:b9:29:ab:ef:c0:87:2a:c6:95:
b6:ac:cb:35:43:42:80:d7:57:ae:bb:49:c7:5b:bc:
4a:8e:a1:e2:7a:83:27:c4:88:2c:44:34:50:67:84:
c0:a0:12:7b:10:fd:67:41:ab:0d:3e:30:8d:2c:2e:
4e:70:31:76:c9:8d:2e:08:5f:25:1b:f3:0f:4b:4c:
09:70:9a:b6:35:6c:82:02:65:aa:ad:2d:64:a4:a5:
8d:a2:b0:03:cc:e5:70:22:a1:34:6b:67:90:b0:82:
5b:97:ae:d0:86:bf:3d:80:f0:2e:30:8d:ff:92:bf:
77:bc:cd:20:d3:5a:8d:e7:54:91:59:1c:a3:ee:d2:
83:b5:9b:ed:be:58:e3:7a:41:51:7b:2c:bd:5a:27:
72:ab:eb:4b:ce:9f:01:45:23:54:1e:cf:4c:43:ef:
41:46:0e:b6:03:8b:a7:06:79:de:6e:04:9a:d1:ce:
c7:cb:7b:dc:97:a2:26:6e:24:ba:b8:f0:fe:95:ef:
a3:68:f1:71:38:6e:a9:e6:ff:36:4b:1b:2d:e9:3a:
86:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:CE:21:3E:29:28:63:FB:F9:BC:A3:70:DA:DA:10:60:56:0B:27:B0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/10b5a04a-f4e1-44ae-be5f-312a5d1a57c8/c0745459-884b-33e8-a244-c9b69f9111e0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/10b5a04a-f4e1-44ae-be5f-312a5d1a57c8/10b5a04a-f4e1-44ae-be5f-312a5d1a57c8.crl
X509v3 Authority Key Identifier:
keyid:ED:4C:8D:F8:79:6F:9B:C9:5E:AC:3B:10:BA:33:AA:5A:AE:B3:C1:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/10b5a04a-f4e1-44ae-be5f-312a5d1a57c8.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:7c40::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b3:7b:df:9d:8b:cf:ce:46:80:9a:83:9d:18:3c:41:34:c3:c1:
3a:77:b5:f6:77:22:6f:e3:41:8b:a3:12:51:2b:dd:32:84:01:
27:22:c9:9b:e2:f8:75:56:91:70:61:ca:57:6f:77:af:47:de:
db:ff:f6:eb:b4:fa:3c:4f:51:ce:bf:f2:f3:61:bc:c6:ee:23:
04:e2:d2:00:0c:bc:1b:50:cb:08:56:b1:7b:24:e9:29:cd:fc:
b0:6e:21:76:00:27:36:31:6f:fe:1e:5f:a2:b9:05:63:ad:0a:
3f:f1:f5:13:2a:32:67:26:23:b2:66:92:35:f3:30:d9:ca:2a:
7b:f2:e2:de:68:54:7d:53:3b:b0:cd:c5:d5:34:24:64:31:27:
d1:13:fa:f4:66:06:29:42:9e:01:5d:f3:b9:3f:cd:af:a4:12:
00:48:19:34:5e:1d:07:54:92:a1:ca:05:c1:9c:ce:2c:03:61:
df:97:c4:73:6e:0a:40:fb:0e:d6:4f:d6:68:18:45:74:e8:a7:
ad:0e:44:fb:4d:ad:4c:7b:90:a4:2d:c8:1f:27:52:15:54:42:
a9:72:e7:5b:c0:2d:de:14:54:9e:d7:ee:82:10:dd:3b:c2:b1:
5e:53:04:72:7a:74:5c:db:38:7e:e9:25:b0:27:89:39:d4:c1:
27:2d:a9:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:44:37 2025 by rpki-client