Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a2235d90-d905-4ef7-9447-870904044658/08d9d418-eca8-3d3e-837a-6480ce768ba2.roa
File: 08d9d418-eca8-3d3e-837a-6480ce768ba2.roa (raw, json)
Hash identifier: D2lvdG9FS/dLosf+PDZ/Y0ekd349zG9Mjun4tXSsav8=
Subject key identifier: AB:8E:3D:24:E7:12:24:DE:19:C9:72:4B:D9:A9:16:1D:2C:1C:B6:1E
Certificate issuer: /CN=a2235d90-d905-4ef7-9447-870904044658
Certificate serial: 010D0C9F43285848C6E634FCBF30486D4A2E8280
Authority key identifier: 12:9D:20:82:1C:89:AE:7B:FE:2D:45:F0:6A:9E:F2:78:8B:0C:1A:DA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a2235d90-d905-4ef7-9447-870904044658.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a2235d90-d905-4ef7-9447-870904044658/08d9d418-eca8-3d3e-837a-6480ce768ba2.roa
Signing time: Wed 05 Feb 2025 02:00:39 +0000
ROA not before: Wed 05 Feb 2025 02:00:39 +0000
ROA not after: Tue 06 May 2025 01:00:39 +0000
asID: 14618
IP address blocks: 2607:5ac0:6000::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c6:e6:34:fc:bf:30:48:6d:4a:2e:82:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2235d90-d905-4ef7-9447-870904044658
Validity
Not Before: Feb 5 02:00:39 2025 GMT
Not After : May 6 01:00:39 2025 GMT
Subject: CN=da1761d9-06fd-4385-b971-99297e93313e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c1:9c:17:db:95:2c:47:64:70:ad:a1:8c:ea:
fb:c3:c1:05:82:f4:0b:69:d1:63:b1:5e:04:10:ba:
e4:e8:22:ea:d1:2b:46:68:d2:ff:fa:e2:1a:23:f2:
cc:a9:98:d5:d6:c6:30:3e:04:fb:d9:46:59:ee:46:
27:58:af:70:02:d6:68:3a:15:c1:6f:08:6a:79:ea:
cf:4f:87:06:92:0d:e0:5a:85:5f:c9:53:36:23:5e:
54:ff:6e:e1:d7:d5:e4:b3:33:ce:2a:8d:19:b9:eb:
24:e4:20:71:58:89:db:63:77:01:de:5d:45:dc:46:
03:3e:71:e5:9a:2b:31:95:90:91:33:25:ab:1b:b1:
e7:4b:bf:23:fc:9a:93:ea:d5:9b:c7:c5:85:3c:7b:
e1:ab:e6:5a:cf:ed:eb:6f:c6:04:a3:56:81:8c:7b:
fe:58:84:61:26:f3:92:1e:23:ce:c4:90:ca:1f:15:
93:c9:6b:13:91:f4:13:16:9b:b2:cf:6b:d7:c4:7b:
04:a4:97:a7:77:bd:bb:61:d4:9e:74:bc:aa:9d:df:
19:4c:e6:88:74:b6:4c:ab:c2:36:73:5a:a4:0c:73:
5c:e1:3e:0d:c4:ae:6e:f5:10:be:d2:ca:51:5d:c4:
88:8c:6a:03:89:ca:51:38:f0:f6:70:0c:d4:1f:ce:
b8:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:8E:3D:24:E7:12:24:DE:19:C9:72:4B:D9:A9:16:1D:2C:1C:B6:1E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a2235d90-d905-4ef7-9447-870904044658/08d9d418-eca8-3d3e-837a-6480ce768ba2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a2235d90-d905-4ef7-9447-870904044658/a2235d90-d905-4ef7-9447-870904044658.crl
X509v3 Authority Key Identifier:
keyid:12:9D:20:82:1C:89:AE:7B:FE:2D:45:F0:6A:9E:F2:78:8B:0C:1A:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a2235d90-d905-4ef7-9447-870904044658.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:5ac0:6000::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3d:e6:80:b2:6e:55:d4:2a:5c:8e:15:d2:b0:02:f1:c2:75:1a:
22:1a:7b:a5:7f:ca:76:12:fc:c0:5d:a2:ad:b0:d3:6d:02:3f:
bd:45:a1:b0:8c:d8:15:f5:09:4c:ef:6a:4b:1b:86:d6:5f:8a:
d4:08:bd:7a:da:c0:b1:49:d3:37:0c:0c:0f:16:da:c8:dd:4d:
b7:fa:57:b0:e2:9b:bb:83:a2:3e:25:a7:3c:bb:68:98:b2:58:
c5:28:7e:7a:9c:d3:c4:a5:23:d7:6d:f5:a0:4e:eb:13:4d:6f:
f0:db:17:33:12:fc:6a:cd:2b:1d:e5:fe:9e:dc:30:25:1f:f4:
16:20:77:01:8e:e8:6d:b0:2f:ba:8e:a9:37:70:00:16:57:02:
08:a5:92:a5:d0:3a:a0:ad:76:ca:0d:5d:06:e7:e7:ec:9e:ed:
01:33:33:3b:95:5e:05:74:4a:ba:df:f6:3a:92:18:10:28:8a:
30:8d:a1:12:a8:1b:0d:b1:e2:f3:7e:d2:3d:38:17:bf:ba:6a:
96:e8:9f:58:74:97:f9:6f:82:9a:98:01:f1:6b:80:49:0b:1a:
ab:41:79:28:66:45:02:93:07:c5:16:80:3d:5a:f1:68:eb:27:
25:95:71:e6:25:d7:02:24:33:01:b5:37:21:5d:6b:ff:7c:e7:
69:2b:89:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:47:57 2025 by rpki-client