Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/28d8023b-5b50-38c4-a6ca-09bf964ed5b7.roa
File: 28d8023b-5b50-38c4-a6ca-09bf964ed5b7.roa (raw, json)
Hash identifier: bocMjMsfeX5FG1+wsvppYqwVsgHJ7FyoW3Is8i407LE=
Subject key identifier: 7B:1C:26:09:B2:06:A5:13:42:87:C4:FA:20:2F:38:66:1C:D8:F9:6F
Certificate issuer: /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Certificate serial: 010D0C9F4328584886B06DB8D96B15AAE039C100
Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/28d8023b-5b50-38c4-a6ca-09bf964ed5b7.roa
Signing time: Mon 13 Jan 2025 02:00:40 +0000
ROA not before: Mon 13 Jan 2025 02:00:40 +0000
ROA not after: Sun 13 Apr 2025 01:00:40 +0000
asID: 22781
IP address blocks: 2607:fb50::/36 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:86:b0:6d:b8:d9:6b:15:aa:e0:39:c1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Validity
Not Before: Jan 13 02:00:40 2025 GMT
Not After : Apr 13 01:00:40 2025 GMT
Subject: CN=7b90d877-289c-4eb3-956a-b7e69b40219b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:0f:18:b4:b6:3c:de:c7:13:1c:6b:84:75:1b:
6b:c0:e8:96:74:ac:ed:40:c6:4d:49:2c:62:7f:02:
48:b2:b2:89:07:13:80:d5:55:a6:67:99:e3:82:71:
ec:15:3b:a1:ad:8e:1e:f4:3c:00:87:f1:0f:1b:10:
c4:03:54:a9:5c:b7:8d:f7:30:ba:43:72:62:4a:9d:
ca:dd:2a:c7:46:30:54:a1:91:42:5a:be:cf:15:31:
44:9c:c6:82:cf:da:3e:07:5e:e7:b5:72:ab:92:4f:
ac:3e:cc:ab:43:f1:58:83:67:85:c3:ae:14:05:b4:
d0:99:ea:e2:cf:e5:71:2f:ff:d0:7a:36:47:65:aa:
5c:ec:72:b8:64:06:dd:d1:f1:1c:55:68:d1:94:b9:
7e:a8:43:6e:bb:e1:ed:ff:db:cd:d6:0f:e6:9b:9c:
06:c6:8f:83:c7:52:ee:7f:12:0c:50:68:e9:04:e7:
65:9b:f5:19:4b:bc:87:4c:af:7f:91:77:13:85:9c:
c4:88:a2:f7:f1:a1:46:78:27:bb:98:72:f0:7f:4b:
5e:f2:d4:5a:4e:cb:42:a3:8b:0c:a1:a4:8d:55:34:
ea:71:f5:55:a0:45:23:84:07:dc:8b:0f:67:ec:cc:
d8:6c:3e:28:ea:28:11:a6:93:9c:64:64:d9:0c:8d:
75:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:1C:26:09:B2:06:A5:13:42:87:C4:FA:20:2F:38:66:1C:D8:F9:6F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/28d8023b-5b50-38c4-a6ca-09bf964ed5b7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl
X509v3 Authority Key Identifier:
keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:fb50::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:67:93:74:bc:74:f4:20:aa:45:6f:0c:52:69:01:fb:1c:06:
22:ea:37:0a:2f:eb:cf:3b:ea:e0:0e:c8:8e:e1:0b:bf:2e:8a:
b0:7e:21:b5:bd:b6:3f:a5:3d:56:98:6c:04:32:51:fe:8c:5f:
2e:b1:b6:8b:43:32:a7:e5:2b:ba:67:55:ba:2c:1f:33:21:71:
14:59:f2:24:78:df:8f:cf:6d:27:7b:ba:68:83:0e:b2:68:d8:
1c:b2:cd:60:84:6a:1a:51:96:72:a1:68:83:44:3a:dc:54:17:
18:b0:53:1a:b6:a2:2d:b3:d3:af:8d:73:18:13:81:5e:4b:f4:
fe:1b:dc:1f:0b:75:17:be:15:e7:9e:8e:b3:40:dd:4a:d3:08:
0d:58:9c:91:53:05:25:15:51:98:bd:dd:ac:bc:45:83:fb:ab:
02:a6:00:78:58:2f:e6:be:36:43:b5:fa:b2:17:5c:fd:b3:57:
03:d5:09:a3:7f:8f:42:1e:a3:2f:1a:75:e1:4b:9f:dd:e0:9f:
cc:0c:68:6a:58:84:eb:97:12:10:2f:d3:91:a9:50:18:3c:2a:
81:b9:21:89:21:55:c9:02:f8:39:93:09:91:bb:dd:8a:4d:50:
4a:5a:e3:89:13:01:05:a9:f4:15:47:fd:ba:8f:66:5b:05:21:
d5:5f:84:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:27:54 2025 by rpki-client