Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a/dfbe34a0-76e2-3480-ace9-0edaa3878fb2.roa
File: dfbe34a0-76e2-3480-ace9-0edaa3878fb2.roa (raw, json)
Hash identifier: e4IJoL9RRu93abCZNk1OHpFwfMVnkFeyco5tV46PyRY=
Subject key identifier: D2:C3:C1:64:74:38:4E:DB:97:A0:71:BC:56:3E:86:A1:B1:4B:3F:5F
Certificate issuer: /CN=91e8565b-cd85-4439-818b-0c669c1e609a
Certificate serial: 010D0C9F4328584891DB320EB3AF0B2FF07B6DC0
Authority key identifier: 3A:C3:89:20:04:27:04:1A:BD:A1:42:37:C3:1D:D3:7A:76:DE:DA:F6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a/dfbe34a0-76e2-3480-ace9-0edaa3878fb2.roa
Signing time: Fri 17 Jan 2025 02:00:40 +0000
ROA not before: Fri 17 Jan 2025 02:00:40 +0000
ROA not after: Thu 17 Apr 2025 01:00:40 +0000
asID: 400745
IP address blocks: 2607:bac0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:91:db:32:0e:b3:af:0b:2f:f0:7b:6d:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91e8565b-cd85-4439-818b-0c669c1e609a
Validity
Not Before: Jan 17 02:00:40 2025 GMT
Not After : Apr 17 01:00:40 2025 GMT
Subject: CN=88fe27b3-40b6-4851-8033-4ec2f0bbad53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:26:c5:85:d9:89:1d:8b:0f:f4:ba:d2:bd:d7:
fa:82:98:1e:6b:17:7c:b5:22:78:cf:65:35:ad:99:
d5:a3:11:0e:86:3b:5f:71:ae:9a:8d:61:3d:e7:a5:
2e:fe:f5:2f:04:c3:9e:aa:10:19:10:64:a3:d9:b0:
29:de:02:84:bb:bb:d8:3f:d3:86:fb:87:aa:9e:32:
69:37:f3:87:3f:7e:89:45:b7:b1:02:c5:a9:59:65:
15:74:e0:cc:c1:78:42:08:c8:fc:97:32:0f:af:3b:
c2:59:4b:e5:1a:bf:c3:cf:c6:c4:f8:6f:b0:fd:d1:
4f:01:6d:65:00:91:b8:a7:bf:36:6c:50:44:84:2d:
da:c9:ab:ae:c4:0a:88:b2:77:65:aa:c1:45:6a:76:
f4:8c:f9:a1:7f:6e:6b:be:14:36:bc:38:13:6d:11:
b7:01:bd:67:81:84:02:4b:3d:01:bd:80:9d:2c:75:
4d:2f:79:fd:59:46:54:86:24:d2:a3:50:ea:ba:55:
5d:96:95:19:93:05:6f:08:f9:96:77:01:80:fb:49:
fa:69:26:a9:dc:37:be:01:80:5c:c6:85:58:8d:1f:
22:33:a7:c8:02:74:ae:c8:ca:80:b7:51:b5:66:5d:
80:97:23:dc:12:c7:c1:87:99:9e:c9:e4:92:31:40:
14:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:C3:C1:64:74:38:4E:DB:97:A0:71:BC:56:3E:86:A1:B1:4B:3F:5F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a/dfbe34a0-76e2-3480-ace9-0edaa3878fb2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a/91e8565b-cd85-4439-818b-0c669c1e609a.crl
X509v3 Authority Key Identifier:
keyid:3A:C3:89:20:04:27:04:1A:BD:A1:42:37:C3:1D:D3:7A:76:DE:DA:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:bac0::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
45:dc:94:65:7b:a9:37:95:53:d2:2a:39:b4:47:d8:6c:11:2c:
d6:75:e5:ef:fe:b2:92:61:8b:d4:ef:83:97:a3:0a:be:d7:bf:
af:72:b0:f2:40:88:7d:8a:d8:05:b4:b7:03:70:5e:f1:aa:46:
45:0e:f4:72:2c:e3:0b:5a:50:2c:4c:9c:8f:5b:05:85:bd:bd:
f0:3d:4e:dd:64:e7:83:9b:5c:47:b3:9c:16:9f:63:d6:f6:b3:
1b:ee:fe:a8:5f:07:97:df:8a:29:d0:89:0d:73:0e:72:fb:67:
97:19:02:db:17:f9:d9:70:0e:c0:fb:ed:dd:f7:32:e6:56:4c:
1a:03:41:75:0e:d2:be:be:11:d6:22:22:5f:31:03:e6:35:e0:
18:06:b0:00:58:05:42:b0:8e:fa:5e:4f:71:eb:ff:66:1b:99:
24:25:31:a3:ef:56:4b:76:77:96:3e:e3:55:08:69:90:00:db:
8a:4c:99:77:ec:32:aa:1c:ac:0e:43:9f:3c:09:53:df:44:8c:
7b:f4:f1:78:ea:c6:db:11:f6:0e:7f:b8:82:0a:14:0b:eb:f1:
9f:fd:31:71:86:e2:94:33:ec:9d:bc:4e:f1:12:95:26:31:d2:
32:b8:83:7d:d5:70:57:13:c8:90:6d:9b:dd:52:11:8e:dc:14:
67:1e:35:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:09:09 2025 by rpki-client