Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/7fada44e-ab60-3ed5-b0e0-767e589309f8.roa
File: 7fada44e-ab60-3ed5-b0e0-767e589309f8.roa (raw, json)
Hash identifier: zqJfZZ0cB65U0tnJuKAhtHaAtGLRY5g/GNoEbS4hj70=
Subject key identifier: E1:F9:A9:18:A6:8B:EB:00:7C:6B:0A:E3:60:49:6D:60:6A:6D:77:A0
Certificate issuer: /CN=6459964e-cb44-4be5-88da-03fac554e95c
Certificate serial: 010D0C9F43285848D7A6514F9D6A93313975D4C0
Authority key identifier: 2A:DE:EC:A4:72:AC:F1:D7:85:7E:C5:46:E2:2F:35:74:98:FA:0A:62
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/7fada44e-ab60-3ed5-b0e0-767e589309f8.roa
Signing time: Tue 11 Feb 2025 02:00:39 +0000
ROA not before: Tue 11 Feb 2025 02:00:39 +0000
ROA not after: Mon 12 May 2025 01:00:39 +0000
asID: 32771
IP address blocks: 2620:111:800e::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d7:a6:51:4f:9d:6a:93:31:39:75:d4:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6459964e-cb44-4be5-88da-03fac554e95c
Validity
Not Before: Feb 11 02:00:39 2025 GMT
Not After : May 12 01:00:39 2025 GMT
Subject: CN=393b847c-ec52-4ac9-8230-c04090309d96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:65:df:0c:0d:a1:f5:af:fe:4d:5e:b4:96:dc:
25:65:e9:c5:38:d3:66:17:00:e5:70:1d:9c:3f:ec:
83:93:71:46:26:be:0d:d7:1a:01:e8:43:01:b7:8c:
95:23:81:5b:5a:30:2e:60:42:a4:8b:2c:0d:81:f9:
56:56:f9:be:6d:1c:d3:99:67:a0:fd:7f:ff:6c:d1:
68:7d:a4:8b:bf:24:7d:bc:03:73:2a:08:05:a4:05:
60:be:41:ae:47:9c:da:c1:5a:33:80:0b:31:25:62:
34:72:33:89:36:49:ec:75:8d:33:8a:ac:24:7d:33:
75:a1:a0:dc:8b:7f:8b:cb:11:cc:d6:bc:72:f4:c6:
80:70:4a:45:35:a3:7c:c1:8c:df:19:dd:e0:a2:04:
bf:86:75:1c:94:29:22:ef:9c:91:5b:34:ba:44:87:
2c:74:bb:29:d5:e3:a4:66:62:e2:09:9a:a7:c4:d6:
af:46:2f:21:e3:60:d1:d1:07:a1:23:8e:7d:f2:b7:
8d:a5:f9:84:94:42:39:c9:9c:b5:37:0b:75:ee:d0:
fa:6b:8f:ac:f8:58:90:e8:9a:d1:94:2a:99:eb:0f:
7b:01:f4:89:8a:0b:cc:32:98:90:45:86:b0:00:a0:
2e:47:76:ed:e2:4a:1e:f5:36:e4:38:37:00:55:54:
09:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:F9:A9:18:A6:8B:EB:00:7C:6B:0A:E3:60:49:6D:60:6A:6D:77:A0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/7fada44e-ab60-3ed5-b0e0-767e589309f8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/6459964e-cb44-4be5-88da-03fac554e95c.crl
X509v3 Authority Key Identifier:
keyid:2A:DE:EC:A4:72:AC:F1:D7:85:7E:C5:46:E2:2F:35:74:98:FA:0A:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:111:800e::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
59:da:8c:af:58:51:19:c7:9a:23:2c:a0:8e:ec:64:31:83:ba:
86:08:98:fc:95:a3:f2:dc:e8:4c:c8:0e:cd:e8:8d:91:30:74:
c6:3d:74:ef:4f:5a:94:d3:02:c1:9e:8b:a2:ee:25:42:26:50:
5d:b4:99:5b:78:10:6a:b0:4d:58:20:7b:48:0d:1d:04:ab:92:
58:06:c6:83:3c:6f:eb:be:d9:ea:fc:3b:62:ee:f4:9b:65:84:
d0:85:8a:56:96:aa:4d:12:08:06:8d:6b:a4:98:bc:7b:0d:9b:
ae:45:32:8a:7a:4d:7d:0a:21:49:ae:94:a9:79:c8:a3:c5:ba:
92:6f:fe:70:a6:fc:15:12:48:86:53:fe:20:12:d8:30:97:c0:
cc:1a:98:c9:3f:af:b9:3c:45:0f:c7:26:b2:57:7e:af:a1:c8:
9e:16:d3:20:e6:b1:b3:a9:58:d0:e3:b7:f0:9e:fe:37:50:44:
ea:b1:af:42:2c:a4:0b:dc:41:48:ac:6f:c1:5c:05:92:e6:9f:
a0:1c:d8:56:6f:42:cf:69:74:6a:52:99:24:e9:39:87:1a:00:
e4:24:0f:07:79:ed:a0:95:85:ff:03:3e:a4:f5:ae:8d:29:68:
09:6f:77:27:27:40:76:2c:34:d7:98:cd:e1:2b:fc:cf:18:40:
68:fa:3f:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:25:52 2025 by rpki-client