Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/12797d33-d775-45fc-9d2a-a3e7bbe51152/5d993454-0791-3f69-942d-d641d50ae8c7.roa
File: 5d993454-0791-3f69-942d-d641d50ae8c7.roa (raw, json)
Hash identifier: t/P+rGf3OKUM5TiqPXqKNIgh7OD21HGbEnjOVQoM1qY=
Subject key identifier: 24:0B:31:BF:36:5E:98:E0:32:C7:75:E1:E1:A1:F8:36:1D:2A:1A:61
Certificate issuer: /CN=12797d33-d775-45fc-9d2a-a3e7bbe51152
Certificate serial: 010D0C9F432858494E2EB35EB2C241DBE30E4280
Authority key identifier: 9E:FA:EF:7E:45:43:9E:B6:9C:B0:84:8E:C2:07:C7:A4:26:5B:71:81
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/12797d33-d775-45fc-9d2a-a3e7bbe51152.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/12797d33-d775-45fc-9d2a-a3e7bbe51152/5d993454-0791-3f69-942d-d641d50ae8c7.roa
Signing time: Tue 25 Mar 2025 13:00:51 +0000
ROA not before: Tue 25 Mar 2025 13:00:51 +0000
ROA not after: Mon 23 Jun 2025 13:00:51 +0000
asID: 17
IP address blocks: 2001:18e8:800::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:4e:2e:b3:5e:b2:c2:41:db:e3:0e:42:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12797d33-d775-45fc-9d2a-a3e7bbe51152
Validity
Not Before: Mar 25 13:00:51 2025 GMT
Not After : Jun 23 13:00:51 2025 GMT
Subject: CN=83822f4c-af50-4f5d-89ce-d5726d8ec6b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b1:ee:84:ab:03:6b:8a:73:2c:41:6c:e6:08:
5d:4a:4a:ab:c2:a1:71:3f:31:80:fc:c8:9f:3c:cf:
0a:0c:59:65:88:30:5b:2e:55:e3:69:41:cc:70:65:
53:6d:4d:79:d7:ce:52:ae:a3:ee:b6:27:9c:94:ce:
7f:15:07:d4:48:a8:86:5c:ca:9a:95:78:fe:09:9d:
35:b6:ac:d0:34:22:c6:f5:41:f2:53:10:55:2d:8c:
83:bf:7d:64:b1:54:d1:f2:ba:a8:b2:83:89:0f:58:
56:e4:a2:31:1f:52:aa:7c:a4:c7:46:ef:d2:6b:10:
aa:dc:9c:a9:99:11:e7:56:94:16:45:e0:ff:93:47:
ba:31:72:c2:c2:c0:af:7d:24:18:8d:22:9d:9f:de:
5a:98:72:48:a6:f4:b1:33:2e:6c:36:e1:d9:4a:b6:
ac:7b:e2:7f:3d:58:7e:bc:02:7d:5e:71:42:9e:b7:
19:2b:ff:60:d3:35:6f:8d:06:3d:1b:64:e7:01:18:
9c:17:7c:b9:3c:bd:e1:7d:3e:fd:64:87:b1:00:79:
d7:a4:40:89:02:a4:53:ab:d2:fb:36:8d:31:2c:ba:
c2:6b:44:92:56:28:e2:10:28:0c:80:d2:49:96:80:
3c:a1:d0:f6:c6:bd:bf:54:50:9b:d5:ad:7e:30:66:
94:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:0B:31:BF:36:5E:98:E0:32:C7:75:E1:E1:A1:F8:36:1D:2A:1A:61
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/12797d33-d775-45fc-9d2a-a3e7bbe51152/5d993454-0791-3f69-942d-d641d50ae8c7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/12797d33-d775-45fc-9d2a-a3e7bbe51152/12797d33-d775-45fc-9d2a-a3e7bbe51152.crl
X509v3 Authority Key Identifier:
keyid:9E:FA:EF:7E:45:43:9E:B6:9C:B0:84:8E:C2:07:C7:A4:26:5B:71:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/12797d33-d775-45fc-9d2a-a3e7bbe51152.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:18e8:800::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
32:22:2c:ba:64:c0:42:b4:c7:64:47:82:eb:ab:64:96:dc:e0:
4e:c1:24:39:81:42:a1:1d:69:3d:7c:b6:60:c1:3f:d2:ee:d1:
d1:bd:4d:93:4e:0b:5e:ef:e3:d6:76:b7:5d:0f:3b:02:47:82:
6f:07:3d:00:63:08:b5:30:c0:00:85:48:5f:34:80:dd:46:25:
eb:b7:02:7e:f0:f0:3e:0e:dc:f4:f0:0e:a2:51:26:bc:76:31:
07:fe:32:70:e5:50:ba:4f:c5:a6:4f:d8:86:0c:a6:80:c3:c5:
8a:a2:0f:f2:15:cb:ee:15:cf:02:06:86:59:ff:e8:71:9b:14:
fb:41:d3:4b:05:ae:de:73:21:fc:8b:d3:51:9a:9e:ec:49:01:
b2:13:03:50:71:a4:fa:5b:8f:ca:d3:87:9c:fc:78:54:26:c0:
45:79:5c:ae:bb:64:51:29:07:cd:56:75:26:e4:12:e8:19:53:
fd:ae:b8:b4:4e:cf:a1:cf:28:31:c1:1b:59:f3:d2:12:1c:cc:
28:68:6f:38:70:78:b9:f1:e0:bc:ed:89:12:4e:17:27:c1:4d:
69:b5:e4:a6:e9:5f:a8:02:a2:51:09:ee:4c:c9:73:a6:ee:5a:
41:fc:51:bb:98:32:46:f5:5b:23:4e:88:58:4d:1f:98:c3:02:
6e:6c:46:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 12:36:12 2025 by rpki-client