Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/ca319931-3e9e-36ca-88d5-33100a73ab4f.roa
File: ca319931-3e9e-36ca-88d5-33100a73ab4f.roa (raw, json)
Hash identifier: bOrrGDfZqj2ZvBNzq5kyXAKpMAePD14Nmofo3a9xDc8=
Subject key identifier: 34:DB:11:B7:F9:67:86:76:82:45:E4:15:DD:DD:9E:0D:02:26:57:A9
Certificate issuer: /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Certificate serial: 010D0C9F432858494E2EBAF2DAF26F90C432BD00
Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/ca319931-3e9e-36ca-88d5-33100a73ab4f.roa
Signing time: Tue 25 Mar 2025 13:00:51 +0000
ROA not before: Tue 25 Mar 2025 13:00:51 +0000
ROA not after: Mon 23 Jun 2025 13:00:51 +0000
asID: 11055
IP address blocks: 2605:4a80:ef40::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:4e:2e:ba:f2:da:f2:6f:90:c4:32:bd:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Validity
Not Before: Mar 25 13:00:51 2025 GMT
Not After : Jun 23 13:00:51 2025 GMT
Subject: CN=586b54f9-6d84-42d7-9f64-f435b055fe09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:cb:35:4d:e3:00:bc:ea:45:f9:bd:47:11:05:
2d:9f:10:f9:81:f9:f7:12:89:7d:01:35:4d:d1:c9:
58:94:f1:4d:42:f5:fe:f1:00:29:91:03:da:7d:f9:
1f:a0:75:af:bf:14:bc:ec:fa:a6:f7:43:fc:85:47:
9c:f2:4d:df:83:a4:1e:05:00:3d:61:2c:dc:aa:7a:
b6:52:e1:3c:48:c4:c7:ee:5a:86:69:7a:f7:b9:cb:
af:c7:79:b7:e7:1b:25:e4:ba:a2:80:07:b0:8f:e1:
0d:c2:6e:77:0e:4c:aa:7f:10:c5:64:71:29:d1:be:
8b:21:1b:c9:82:27:ea:b3:86:1c:b8:76:49:ae:9c:
e6:cd:1b:ec:df:e4:62:24:fd:79:c1:61:9f:85:64:
c7:3a:df:ee:31:d9:ef:16:9f:84:b4:08:1b:ca:bc:
13:e4:b8:d1:99:58:1b:96:38:5c:89:38:4d:f5:3c:
f0:98:b6:a5:ee:f8:58:c3:92:b6:52:75:53:0f:d3:
95:df:c1:87:5e:6f:19:21:25:c7:a0:ee:c9:80:b6:
de:86:2b:f0:e6:64:2f:26:3b:ca:0a:9b:bf:29:0c:
d9:b7:61:9d:2c:7e:2f:cb:87:1d:c6:76:3c:59:96:
2e:24:d1:22:ec:80:b2:9b:c0:ec:92:46:ae:15:70:
9f:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:DB:11:B7:F9:67:86:76:82:45:E4:15:DD:DD:9E:0D:02:26:57:A9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/ca319931-3e9e-36ca-88d5-33100a73ab4f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl
X509v3 Authority Key Identifier:
keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
sbgp-ipAddrBlock: critical
IPv6:
2605:4a80:ef40::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4c:c6:6f:23:fa:31:5a:55:63:97:45:d2:db:80:49:df:14:12:
92:37:9d:5b:41:53:29:85:15:90:7e:b7:2d:bb:86:da:ab:4f:
d6:96:db:b6:4a:c0:17:2a:35:34:96:c7:df:3f:d1:7c:20:f8:
63:4c:fe:0b:14:2b:6a:30:be:9f:05:82:29:1b:df:30:1b:ea:
7d:9f:32:54:6d:a2:11:4c:83:f4:92:8c:7b:7a:70:4f:7b:ad:
4b:60:99:78:f6:c6:12:d7:19:16:44:e1:00:88:5e:c8:c6:5a:
dc:45:4a:cf:c1:13:d6:ef:a0:e4:ec:77:3a:68:44:07:1a:13:
b0:6b:79:c6:e9:6b:20:83:02:63:90:8c:8f:f6:3e:65:ed:f7:
87:e8:8d:75:e5:10:d7:1f:34:18:8c:33:fd:0c:d0:34:31:12:
62:41:77:eb:92:1d:24:24:42:8b:63:3e:56:eb:43:8e:32:93:
85:fc:d2:4b:01:06:a7:c7:a9:95:a0:9b:fd:fa:28:aa:ad:a9:
ca:7f:a6:4d:0a:eb:10:14:48:31:56:91:1d:0e:15:3a:6b:c0:
74:f2:65:4a:40:fb:db:62:f4:a8:1f:f2:aa:af:7d:b3:80:c9:
d8:63:0e:fa:eb:cb:a7:e2:e0:85:c6:9f:d4:53:c4:64:a6:a9:
e5:1e:62:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:32:54 2025 by rpki-client