Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/5f8631ab-4845-3aef-950c-39ad06146aa0.roa
File: 5f8631ab-4845-3aef-950c-39ad06146aa0.roa (raw, json)
Hash identifier: GTiq/EmyI3aBMRKU+d8Nu/lRVhPxm1wHK0xQVkaBmuM=
Subject key identifier: 23:23:31:AA:D0:05:A3:1D:32:2C:74:65:D6:A5:71:FA:F7:69:61:D4
Certificate issuer: /CN=464a5304-974d-4c86-9829-2f4d8dc9b9b6
Certificate serial: 010D0C9F432858492AD92F4E75FF55FBD312F380
Authority key identifier: 72:07:A6:10:FC:33:25:75:21:16:48:2F:A4:4F:6D:D6:D5:77:30:D5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/5f8631ab-4845-3aef-950c-39ad06146aa0.roa
Signing time: Wed 12 Mar 2025 21:15:23 +0000
ROA not before: Wed 12 Mar 2025 21:15:23 +0000
ROA not after: Tue 10 Jun 2025 21:15:23 +0000
asID: 27539
IP address blocks: 2604:a900:4000::/35 maxlen: 35
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2a:d9:2f:4e:75:ff:55:fb:d3:12:f3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=464a5304-974d-4c86-9829-2f4d8dc9b9b6
Validity
Not Before: Mar 12 21:15:23 2025 GMT
Not After : Jun 10 21:15:23 2025 GMT
Subject: CN=f23bbab8-a482-4706-9a9d-f30608155d4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:47:b7:b0:8b:56:72:90:3c:ff:3a:c9:1a:80:
ba:38:68:21:b1:4b:10:24:77:e4:51:07:7c:cb:f7:
c5:39:98:a8:17:0c:c4:14:ce:09:af:a2:05:dd:b1:
d9:10:6f:24:a0:71:60:b5:5f:91:1c:9e:9a:32:05:
29:ef:5a:db:77:01:1d:90:3f:eb:1c:57:b6:1d:56:
92:fc:f8:6a:7e:c3:0f:f9:7f:d6:5f:7c:38:e9:32:
8b:a6:5d:c0:d6:eb:6d:97:d7:ea:a5:f5:e0:e7:47:
b5:d3:d3:0d:4d:8c:9a:a1:ae:e8:b1:10:d2:94:5a:
1f:b8:00:bc:ce:dd:22:aa:84:ea:4b:9a:5b:74:bb:
2e:24:d6:d7:79:6b:8f:a8:e0:d6:bf:36:b3:29:45:
d4:06:ed:2c:6c:1e:3d:fd:c2:28:fa:62:ac:7f:6c:
e1:a6:66:60:56:cc:18:1b:f9:fb:7d:fd:da:59:37:
ed:e2:2c:60:69:ae:75:b0:61:ce:d3:6b:06:da:d6:
fc:b8:3e:cb:08:3c:b1:71:df:79:08:aa:5b:52:e1:
91:78:f0:7c:ae:b6:24:57:2b:e5:bb:d7:08:aa:5a:
74:8c:71:7b:f0:ea:b9:03:60:d3:19:08:ae:56:23:
0e:f4:93:22:a7:bb:1d:68:b6:ac:db:72:82:56:2a:
3c:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:23:31:AA:D0:05:A3:1D:32:2C:74:65:D6:A5:71:FA:F7:69:61:D4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/5f8631ab-4845-3aef-950c-39ad06146aa0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/464a5304-974d-4c86-9829-2f4d8dc9b9b6.crl
X509v3 Authority Key Identifier:
keyid:72:07:A6:10:FC:33:25:75:21:16:48:2F:A4:4F:6D:D6:D5:77:30:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:a900:4000::/35
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
20:bd:f0:7b:4d:77:ab:56:e6:37:40:c4:68:59:c4:fa:50:93:
06:b7:8b:bd:9d:4c:df:7d:3f:a6:12:c8:f4:45:02:d5:11:af:
b4:c7:e6:56:5a:d6:ed:d7:53:c8:55:c5:17:6d:0f:2f:be:05:
ec:2f:76:c8:7e:92:36:22:8d:b0:be:19:dd:fb:bc:b3:98:f8:
51:93:c3:cb:cd:8e:07:35:b5:21:96:94:74:e6:94:e9:44:0a:
0f:97:1b:cd:40:ac:f4:90:51:fe:32:d1:36:09:d7:36:71:8d:
99:2f:e9:ae:00:fa:2e:d1:21:c0:43:88:1e:95:19:ee:d0:ee:
83:e8:12:f6:f7:d9:bb:33:3e:e8:0e:6a:82:2a:59:92:51:90:
03:54:4a:a1:54:80:a1:f2:0b:ed:05:1e:fd:09:4b:ea:48:30:
87:2b:1e:e8:31:5f:3e:92:fd:95:07:72:ba:34:23:22:af:e5:
f3:a1:a2:ec:b9:74:87:2a:82:73:41:e8:87:a4:c4:f7:55:b1:
88:6f:ed:04:79:fd:44:48:b2:42:2d:6a:3e:38:fa:7f:24:64:
74:7d:9f:95:f5:89:57:56:0f:0d:24:ba:fd:b6:f2:95:f8:ab:
f1:74:c6:cf:9f:76:32:e4:e1:4a:1e:fb:c9:73:14:a9:56:6b:
ef:b0:83:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:47:02 2025 by rpki-client