Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/7fb48c8b-35ea-37af-b9ff-75a6a59dbf0e.roa
File: 7fb48c8b-35ea-37af-b9ff-75a6a59dbf0e.roa (raw, json)
Hash identifier: xzoR5wy99YX1hspl35KVI4avCZaB5gc2JgwEHeR0WtA=
Subject key identifier: 69:33:36:C8:23:DD:F0:EF:E2:92:62:4D:59:3D:04:EE:05:85:4D:95
Certificate issuer: /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1
Certificate serial: 010D0C9F43285848B8F0D16F1A3E2F1434C74180
Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/7fb48c8b-35ea-37af-b9ff-75a6a59dbf0e.roa
Signing time: Fri 31 Jan 2025 02:00:39 +0000
ROA not before: Fri 31 Jan 2025 02:00:39 +0000
ROA not after: Thu 01 May 2025 01:00:39 +0000
asID: 11090
IP address blocks: 2607:f398::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b8:f0:d1:6f:1a:3e:2f:14:34:c7:41:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1
Validity
Not Before: Jan 31 02:00:39 2025 GMT
Not After : May 1 01:00:39 2025 GMT
Subject: CN=6542f5ee-3947-401c-b6f9-565f70ffc7fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:6c:4f:fa:3a:52:54:0e:f5:97:ae:5e:b3:a6:
ae:40:39:fa:21:7c:b5:bb:7e:53:a6:e7:18:62:6a:
c6:61:5d:38:ee:de:cf:dd:b4:cc:bf:d9:cf:35:07:
91:40:5d:2f:54:aa:f0:86:67:ae:e8:0c:39:ba:12:
21:c6:e5:47:35:b1:36:4c:e8:d9:4b:77:30:30:82:
42:0c:16:ae:01:7d:9a:a6:6c:46:41:28:44:1c:d0:
5d:79:e4:8e:0f:e8:52:c6:5a:a3:7f:af:95:81:dd:
be:36:1e:8c:9c:1b:c7:d3:c6:b6:3d:e9:ce:37:e1:
ef:ca:b3:e2:86:44:64:57:bc:35:5b:49:58:fe:58:
4c:e4:80:5e:07:4f:09:6c:7b:73:34:3b:55:b7:ac:
15:cb:c0:31:4b:7c:a6:19:2c:56:1d:96:76:3b:f1:
38:19:2e:f5:d2:87:b4:5e:66:11:e5:58:98:4e:d8:
d5:dc:b3:97:1f:f8:bd:85:bc:e4:38:64:32:ea:c8:
11:36:cb:79:c6:5c:03:1f:c0:5b:ab:60:49:e0:94:
ef:b5:8f:47:79:7e:7a:25:7f:8e:1c:64:a9:3c:1a:
11:81:ba:51:23:70:ed:68:7d:4d:56:aa:21:30:4a:
62:89:b5:79:b1:49:e8:b1:70:ec:5d:07:13:73:01:
55:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:33:36:C8:23:DD:F0:EF:E2:92:62:4D:59:3D:04:EE:05:85:4D:95
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/7fb48c8b-35ea-37af-b9ff-75a6a59dbf0e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl
X509v3 Authority Key Identifier:
keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:f398::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:2d:32:d8:4d:20:64:bd:95:0b:b6:18:aa:6e:b1:c3:03:57:
c4:09:dd:cc:cf:a5:49:0a:03:83:65:8e:24:64:9a:78:03:31:
66:b8:d7:df:96:d2:6a:e3:32:0e:36:27:96:40:66:cf:a6:e6:
ee:ac:c0:9b:b8:0a:db:d1:7f:4d:25:82:97:b9:c0:1c:57:96:
df:b0:a4:1e:ac:5b:1a:07:c6:b5:ac:51:7c:97:c8:b2:eb:42:
72:f5:98:6d:35:75:b1:3f:1a:94:49:ec:05:9f:e0:78:ae:9d:
d4:60:c0:06:51:0e:3d:b8:6b:c1:f2:85:64:63:51:1b:21:ab:
b2:64:b0:7d:3b:7c:1b:3c:a6:fd:d9:d0:19:ee:53:b0:68:bb:
aa:28:1d:7f:bb:a2:32:ea:e5:c1:81:91:f3:37:b0:a3:52:c3:
80:c5:69:4e:85:d1:32:7f:23:fb:09:9b:7f:4b:5e:76:b3:6c:
14:4f:08:da:df:62:be:9e:78:fb:ea:cd:fd:4d:fc:b4:b9:f1:
ab:7a:d3:b4:c7:e8:65:22:62:8e:c9:a0:df:72:e6:1a:67:fc:
3e:84:a2:f0:8d:42:cd:44:80:be:1a:83:ac:5d:35:14:76:49:
bb:f2:27:05:9c:f4:50:c3:77:fe:1f:44:30:05:b0:ed:35:24:
01:7f:48:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:45:49 2025 by rpki-client