Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/535f2120-15e6-3cda-998e-66dc0177d5a5.roa
File: 535f2120-15e6-3cda-998e-66dc0177d5a5.roa (raw, json)
Hash identifier: dq1wZWv5z3Az6muEs8IS+zz0t2KT7u95CPc2304ooxE=
Subject key identifier: 91:F9:21:14:DB:53:EB:69:A2:94:3C:5F:E3:47:71:C1:63:37:64:25
Certificate issuer: /CN=458edb4b-8474-44dc-8841-30a6c66f33d7
Certificate serial: 010D0C9F43285849350EAB653C74B4E914988C00
Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/535f2120-15e6-3cda-998e-66dc0177d5a5.roa
Signing time: Sun 16 Mar 2025 13:00:52 +0000
ROA not before: Sun 16 Mar 2025 13:00:52 +0000
ROA not after: Sat 14 Jun 2025 13:00:52 +0000
asID: 14618
IP address blocks: 2606:7bc0:1081::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:35:0e:ab:65:3c:74:b4:e9:14:98:8c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7
Validity
Not Before: Mar 16 13:00:52 2025 GMT
Not After : Jun 14 13:00:52 2025 GMT
Subject: CN=e414c198-360a-4cd5-9093-c6f9360cd32a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ee:bd:ce:ca:98:b4:84:c7:a9:0f:4f:35:1c:
42:c1:ae:fc:51:1b:9f:05:0e:a2:53:09:5e:b2:c0:
fa:dc:ab:cf:8b:3b:0b:d9:b0:4e:ff:62:13:dd:3c:
e5:48:16:cd:3e:85:e4:d6:2f:f9:32:d9:6b:4d:0a:
e6:dd:99:84:dc:4c:7c:ab:d2:2e:80:bb:28:d1:36:
14:95:ca:2f:37:b6:15:35:4a:0f:b7:1d:10:48:8f:
90:81:78:41:3d:00:75:fb:23:d8:02:ae:e7:5b:dd:
74:52:6f:7a:ec:4f:17:33:4e:3f:28:c8:74:3e:0c:
b6:14:8a:6b:a2:d9:d2:f5:f9:8a:52:3d:e7:3f:16:
df:2a:4b:19:ee:7f:d5:98:1d:9f:69:83:58:aa:2a:
7d:9c:7b:e4:c7:f8:c4:cf:ad:b3:f1:95:a9:e0:d7:
0d:db:62:93:fd:63:9d:72:d4:2d:59:d6:cd:f0:97:
4e:5f:20:1d:4a:2c:83:96:0c:ef:bf:0e:75:76:56:
70:92:60:f4:bd:6a:6f:03:da:f5:40:c9:66:c2:0f:
39:88:ce:64:13:eb:e2:5e:9b:99:01:fd:d3:55:3b:
c0:9d:c9:58:ce:39:f1:f0:aa:0c:5b:05:2c:5b:52:
e8:70:dc:25:05:1f:c4:5d:0a:28:75:d9:c4:44:d5:
84:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:F9:21:14:DB:53:EB:69:A2:94:3C:5F:E3:47:71:C1:63:37:64:25
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/535f2120-15e6-3cda-998e-66dc0177d5a5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl
X509v3 Authority Key Identifier:
keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
sbgp-ipAddrBlock: critical
IPv6:
2606:7bc0:1081::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
71:61:df:a1:02:33:10:15:ad:94:fd:89:55:53:3b:18:ba:15:
db:ae:5d:35:08:d7:43:6d:3f:33:fb:14:d3:9e:31:00:7d:a2:
79:de:79:70:37:52:e4:07:09:ea:11:03:09:e4:4f:c0:e4:22:
36:ea:59:39:2d:df:14:a0:02:be:de:fb:a7:2e:6f:ad:6d:f2:
92:94:5a:e6:50:20:15:1c:c5:a2:16:b0:f9:46:e8:a1:96:d9:
5e:7d:32:b6:3c:e2:88:23:45:90:69:70:97:45:e2:b8:ec:9a:
c5:0d:cb:6c:3d:16:31:ff:65:83:4e:f3:3e:d0:11:3f:b8:e7:
87:ed:91:4a:11:22:f5:14:de:8e:48:56:81:39:62:aa:b8:44:
85:d0:36:25:1a:a7:d0:68:e6:d4:6c:a2:f2:8c:05:f6:07:e2:
61:e5:d8:9b:2f:52:37:b7:2e:15:c0:0b:4b:16:9a:6e:f4:2b:
ae:2d:2d:c7:23:e6:34:a5:3e:8c:03:e3:ab:2b:00:40:bd:8e:
82:ac:58:be:8d:d2:bb:39:8c:66:ed:dc:1b:ef:c0:40:26:65:
d9:5e:fb:ea:4c:f1:6a:1f:36:fd:24:06:ec:5b:24:5a:d4:10:
c3:5c:4a:7e:48:7a:d7:c8:c2:5e:01:c3:8c:54:50:9f:c1:61:
aa:6d:e1:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:45:28 2025 by rpki-client