Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/02b7c8be-0f06-3a30-bc1b-0859ae83548a.roa
File: 02b7c8be-0f06-3a30-bc1b-0859ae83548a.roa (raw, json)
Hash identifier: cepXBDYTe0xlQ8U4xxkOZF4fWShXl0adBav2z1JQcu0=
Subject key identifier: 11:68:BF:76:87:6B:9C:16:7A:8C:98:60:EA:AB:EC:2E:10:38:B7:0B
Certificate issuer: /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
Certificate serial: 010D0C9F432858487D2E90800759F71185148D60
Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/02b7c8be-0f06-3a30-bc1b-0859ae83548a.roa
Signing time: Thu 09 Jan 2025 16:16:45 +0000
ROA not before: Thu 09 Jan 2025 16:16:45 +0000
ROA not after: Wed 09 Apr 2025 15:16:45 +0000
asID: 137409
IP address blocks: 2606:f189::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7d:2e:90:80:07:59:f7:11:85:14:8d:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
Validity
Not Before: Jan 9 16:16:45 2025 GMT
Not After : Apr 9 15:16:45 2025 GMT
Subject: CN=c9ee5376-98a2-4b35-898e-f976f54dfae7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:15:ad:18:76:1b:7f:5f:e9:ab:12:c1:8a:2c:
cd:1d:35:d6:da:7e:25:cf:09:18:2b:59:0c:2d:00:
72:48:93:3d:ad:b0:32:ef:48:af:01:73:fb:d9:92:
08:3b:09:8c:b0:cc:e5:d8:f9:e2:c9:84:cc:47:57:
fc:43:89:9f:46:4d:ee:0d:32:de:2b:12:3b:d9:e8:
6b:6f:75:92:79:ed:15:60:c5:9f:ec:1a:61:36:a6:
89:f6:03:c7:e0:28:72:55:eb:88:b7:8c:c0:5d:67:
21:33:1d:44:66:ce:23:99:d2:34:76:d8:b4:3a:67:
65:9b:d9:1a:3f:e2:1d:69:67:27:ea:a9:4c:6b:3f:
c9:45:f0:3a:ac:53:bd:ab:d8:4b:b5:5b:14:ea:fe:
ac:db:2d:89:5c:b1:7e:78:8c:ee:4b:c4:17:ad:7a:
4b:6a:c3:fe:24:13:7d:8b:d2:2d:ef:cc:ea:9b:19:
15:10:8d:11:70:46:e9:ff:b3:c8:54:a6:b7:d3:93:
0d:b1:bf:7d:c7:d5:18:b5:af:7e:64:e1:81:98:fa:
f3:52:cd:89:52:d5:85:b4:70:56:18:8a:c5:94:0b:
8f:25:13:ba:df:48:03:4c:76:67:2a:31:7c:d9:5b:
bd:6d:b4:c4:d4:4c:bb:71:71:b3:ec:ed:5c:a0:72:
dd:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:68:BF:76:87:6B:9C:16:7A:8C:98:60:EA:AB:EC:2E:10:38:B7:0B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/02b7c8be-0f06-3a30-bc1b-0859ae83548a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl
X509v3 Authority Key Identifier:
keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
sbgp-ipAddrBlock: critical
IPv6:
2606:f189::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c4:a8:19:a8:38:6d:88:57:7f:f5:a5:cc:8a:d0:6e:46:a9:49:
46:39:90:63:7c:81:5c:45:6c:e7:8f:e3:d4:1d:94:a7:0a:f5:
10:86:1b:03:c8:e0:3f:48:5b:28:e1:50:7c:af:d8:63:c8:13:
e3:2f:50:ac:72:df:47:e5:9c:48:60:8d:d8:27:1d:05:3e:fd:
46:e6:69:fe:cd:49:50:4a:72:58:be:ab:8e:b1:a8:5f:0b:78:
ec:eb:e6:0f:c4:a0:03:97:f5:cf:1b:9f:98:f1:a9:5c:f1:e0:
57:5a:00:79:7d:fe:a2:0d:22:50:3a:90:d4:17:f1:74:17:67:
c0:44:6d:95:0e:c9:fd:d4:64:e8:73:27:09:38:c6:11:e4:f1:
19:b7:03:16:e6:40:4a:bb:88:11:de:81:cd:8c:35:1d:92:de:
8c:c3:f9:54:ea:f8:c2:d9:c8:75:1b:ce:0b:61:ae:cc:d5:52:
21:d5:61:b2:09:b2:1d:cc:78:4e:97:f8:f6:9f:5c:d0:38:f3:
58:f0:45:e9:20:cc:88:67:9f:3c:de:14:97:35:d1:1a:95:0d:
27:d5:c6:a8:f0:03:ba:22:0e:ab:83:1e:91:0f:8a:f7:61:34:
32:2a:a8:96:7b:1a:a7:95:c6:a6:55:6d:84:47:36:1c:57:d0:
50:d0:4f:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:33:28 2025 by rpki-client