Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/df6816a7-143c-392b-bc92-0828868a384a.roa
File: df6816a7-143c-392b-bc92-0828868a384a.roa (raw, json)
Hash identifier: XHv8UJ1/iDdEKk3DJhCpOl9aNYPVlOkold/jl24NWA4=
Subject key identifier: D4:E9:C0:37:77:C8:07:76:00:91:E9:B0:B3:23:6C:53:82:00:BC:FA
Certificate issuer: /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
Certificate serial: 010D0C9F4328584953C44C2CEA051418B36CB700
Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/df6816a7-143c-392b-bc92-0828868a384a.roa
Signing time: Thu 27 Mar 2025 13:00:52 +0000
ROA not before: Thu 27 Mar 2025 13:00:52 +0000
ROA not after: Wed 25 Jun 2025 13:00:52 +0000
asID: 11290
IP address blocks: 2001:18c0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:53:c4:4c:2c:ea:05:14:18:b3:6c:b7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
Validity
Not Before: Mar 27 13:00:52 2025 GMT
Not After : Jun 25 13:00:52 2025 GMT
Subject: CN=8db0544b-c7ef-4cab-8dcc-1f57be202d0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:f5:33:cc:91:19:dc:d3:c2:fb:e0:23:d5:df:
fe:1b:21:23:53:36:bd:1b:91:08:73:99:5e:e0:43:
58:e5:92:8e:4f:67:14:38:6f:b3:e0:e5:30:c1:9f:
04:03:95:6c:af:5e:9f:b8:ff:be:c1:c1:da:86:f9:
7f:46:da:c3:e4:4b:26:03:2d:b6:39:6a:a5:7e:8c:
cf:94:18:ca:86:cf:7d:01:7f:c3:9f:b1:6f:1a:1d:
1d:35:9f:62:f3:c4:6d:84:07:a0:f4:65:d6:98:f4:
1d:6b:0e:43:71:15:11:c1:f1:d3:b9:3f:b7:ec:13:
51:d5:01:03:83:4e:b7:eb:e5:53:da:89:9a:92:bb:
5b:08:1e:f7:28:5a:03:9d:b1:cd:e9:97:50:ce:f8:
dc:25:f1:ff:8a:cd:bc:3c:30:99:14:5f:52:49:23:
9f:91:e0:cb:0a:7f:c3:b1:4a:64:4a:0b:31:da:3d:
0b:10:90:4d:fc:d3:fe:91:d5:67:4b:4a:ce:52:95:
8d:6c:c6:bd:5d:7d:5b:f2:85:6c:ea:e3:c0:db:a9:
a8:8a:d9:3c:13:d7:51:74:27:b2:b5:1b:7b:a0:b3:
de:9d:30:bd:da:fd:44:34:9b:90:db:91:a4:5c:89:
52:30:0c:46:51:2b:a1:5f:7f:4e:1e:d2:36:5f:69:
ad:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:E9:C0:37:77:C8:07:76:00:91:E9:B0:B3:23:6C:53:82:00:BC:FA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/df6816a7-143c-392b-bc92-0828868a384a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl
X509v3 Authority Key Identifier:
keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:18c0::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3c:73:fc:bc:84:ec:86:cd:4f:8d:1c:22:02:ef:9d:e0:a2:f0:
6e:00:3c:44:69:b7:01:5c:06:27:31:c3:51:e9:2d:f6:28:9f:
22:3b:c7:eb:af:33:98:8f:64:51:17:10:1e:21:00:6a:8c:a8:
f4:33:70:de:04:e4:16:76:74:92:8c:7b:61:a5:ea:1a:53:68:
b9:45:72:18:b0:03:97:a3:cc:3e:0d:97:2f:2e:90:2d:8a:5e:
c7:04:f8:f2:b5:28:c6:7e:d8:52:ad:80:e6:f4:50:a7:0d:db:
6d:e8:a4:06:97:46:ed:16:6e:1b:db:b0:3a:87:98:bc:17:af:
0c:a2:99:44:9e:c6:92:29:3a:3d:e4:09:65:2d:03:77:31:4a:
c0:7c:57:8a:5f:af:62:1a:06:d2:24:87:91:01:29:4a:5f:62:
1e:be:7b:e3:ba:a1:dc:4d:e8:fd:d3:5f:85:1e:0a:cc:fd:e2:
97:ba:89:c3:14:f5:49:40:89:a3:c9:f3:dd:94:5f:dc:58:93:
ed:f0:ee:33:5f:b8:f8:4a:5a:42:73:a5:47:ae:b3:6b:a0:b5:
e5:da:38:7d:1e:5d:ee:35:23:01:47:74:b7:ea:0d:a3:fe:6d:
bb:fd:d0:53:6b:61:8d:96:ab:46:0a:46:e2:06:ba:65:a8:12:
fa:ae:72:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:50:24 2025 by rpki-client