Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f/25dfc76c-b579-36f8-95b3-a1b22bcff809.roa
File: 25dfc76c-b579-36f8-95b3-a1b22bcff809.roa (raw, json)
Hash identifier: RviBkkVS+ZQgySreCQnNONj56Wp+4Mgmvd3nXzQC5aU=
Subject key identifier: BD:79:F6:E1:15:31:20:D1:E2:7A:67:61:2E:B8:F7:27:EE:B9:A4:26
Certificate issuer: /CN=2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f
Certificate serial: 010D0C9F43285849393E78961DA7E71E5CDCC840
Authority key identifier: E7:C3:4D:92:13:BD:90:DE:BE:98:53:B6:75:61:97:86:5B:27:46:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f/25dfc76c-b579-36f8-95b3-a1b22bcff809.roa
Signing time: Tue 18 Mar 2025 01:00:38 +0000
ROA not before: Tue 18 Mar 2025 01:00:38 +0000
ROA not after: Mon 16 Jun 2025 01:00:38 +0000
asID: 0
IP address blocks: 2001:504:100::/48 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:39:3e:78:96:1d:a7:e7:1e:5c:dc:c8:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f
Validity
Not Before: Mar 18 01:00:38 2025 GMT
Not After : Jun 16 01:00:38 2025 GMT
Subject: CN=276ed66e-7967-43af-a753-1f178966ce1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:2b:7d:08:07:65:35:3d:25:a6:f5:ee:61:62:
96:64:7e:71:47:6d:2c:37:bf:0d:2d:db:50:c3:e2:
85:25:af:41:c7:b0:de:87:f8:23:fa:d8:a5:57:41:
cd:00:af:4b:f8:12:7f:de:44:b5:4a:de:4f:83:95:
30:7e:c7:65:59:48:7a:c6:40:bd:1b:3a:51:38:6b:
73:42:f8:06:06:7d:06:2e:dd:43:d7:b3:f4:0e:32:
4c:0f:9f:f4:a5:c3:ad:6d:52:c4:c6:f2:37:56:f2:
37:d1:4d:06:97:54:a6:ba:99:08:ab:fc:8e:24:9f:
1f:b4:ca:30:b5:5d:b1:ef:83:04:d4:18:9a:96:c0:
0b:70:ab:2f:a7:fc:8b:b1:a3:fe:ab:12:d4:59:6b:
57:a6:2b:f6:c5:c5:3b:29:b4:a0:31:65:4a:c9:9a:
10:95:4f:a4:80:d5:d3:05:9f:d6:8d:1b:b5:3b:56:
25:fe:c1:f4:bf:99:b7:78:ae:14:41:2c:0d:f0:e9:
2b:62:6f:19:9e:a0:c5:38:f7:d8:57:ad:ab:b7:d4:
1f:28:10:fd:4a:ca:b8:ca:7c:d9:78:03:77:09:0b:
f0:4d:28:bd:c6:59:29:62:05:6b:72:aa:d8:92:af:
c9:dd:10:f5:b1:fd:cd:90:d9:b1:3f:a5:c6:2d:eb:
12:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:79:F6:E1:15:31:20:D1:E2:7A:67:61:2E:B8:F7:27:EE:B9:A4:26
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f/25dfc76c-b579-36f8-95b3-a1b22bcff809.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f.crl
X509v3 Authority Key Identifier:
keyid:E7:C3:4D:92:13:BD:90:DE:BE:98:53:B6:75:61:97:86:5B:27:46:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:504:100::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7c:33:59:b6:79:59:cf:46:e6:a4:bf:43:08:fe:d1:dc:a5:50:
5c:7d:91:2d:1e:59:76:a1:02:db:41:61:7e:7e:63:cc:33:20:
60:1b:46:36:e1:42:f7:89:fb:ed:b2:62:01:fd:dc:5a:24:81:
5e:8a:8f:d7:48:2b:2c:7e:db:61:59:47:55:ae:7f:c6:1d:3f:
ac:48:ce:29:f8:23:45:9a:30:b2:81:18:f3:06:96:0a:ad:9e:
bc:8b:c0:75:95:5c:08:03:44:4d:d8:27:b0:22:b7:e4:73:d1:
32:0a:45:a2:d2:5e:d3:c1:e0:a6:f9:1d:0c:d9:7d:5b:82:b0:
86:92:e4:d6:e8:e7:61:ca:5f:d9:b3:37:4f:95:9a:9c:ef:cb:
6c:cc:17:d8:33:7d:59:33:91:65:79:ed:f2:7d:02:5c:ad:f4:
bf:a7:53:4e:58:3f:9a:6a:bb:89:ab:57:d7:9f:2b:a5:b8:88:
e6:51:7c:67:17:af:a8:53:08:7c:65:61:15:9a:f7:3c:76:a6:
1d:c2:5d:33:8a:5e:4e:c7:d8:fc:85:f9:4b:34:4b:80:7f:91:
70:93:60:89:8b:fc:25:f1:f7:4e:cd:d9:07:6f:29:77:e2:57:
c8:87:47:c1:25:db:71:0c:77:7e:e7:7c:b7:48:3e:6c:40:13:
9f:00:84:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:51:09 2025 by rpki-client