Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/428e2f0c-a32e-4e4e-ad35-70fa967d8c2c/1ff20024-f28b-3553-98cf-d9f10bad3203.roa
File: 1ff20024-f28b-3553-98cf-d9f10bad3203.roa (raw, json)
Hash identifier: 3k0e5kjAFkszQdeTTGdTNZtDw3rUPBgQFu2jCIbHRWw=
Subject key identifier: 7A:31:09:0B:BA:0B:E4:12:C1:BF:96:D8:2D:CA:50:31:FF:1B:79:15
Certificate issuer: /CN=428e2f0c-a32e-4e4e-ad35-70fa967d8c2c
Certificate serial: 010D0C9F43285845B3836EA101FCC20BF971FD40
Authority key identifier: 42:94:24:A1:A9:DE:58:D2:C7:B9:DF:64:35:5F:C1:88:D0:C8:39:40
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/428e2f0c-a32e-4e4e-ad35-70fa967d8c2c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/428e2f0c-a32e-4e4e-ad35-70fa967d8c2c/1ff20024-f28b-3553-98cf-d9f10bad3203.roa
Signing time: Mon 29 Apr 2024 01:00:25 +0000
ROA not before: Mon 29 Apr 2024 01:00:25 +0000
ROA not after: Sun 28 Jul 2024 01:00:25 +0000
asID: 7896
IP address blocks: 2620:d5::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:b3:83:6e:a1:01:fc:c2:0b:f9:71:fd:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=428e2f0c-a32e-4e4e-ad35-70fa967d8c2c
Validity
Not Before: Apr 29 01:00:25 2024 GMT
Not After : Jul 28 01:00:25 2024 GMT
Subject: CN=7f4d612b-f3e8-4fd7-b96a-2429c8c3aba7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:32:dc:17:ed:3d:a0:ea:15:c9:7d:05:4b:6e:
8e:72:48:fe:6b:23:f4:26:82:bf:e4:ec:07:7f:e9:
8f:a9:5e:e5:70:3e:ab:17:ef:f2:3a:37:6d:b2:cc:
e8:49:06:40:79:65:89:a6:35:b6:5a:8f:6d:65:75:
dd:6c:73:7c:79:6a:c4:2d:88:04:91:f0:9f:d4:1a:
41:f7:35:f7:5d:b3:c2:f8:17:a6:c9:11:13:63:eb:
db:f8:05:d7:f7:ed:08:0f:64:c7:36:a4:9c:d5:f4:
0b:09:2e:07:22:e1:da:59:b0:e4:93:af:b9:c6:c4:
c6:98:75:33:12:e5:dd:eb:5d:fa:ae:02:3b:1d:1b:
c6:b0:b0:20:09:f5:70:ee:19:ef:09:df:f5:2d:0b:
3b:bd:fa:5a:fd:4b:ae:59:71:6f:3d:a2:0a:6b:e1:
a2:7a:8f:b8:a1:24:b1:1f:84:74:58:90:5d:25:71:
67:d2:5a:bb:68:ef:0d:c8:b1:b6:be:7f:4e:a6:68:
a4:3c:73:cd:c2:4a:5f:7d:22:1f:8b:32:26:f3:4c:
0e:ed:70:8c:cf:82:f5:0a:a3:a5:0c:be:0f:5c:f3:
5e:9e:e4:1d:3e:a1:58:4a:36:27:8e:11:8a:78:29:
f6:f7:59:f6:c1:70:17:c2:c5:98:cc:e3:22:c8:44:
f6:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:31:09:0B:BA:0B:E4:12:C1:BF:96:D8:2D:CA:50:31:FF:1B:79:15
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/428e2f0c-a32e-4e4e-ad35-70fa967d8c2c/1ff20024-f28b-3553-98cf-d9f10bad3203.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/428e2f0c-a32e-4e4e-ad35-70fa967d8c2c/428e2f0c-a32e-4e4e-ad35-70fa967d8c2c.crl
X509v3 Authority Key Identifier:
keyid:42:94:24:A1:A9:DE:58:D2:C7:B9:DF:64:35:5F:C1:88:D0:C8:39:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/428e2f0c-a32e-4e4e-ad35-70fa967d8c2c.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:d5::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8a:3f:26:77:ab:b0:dd:0c:54:4d:a3:1f:78:a3:72:aa:dd:2f:
9a:dd:dd:9e:6e:c6:48:4b:f0:5b:ad:0e:b5:07:e2:4a:b1:eb:
0f:32:54:99:26:e2:c1:a4:f2:dd:ad:ec:5e:54:3d:ee:ce:ca:
44:3d:5e:50:25:ce:21:7d:31:82:f0:28:67:14:c6:6f:7a:d4:
96:a7:fb:91:96:28:4f:0a:9e:6a:75:fa:d2:69:07:c2:35:5a:
97:7a:1f:71:31:17:23:5b:95:48:2f:00:9b:7f:1e:ae:1c:37:
10:1b:e7:8c:72:30:ba:da:dc:1e:a7:72:aa:54:c5:b0:29:10:
14:09:0f:91:87:1a:af:c2:8e:4c:02:4f:79:aa:dc:75:da:2c:
11:d3:96:6c:1c:12:68:a5:d0:cf:d0:b0:a9:23:8a:d4:66:a4:
a9:bb:4d:e5:d5:85:ea:6e:54:fe:af:89:93:09:42:d0:82:87:
88:da:62:f3:4f:72:1d:35:98:52:ea:09:7f:cc:9b:2e:6b:4c:
0a:1c:19:9e:37:c5:bb:41:f2:82:8d:66:ee:30:c2:85:ea:f6:
28:c8:17:82:73:ba:99:43:ab:bf:27:2c:e2:21:16:44:03:1c:
49:d0:a4:7d:ad:48:04:0e:95:92:d3:14:ae:79:db:d3:32:b6:
56:bf:04:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:40:52 2025 by rpki-client