Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324/36bdb9f6-a9aa-3c34-b7fc-b79ba39abbb5.roa
File: 36bdb9f6-a9aa-3c34-b7fc-b79ba39abbb5.roa (raw, json)
Hash identifier: rxSY4kmaxlOnnJusGcEUP9BxJwVLW8osKR3d9ZdlOuo=
Subject key identifier: 91:64:5B:D2:F5:F4:3C:57:D9:98:44:6F:FD:95:04:B1:BC:37:B1:1C
Certificate issuer: /CN=8322c61d-99cf-48fc-b867-b2c2cce4d324
Certificate serial: 010D0C9F4328584913AC35B974FBF9EF2335D600
Authority key identifier: 23:EC:CD:25:07:2E:B6:D8:45:A9:F0:04:86:BA:91:6D:90:8F:B8:FA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324/36bdb9f6-a9aa-3c34-b7fc-b79ba39abbb5.roa
Signing time: Tue 04 Mar 2025 14:00:52 +0000
ROA not before: Tue 04 Mar 2025 14:00:52 +0000
ROA not after: Mon 02 Jun 2025 13:00:52 +0000
asID: 8070
IP address blocks: 2606:e540:c02::/48 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:13:ac:35:b9:74:fb:f9:ef:23:35:d6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8322c61d-99cf-48fc-b867-b2c2cce4d324
Validity
Not Before: Mar 4 14:00:52 2025 GMT
Not After : Jun 2 13:00:52 2025 GMT
Subject: CN=e16f1f2e-f553-45ab-92e4-d6c9af66eb48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:07:f5:59:48:c8:15:83:5a:b8:64:9a:31:78:
34:b0:a1:76:12:34:0e:d1:d3:5a:fd:67:67:99:c3:
ec:2a:22:c4:fc:56:98:bd:15:38:83:7a:3a:cd:a7:
79:f9:06:49:14:de:00:7d:a6:71:8c:b0:47:20:bd:
91:4a:92:0e:bc:fc:92:85:77:b1:8f:47:20:9f:e0:
a8:fa:39:06:ae:a4:c1:e0:c7:60:28:19:5f:a0:a3:
02:8b:7f:09:05:6e:37:81:3f:b5:c0:09:f5:59:7d:
f7:97:62:15:e9:b3:84:f5:f7:2e:0e:ce:3c:4a:b1:
72:84:7c:82:0f:07:2b:ed:e9:47:ea:23:8a:99:f7:
b9:51:60:54:1e:b9:59:c3:26:ed:f3:5f:c8:2d:fa:
03:fd:5e:35:7c:8d:3e:05:c0:96:bd:b1:d6:06:91:
07:7a:69:05:87:56:0b:d8:77:74:9c:be:fe:9f:af:
59:ac:3c:d4:e9:0f:e9:67:51:cc:22:0c:2a:88:1b:
a1:69:35:38:13:eb:80:1c:f3:bc:24:67:a1:15:20:
1a:44:f4:d0:13:35:56:f0:4d:1b:1c:9b:f0:c5:9e:
38:91:40:d1:1c:27:5c:70:08:cd:d1:b7:0d:75:bd:
34:d9:2c:a9:72:d9:d7:4f:4c:22:ac:30:ba:7b:26:
38:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:64:5B:D2:F5:F4:3C:57:D9:98:44:6F:FD:95:04:B1:BC:37:B1:1C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324/36bdb9f6-a9aa-3c34-b7fc-b79ba39abbb5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324/8322c61d-99cf-48fc-b867-b2c2cce4d324.crl
X509v3 Authority Key Identifier:
keyid:23:EC:CD:25:07:2E:B6:D8:45:A9:F0:04:86:BA:91:6D:90:8F:B8:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324.cer
sbgp-ipAddrBlock: critical
IPv6:
2606:e540:c02::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
66:b4:c1:be:c7:97:8d:43:ac:58:ca:24:d2:7c:80:09:1f:b4:
57:46:26:7f:0c:0c:13:6e:66:2c:10:1f:c8:6b:c3:06:90:40:
f3:94:90:04:fa:d3:25:78:e9:b9:a6:61:1a:b9:04:6c:72:c3:
93:c1:03:59:a6:bf:7d:df:33:a2:2c:dc:a3:0c:c5:02:6c:49:
2f:f0:1c:da:49:b6:63:40:f1:36:04:4f:2f:00:03:f0:d6:66:
1f:23:02:89:33:0f:1d:ab:80:70:7d:0e:b9:1e:cd:0f:00:d8:
a2:77:e0:a5:90:36:44:84:48:2e:41:df:7b:f2:a5:15:e7:c1:
87:6f:1d:ae:41:07:9c:43:a6:46:2b:28:59:bf:17:ea:0b:f2:
dd:00:cd:a3:2b:12:7a:a7:5b:ea:bc:79:8c:ce:61:d8:b8:5b:
d3:f6:fb:02:3e:83:15:36:74:33:44:43:2c:33:cb:e0:c7:a3:
1d:bb:ef:7e:a2:3c:16:e6:06:12:98:78:57:62:a4:2c:46:04:
09:5a:6f:e1:27:57:f3:03:d6:53:9d:1a:48:22:48:e9:f3:be:
b4:6f:6e:b1:b6:5d:b2:05:d6:de:fc:b9:33:f9:5f:30:ab:bb:
a0:c2:43:8a:1c:c6:1a:bf:a5:bd:52:3d:13:9f:f1:a5:8a:1c:
04:89:35:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:18:42 2025 by rpki-client