Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/12352ca2-f873-472d-a22f-0aebad4ce9bd/081735a6-8094-3e29-bc11-0063831723b9.roa
File: 081735a6-8094-3e29-bc11-0063831723b9.roa (raw, json)
Hash identifier: fl7fXFSwqVEhbM04wdDLaGfvjTasY3otwb1mVRvMIK4=
Subject key identifier: E7:83:38:91:E9:10:8C:5A:2D:C9:47:9A:24:79:12:2E:E4:70:20:D3
Certificate issuer: /CN=12352ca2-f873-472d-a22f-0aebad4ce9bd
Certificate serial: 010D0C9F43285848C41B80F7EC9101406D8EF080
Authority key identifier: 1F:A7:08:1F:E7:AA:64:71:26:58:3A:97:9D:7F:6A:7D:85:40:C9:70
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/12352ca2-f873-472d-a22f-0aebad4ce9bd.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/12352ca2-f873-472d-a22f-0aebad4ce9bd/081735a6-8094-3e29-bc11-0063831723b9.roa
Signing time: Tue 04 Feb 2025 02:00:40 +0000
ROA not before: Tue 04 Feb 2025 02:00:40 +0000
ROA not after: Mon 05 May 2025 01:00:40 +0000
asID: 30674
IP address blocks: 2605:c780::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c4:1b:80:f7:ec:91:01:40:6d:8e:f0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12352ca2-f873-472d-a22f-0aebad4ce9bd
Validity
Not Before: Feb 4 02:00:40 2025 GMT
Not After : May 5 01:00:40 2025 GMT
Subject: CN=ee0efa17-2377-4865-a334-03a2aa8236be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:28:9f:df:a3:8b:bd:1c:db:d3:96:ee:b7:5a:
d4:c3:f2:75:79:f9:90:b5:f2:20:42:e5:42:55:9e:
23:1a:f3:04:bb:ee:44:c8:cc:bf:0f:4f:9d:20:e0:
f0:e6:cf:71:ea:5d:49:3a:fe:cb:35:62:38:df:50:
f2:d0:98:ec:82:f7:c5:38:4d:8d:2c:02:b4:83:d5:
52:6f:ff:2b:fc:2c:fc:42:83:bd:c8:d9:9b:1e:2c:
5c:2e:50:65:36:76:81:90:b3:5b:06:82:42:28:4a:
63:d0:5e:8e:40:03:3a:d1:1c:93:77:93:8b:ff:93:
06:c9:cb:52:26:00:9b:b4:51:60:aa:6a:ae:0e:cd:
9d:6d:5c:79:7e:b8:6c:04:b0:cc:5a:7d:05:28:28:
6d:81:88:6f:84:85:81:99:d5:30:d7:0b:f4:dd:2f:
4a:96:b4:73:d8:b8:8e:29:3a:48:b6:d2:ef:59:92:
05:91:b5:5f:7c:e8:88:32:5b:3c:4b:ff:a0:2a:76:
fd:64:29:61:38:03:ce:17:72:14:c4:3a:22:e1:6d:
5b:6a:95:d6:f2:24:9d:b3:ff:96:b0:70:89:3e:ed:
eb:e5:d8:78:51:b3:8b:25:0a:cb:da:60:b2:49:e3:
18:c7:fd:84:17:b5:07:67:2b:b7:2e:d4:7d:36:6a:
34:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:83:38:91:E9:10:8C:5A:2D:C9:47:9A:24:79:12:2E:E4:70:20:D3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/12352ca2-f873-472d-a22f-0aebad4ce9bd/081735a6-8094-3e29-bc11-0063831723b9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/12352ca2-f873-472d-a22f-0aebad4ce9bd/12352ca2-f873-472d-a22f-0aebad4ce9bd.crl
X509v3 Authority Key Identifier:
keyid:1F:A7:08:1F:E7:AA:64:71:26:58:3A:97:9D:7F:6A:7D:85:40:C9:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/12352ca2-f873-472d-a22f-0aebad4ce9bd.cer
sbgp-ipAddrBlock: critical
IPv6:
2605:c780::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
34:c9:fc:87:c4:70:a0:e6:67:c0:26:87:05:ce:f5:57:7c:45:
6d:29:4f:af:0b:79:6a:bf:65:c5:12:74:45:c0:cb:77:44:63:
2b:a1:b0:70:c9:b6:8c:a6:d4:5c:db:27:a8:c1:bd:59:30:3c:
1a:6c:70:64:2d:6e:92:c9:2d:50:38:9d:cf:95:a7:ed:b1:34:
12:5c:b7:04:cc:f4:cc:31:c1:87:51:fc:f4:c3:6f:26:97:9d:
82:ab:49:0a:69:0b:5c:3a:ba:51:ba:f0:df:23:93:6f:9e:0b:
47:63:2c:29:50:01:e7:7f:90:7d:2d:7a:15:3a:82:82:03:95:
94:81:e4:c7:5d:7e:3c:a8:99:2a:eb:e2:26:59:d5:2a:07:e7:
f7:ba:7b:a6:66:f5:cb:d8:a4:d8:8d:fc:18:23:c2:cb:4f:f9:
ac:52:84:a9:80:b6:3c:eb:40:e3:f4:8f:61:49:4c:3b:b4:df:
3c:f0:1c:7b:b3:b5:95:f1:f6:ae:fc:c2:09:ba:db:6c:cc:4f:
c4:0b:08:b2:e8:f0:0e:0d:bd:cd:d8:40:c1:d4:ed:13:0a:17:
53:a2:19:01:cd:a1:a0:bd:df:23:5f:bd:0e:69:60:36:33:77:
24:b5:2e:81:a1:16:cc:8d:e1:cc:22:77:06:d7:2a:ba:9f:e6:
98:b0:e5:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:31:04 2025 by rpki-client