Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0e7207dc-82a9-38cc-b3f8-463397db34e2.roa
File: 0e7207dc-82a9-38cc-b3f8-463397db34e2.roa (raw, json)
Hash identifier: n8KlZCU7yxJqqroP2dgi9lok0beFHGnvlJ/2lWeIL2M=
Subject key identifier: A3:A6:6E:51:9B:F3:41:CF:E5:BC:7E:0E:3A:8E:EC:94:EE:B7:14:52
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285848D2112BBABE69CAFA2D9DA2C0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0e7207dc-82a9-38cc-b3f8-463397db34e2.roa
Signing time: Sun 09 Feb 2025 02:00:39 +0000
ROA not before: Sun 09 Feb 2025 02:00:39 +0000
ROA not after: Sat 10 May 2025 01:00:39 +0000
asID: 7029
IP address blocks: 2607:4f80::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d2:11:2b:ba:be:69:ca:fa:2d:9d:a2:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Feb 9 02:00:39 2025 GMT
Not After : May 10 01:00:39 2025 GMT
Subject: CN=64ad70b2-211a-4ddd-8bfe-fcf6baa640ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:7e:49:1e:c3:36:55:6c:6d:83:0d:65:2d:7d:
91:53:13:1c:1f:2d:96:fb:be:02:8c:64:e3:aa:87:
9c:fd:dd:0e:57:c2:72:e8:81:6b:ba:66:8b:3e:59:
57:b3:f8:d9:c0:b4:7a:cb:23:7d:df:3d:13:9b:5e:
36:36:01:05:72:b9:eb:24:d1:6a:88:e5:44:3e:65:
e1:a2:76:65:af:51:63:09:3e:d3:8f:dc:9b:56:b1:
66:96:0d:2c:98:cb:38:a6:f5:52:5e:56:ed:21:74:
28:da:e0:04:14:a0:29:54:ea:9e:b9:51:b2:7e:e4:
f4:83:50:9a:c4:b2:79:4e:ef:c8:e6:7b:46:77:00:
e1:ee:6b:a5:b5:ea:1a:15:5b:d3:af:ef:5b:ae:a8:
f2:0e:f8:5d:87:bd:fd:11:d8:87:3e:3a:63:76:54:
f9:6a:13:fb:03:fd:40:95:b7:05:b6:a1:22:e9:12:
a6:02:3b:5b:93:87:78:b6:cf:90:5e:60:af:df:03:
77:0b:ec:c8:76:2c:6f:00:95:b0:cf:c3:13:de:3b:
93:d5:15:a6:17:15:26:97:f9:5e:c2:fa:58:cb:f8:
83:e2:21:f7:e3:72:9a:e7:ba:a6:38:8b:e3:e8:98:
9c:d1:30:93:9d:b7:59:39:9a:89:3b:21:dd:e2:99:
8d:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:A6:6E:51:9B:F3:41:CF:E5:BC:7E:0E:3A:8E:EC:94:EE:B7:14:52
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0e7207dc-82a9-38cc-b3f8-463397db34e2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:4f80::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
19:c2:c0:22:6e:9e:21:78:ed:68:c5:db:ad:77:a1:c6:d2:57:
78:59:ac:b5:33:0f:54:86:e1:c6:2b:ec:ad:9b:11:9a:58:4e:
b2:34:b6:ee:e4:68:86:f4:68:52:23:31:02:11:a0:64:1a:23:
92:ff:49:d1:db:bb:bd:00:2f:4d:f6:e4:ae:b5:3f:21:8c:a8:
4a:a7:d1:40:04:a1:8b:c4:b7:39:c2:3b:af:54:99:35:6e:88:
c3:ee:56:aa:d0:22:73:88:32:d7:94:46:59:37:66:76:4f:57:
d6:74:db:42:a4:92:21:04:4c:c5:0f:06:5a:6b:ce:e1:ec:ab:
ac:cd:4d:57:be:08:ed:52:4a:b5:1c:29:6a:d8:ee:7a:27:9c:
da:ea:70:66:c1:11:4c:c1:f4:ef:e5:95:03:72:8b:7c:17:f8:
65:cf:1c:93:3d:ec:7b:72:e9:dd:1e:f6:56:22:de:b2:da:3d:
d9:90:d8:a7:f1:99:21:3e:11:09:48:c6:45:c6:32:21:e4:14:
98:f6:aa:da:11:2f:a7:27:47:5d:63:6b:e7:18:1f:43:65:f0:
3b:78:03:f3:f2:c2:90:20:19:c7:8a:64:81:8d:96:a9:63:f8:
7e:65:e8:21:01:72:ae:5a:b5:71:03:f6:4f:0c:72:8c:b4:1a:
ec:ff:81:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:23:39 2025 by rpki-client