Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5/92aee7d1-3371-3968-b369-67a5425209e6.roa
File: 92aee7d1-3371-3968-b369-67a5425209e6.roa (raw, json)
Hash identifier: jkecIGJt2feXz14axYfLQnlhUJ3OmgtuoDJ/0qqkplI=
Subject key identifier: 91:B5:40:74:9C:61:CC:85:44:FB:86:64:20:C9:08:29:BC:73:DD:A4
Certificate issuer: /CN=bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5
Certificate serial: 010D0C9F43285848D6410AF060A3D092F4B04A00
Authority key identifier: 95:AD:7A:BE:8F:70:2F:0D:84:54:C8:09:29:F5:57:2B:71:9D:0A:57
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5/92aee7d1-3371-3968-b369-67a5425209e6.roa
Signing time: Mon 10 Feb 2025 14:00:52 +0000
ROA not before: Mon 10 Feb 2025 14:00:52 +0000
ROA not after: Sun 11 May 2025 13:00:52 +0000
asID: 1206
IP address blocks: 2001:5e8:ffff:4::/64 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d6:41:0a:f0:60:a3:d0:92:f4:b0:4a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5
Validity
Not Before: Feb 10 14:00:52 2025 GMT
Not After : May 11 13:00:52 2025 GMT
Subject: CN=5c9f279f-ef3e-458e-a1fb-1075ee8ba792
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:d4:90:3a:1b:c0:ae:fb:95:31:c1:1d:04:6c:
6b:a5:2e:db:56:ca:f5:17:ba:af:94:35:1c:fe:c0:
2e:ae:32:31:d1:c5:2e:0d:71:eb:62:27:79:23:66:
e5:23:62:a9:18:4c:87:99:f5:09:2e:0d:3f:7d:f2:
4e:dd:07:3c:60:be:28:4f:b4:a5:f5:d0:8a:50:25:
da:c1:0f:55:7d:70:a8:6b:b1:79:06:5c:84:a2:41:
f3:41:96:15:f1:2f:da:48:e1:eb:2b:da:1d:9e:cf:
01:74:b3:f1:06:7e:b7:1c:e8:07:78:3c:6c:8c:c6:
2c:f6:68:68:c6:20:bf:5a:52:ad:2a:6f:af:01:8b:
cd:e1:df:9e:90:7f:c8:55:10:45:d5:46:33:ee:0b:
8a:a9:be:98:21:c8:d5:94:5d:f0:35:94:10:6e:59:
bc:7f:a1:54:01:3b:4b:ee:ff:c7:02:3c:04:9d:aa:
7e:0d:76:13:1f:88:ca:73:e9:68:dc:88:d0:d1:1d:
c7:1e:25:2f:92:08:c0:7a:35:9b:2a:b2:e5:1f:21:
81:3e:e0:18:3f:f0:31:c7:79:4b:cf:95:4f:26:40:
f2:b0:3f:85:60:00:7b:cd:18:61:b0:24:f1:34:13:
55:86:72:b1:be:c9:2b:c5:47:75:58:01:b4:0b:c9:
61:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:B5:40:74:9C:61:CC:85:44:FB:86:64:20:C9:08:29:BC:73:DD:A4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5/92aee7d1-3371-3968-b369-67a5425209e6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5.crl
X509v3 Authority Key Identifier:
keyid:95:AD:7A:BE:8F:70:2F:0D:84:54:C8:09:29:F5:57:2B:71:9D:0A:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:5e8:ffff:4::/64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2b:c3:68:cf:ed:99:cb:64:42:81:bc:2b:aa:e7:e9:1d:76:b9:
40:4a:3b:bc:db:c8:aa:9c:25:25:cc:7c:3c:c0:dd:61:06:7b:
ac:36:ad:c0:89:33:1d:9d:e1:fc:fd:68:ef:fe:4f:a2:27:17:
30:0b:e4:b1:41:ca:df:66:8a:f2:52:32:75:7b:28:a4:81:5a:
f7:ae:70:ff:51:aa:e0:22:7c:fe:98:d9:18:e8:2c:14:85:9b:
52:92:70:b5:9f:c5:d8:fd:ba:e7:9b:58:92:22:19:88:5a:fb:
10:23:fe:dc:9b:15:b9:1b:ff:de:39:74:c4:c1:af:82:94:8e:
78:0b:4f:d1:29:69:47:03:0e:a6:17:b7:84:56:4b:0e:a5:2e:
d2:86:1b:b1:d2:06:95:c0:99:ba:78:3d:7f:77:9f:5a:38:d9:
5b:de:2b:a8:53:39:b7:46:bc:a5:f5:da:98:05:9c:2e:4d:05:
ee:35:27:db:e6:6c:d6:c4:c7:4a:fa:f5:d1:65:af:fa:56:01:
4c:80:40:c0:37:df:9e:63:0a:d7:72:18:0a:95:0f:ab:4b:84:
e4:e9:cb:80:85:4a:e3:45:f9:bd:8a:95:9a:f4:cc:97:73:18:
2c:1d:58:d5:11:8d:2f:90:20:76:c1:48:27:44:85:d8:99:a5:
99:f2:a6:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:28:37 2025 by rpki-client