Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/2a070509-9ba8-3201-ae15-b6c4334f1efb.roa
File: 2a070509-9ba8-3201-ae15-b6c4334f1efb.roa (raw, json)
Hash identifier: Y3TcwrYLXNIrPLKiYVAcDevxqEohH2Jv+pq2SQNtqVo=
Subject key identifier: 18:73:D3:7A:DF:15:13:96:9C:BF:C3:31:CB:E7:5C:B2:FF:D8:2D:D4
Certificate issuer: /CN=b84ab52d-915e-4d8a-b37b-496ea49c6798
Certificate serial: 010D0C9F43285848E2D1084B84554DFDC2091600
Authority key identifier: DD:B5:32:EF:53:10:BB:59:DD:81:2B:55:E8:DB:F7:E6:10:03:24:7C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/2a070509-9ba8-3201-ae15-b6c4334f1efb.roa
Signing time: Sat 15 Feb 2025 02:00:39 +0000
ROA not before: Sat 15 Feb 2025 02:00:39 +0000
ROA not after: Fri 16 May 2025 01:00:39 +0000
asID: 1403
IP address blocks: 2606:6d00::/32 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e2:d1:08:4b:84:55:4d:fd:c2:09:16:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b84ab52d-915e-4d8a-b37b-496ea49c6798
Validity
Not Before: Feb 15 02:00:39 2025 GMT
Not After : May 16 01:00:39 2025 GMT
Subject: CN=47b9191a-32ab-4051-9fbe-ff4be9d9aba8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:db:40:19:f9:22:be:74:10:0f:7c:03:c2:5b:
d7:e9:7b:cc:52:8f:de:54:40:44:a1:6f:d8:98:3d:
e9:69:77:85:51:63:d5:0e:16:a8:52:07:74:2b:53:
4f:03:a7:74:2e:77:a1:38:2d:c5:ce:fa:35:69:38:
90:48:9f:33:29:80:ee:c1:5a:ff:6c:df:9e:a3:16:
99:de:9f:29:66:c8:55:a0:75:c0:2f:20:db:ac:a9:
7f:ee:d9:c1:41:e9:bc:9a:44:a0:06:83:05:c1:cb:
ce:a6:cb:a5:57:4a:df:4a:b4:c0:66:6e:33:32:1f:
07:9a:88:1a:d4:d3:c9:b8:82:f8:a4:4a:e5:7c:82:
0f:e7:7c:a9:43:4b:2f:97:b4:7b:98:02:bd:fb:d3:
08:80:66:5f:ac:1f:a7:f4:10:74:bc:9f:2e:d9:96:
84:56:91:5d:d0:41:70:c3:26:b1:4b:d1:56:cf:ed:
15:bd:c9:3c:07:20:af:ce:43:cf:97:f3:52:ea:39:
5c:7c:6f:3c:b0:84:34:e9:38:79:9f:ce:38:2c:ed:
a6:96:0f:fc:b1:33:7e:e3:dd:16:88:c4:c0:a6:9b:
b0:bb:fe:6e:90:f6:55:f0:fe:b8:cb:f5:06:94:14:
0b:60:17:5f:e6:ec:5f:44:56:e2:3a:cf:33:60:81:
86:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:73:D3:7A:DF:15:13:96:9C:BF:C3:31:CB:E7:5C:B2:FF:D8:2D:D4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/2a070509-9ba8-3201-ae15-b6c4334f1efb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/b84ab52d-915e-4d8a-b37b-496ea49c6798.crl
X509v3 Authority Key Identifier:
keyid:DD:B5:32:EF:53:10:BB:59:DD:81:2B:55:E8:DB:F7:E6:10:03:24:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798.cer
sbgp-ipAddrBlock: critical
IPv6:
2606:6d00::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
58:e7:45:fb:d1:43:75:aa:49:90:e4:01:ec:f4:25:75:e9:8a:
29:c1:38:a8:ec:8a:06:9a:7e:7d:9f:d4:18:62:ba:f2:fb:6e:
4a:89:5a:fa:c2:8d:4e:92:f5:ca:69:3f:54:3f:a7:3b:9c:81:
c4:f2:59:45:01:f7:e8:ec:21:b0:9e:77:e9:10:9b:dc:51:05:
f0:69:c3:95:e9:5f:8c:cc:30:7b:9d:e1:d6:67:d7:8b:8c:22:
73:c3:65:9d:3a:6b:a1:7c:87:80:b5:b4:3a:35:2b:db:64:25:
7f:cf:75:37:53:fc:ec:47:52:2d:af:56:37:0e:1a:52:5f:6d:
63:06:e6:50:e2:4c:ec:35:9b:f5:08:8a:e4:ff:61:85:ee:7c:
17:22:8e:a8:eb:af:7a:d2:46:27:3a:03:ed:5e:20:e8:cf:41:
5b:38:7c:07:11:5e:a0:43:aa:5c:81:4d:19:cb:37:47:fa:7f:
81:6d:7b:38:c6:c6:fc:a4:6d:0b:83:c5:25:ee:ca:f5:a3:d5:
3e:7e:a1:0f:02:1f:d7:fc:c4:bf:6c:e2:33:40:aa:94:a5:85:
14:12:77:a7:7b:27:bd:38:51:aa:dc:8e:9b:2c:34:9d:63:ee:
b3:ef:1d:6e:6e:9e:4d:77:f4:e6:3f:24:dc:83:87:75:a6:a7:
d1:ac:bb:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:03:30 2025 by rpki-client