Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/04e92388-3c10-37b9-8d44-b32e79f3fb8d.roa
File: 04e92388-3c10-37b9-8d44-b32e79f3fb8d.roa (raw, json)
Hash identifier: NtlznWa8vsM2mWXYxyIeKJTCtsVBNysBzafmZqqL4Hg=
Subject key identifier: C1:6D:C8:D2:7B:9F:5C:F8:3A:74:8F:36:57:65:AD:45:C1:A1:82:2A
Certificate issuer: /CN=464a5304-974d-4c86-9829-2f4d8dc9b9b6
Certificate serial: 010D0C9F4328584898D60D314742A17897AF2B80
Authority key identifier: 72:07:A6:10:FC:33:25:75:21:16:48:2F:A4:4F:6D:D6:D5:77:30:D5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/04e92388-3c10-37b9-8d44-b32e79f3fb8d.roa
Signing time: Sun 19 Jan 2025 14:00:52 +0000
ROA not before: Sun 19 Jan 2025 14:00:52 +0000
ROA not after: Sat 19 Apr 2025 13:00:52 +0000
asID: 27539
IP address blocks: 2604:a900::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:98:d6:0d:31:47:42:a1:78:97:af:2b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=464a5304-974d-4c86-9829-2f4d8dc9b9b6
Validity
Not Before: Jan 19 14:00:52 2025 GMT
Not After : Apr 19 13:00:52 2025 GMT
Subject: CN=d5dd2962-6b92-4c68-8080-e0b38d128f7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:55:1a:25:f7:cc:cf:b6:aa:c6:16:d8:66:7b:
38:2d:73:6a:8e:e1:06:57:66:7c:96:f7:ec:52:b7:
fb:3b:a3:96:0f:01:e5:25:03:5f:8e:de:2a:19:c9:
a4:8e:e2:62:3e:2a:e3:9b:33:1e:6c:3e:1a:16:cc:
29:eb:9d:46:f5:95:aa:61:a1:43:08:fe:9d:f6:96:
5f:52:d4:f9:c7:95:f5:83:ab:84:51:62:12:5c:84:
80:31:52:d2:9e:9d:b4:d7:7d:bc:46:c4:e3:1a:53:
9f:af:de:79:4d:2d:8b:a6:bc:d5:18:8c:7b:b2:ee:
c8:fa:34:7b:1f:23:2b:64:8a:77:f8:3d:b1:9d:b5:
49:95:d3:5b:29:91:e0:eb:6b:aa:06:42:cd:68:b0:
9f:89:72:3c:e6:d5:89:1b:2f:5d:13:a5:39:a9:17:
c0:11:80:1c:95:67:08:65:01:41:ab:93:33:cf:27:
9f:b9:47:11:1e:4f:fe:42:ef:62:d2:1a:76:b5:39:
bd:28:0a:87:c5:4c:d8:c7:3b:81:52:05:8e:e5:b8:
74:f8:b3:7a:aa:d4:9d:20:84:d7:e5:11:e3:d4:fa:
f4:76:67:6d:8e:12:28:91:2f:c1:b0:5c:18:1b:82:
1d:8b:3c:39:55:c6:ce:5f:c6:27:93:ab:0a:2f:6f:
4c:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:6D:C8:D2:7B:9F:5C:F8:3A:74:8F:36:57:65:AD:45:C1:A1:82:2A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/04e92388-3c10-37b9-8d44-b32e79f3fb8d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/464a5304-974d-4c86-9829-2f4d8dc9b9b6.crl
X509v3 Authority Key Identifier:
keyid:72:07:A6:10:FC:33:25:75:21:16:48:2F:A4:4F:6D:D6:D5:77:30:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:a900::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2d:bd:81:20:08:6f:7c:e8:48:96:35:e9:ee:0c:f9:0e:44:f4:
82:02:f1:c9:1c:c8:04:46:20:df:9c:a3:0a:ba:32:16:36:0d:
26:b4:07:fe:f7:aa:c3:07:45:fa:4a:03:5a:71:48:44:f9:3b:
00:b7:39:1c:29:f7:63:d7:e7:9d:19:71:f2:f0:8a:51:0c:41:
f6:cd:cc:93:3d:d8:bd:68:de:ee:a8:22:22:65:6a:a7:4d:f0:
0f:d5:95:bc:9f:a6:2b:c3:09:cc:43:62:44:7f:47:1f:77:23:
73:8c:d1:42:a0:94:e1:3e:83:0a:37:88:15:0e:51:38:e0:0a:
e5:30:84:78:aa:1c:8b:85:b2:11:28:41:f5:9c:3e:b4:25:b5:
92:c2:2f:12:a4:28:07:0c:25:50:0d:b8:22:80:eb:11:c9:05:
c6:e6:a4:de:df:88:53:d4:73:0e:ed:a7:2b:f9:74:b2:75:a6:
82:e4:05:98:36:98:fb:de:9e:4b:a0:d0:d3:3b:a7:b8:e3:1b:
c3:43:66:a8:73:3b:7e:84:f0:c7:66:1a:f4:69:83:57:2c:00:
0a:dc:cc:dc:14:85:ef:25:59:af:2b:3a:0f:b4:d9:ee:5f:bb:
1a:1c:fe:aa:51:04:8e:36:5d:72:ca:db:4d:5e:10:fd:84:57:
a4:50:90:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:46:45 2025 by rpki-client