Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/fde72308-bbb5-3336-8367-f5082aef8964.roa
File: fde72308-bbb5-3336-8367-f5082aef8964.roa (raw, json)
Hash identifier: 3+QiT0/IHiWzFCCfpzhqhzjF0YAfKlLPdKBg1R5XPD4=
Subject key identifier: 45:90:07:98:AB:F6:C1:70:FB:E7:C5:A8:8A:D2:87:4E:90:4D:50:85
Certificate issuer: /CN=1773b91b-a601-4f0d-af4c-93b3f65e6404
Certificate serial: 010D0C9F43285848A315D2B12F8DAFC9F37D2880
Authority key identifier: E5:D8:55:1F:4E:B2:C7:DD:84:EF:03:02:86:5A:2E:CF:39:22:F1:AF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/fde72308-bbb5-3336-8367-f5082aef8964.roa
Signing time: Thu 23 Jan 2025 06:07:37 +0000
ROA not before: Thu 23 Jan 2025 06:07:37 +0000
ROA not after: Wed 23 Apr 2025 05:07:37 +0000
asID: 19165
IP address blocks: 2604:5500:e800::/38 maxlen: 38
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a3:15:d2:b1:2f:8d:af:c9:f3:7d:28:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1773b91b-a601-4f0d-af4c-93b3f65e6404
Validity
Not Before: Jan 23 06:07:37 2025 GMT
Not After : Apr 23 05:07:37 2025 GMT
Subject: CN=d4a2eceb-4697-4866-9f70-29cc2e6c0bb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:3b:c3:e0:bc:47:f6:80:03:90:94:6d:65:52:
f3:fd:90:bd:f7:93:4b:e9:0f:58:c7:b8:da:34:f8:
52:de:4a:9f:27:6b:4f:39:da:6f:fe:08:33:4d:e0:
fc:82:58:6a:23:8f:68:a0:a1:ff:c7:a5:aa:89:03:
b7:32:4d:c8:0f:ba:a7:5c:5c:79:91:af:7b:e5:65:
f2:44:72:cb:b8:f4:1e:41:bc:d7:42:32:2b:b5:c1:
55:cd:3d:05:a7:45:ed:db:6a:85:e4:f1:7f:ac:47:
d3:b8:cb:1b:1a:03:6a:a2:b5:4e:95:11:3e:ff:d7:
04:d2:a4:8d:fd:8f:ac:b3:9a:bc:83:93:79:38:17:
9c:3d:a3:95:bc:5c:ad:23:96:cd:54:d1:79:4c:12:
99:a5:3a:40:89:17:4e:57:c8:0b:ed:e9:e8:cd:11:
d4:c2:91:c9:2a:73:30:9a:56:b5:d5:12:b0:bf:b7:
3e:a7:c4:82:93:a7:e0:a2:d9:b5:cc:66:aa:3c:b7:
94:51:ac:e2:34:5f:f0:6f:c3:95:c3:c3:9a:2a:9b:
cd:cc:68:70:74:e6:97:b0:d7:71:00:05:1f:cd:3e:
94:44:e3:4c:38:96:bf:7f:16:97:9d:2a:25:93:2b:
d7:d9:4f:a3:59:f6:83:73:d4:6e:58:eb:ea:fd:24:
de:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:90:07:98:AB:F6:C1:70:FB:E7:C5:A8:8A:D2:87:4E:90:4D:50:85
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/fde72308-bbb5-3336-8367-f5082aef8964.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.crl
X509v3 Authority Key Identifier:
keyid:E5:D8:55:1F:4E:B2:C7:DD:84:EF:03:02:86:5A:2E:CF:39:22:F1:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:5500:e800::/38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
47:dc:2d:e7:00:f7:70:b9:16:2e:b2:24:b0:fc:86:c2:1b:74:
6b:53:fb:eb:70:cd:14:55:d2:f6:38:6a:e5:83:52:1a:ea:aa:
d6:34:ac:4f:62:be:e1:eb:66:37:d9:22:e4:36:8b:50:60:67:
7a:b7:73:3a:03:61:69:79:33:52:3a:3c:7e:43:20:f6:d2:37:
e5:ac:f5:f9:be:81:68:a5:bf:ab:c9:d4:6a:c4:82:e2:1a:0f:
db:b6:29:53:70:16:83:63:b5:e9:c7:6a:54:c9:c1:b4:12:43:
e8:4b:b5:79:4c:f7:10:80:95:8c:d3:6d:e8:07:12:48:10:ed:
fe:8d:51:9c:07:54:cf:db:99:db:bc:13:9f:8b:d1:b4:40:83:
6a:ab:7e:ea:07:11:f4:cc:37:f2:88:17:c3:be:bc:a6:b1:49:
fb:17:52:cf:41:80:57:9b:29:71:c8:7a:f2:81:ae:3f:af:c4:
bc:ef:2a:ca:6a:21:ca:d9:61:3a:94:2a:b4:01:ba:ed:ac:58:
88:a1:74:d9:88:2d:81:95:fe:f9:91:30:ef:64:ea:56:f5:10:
00:c0:eb:4f:64:fd:e5:a4:ae:6e:e3:32:48:f9:9b:23:cf:7e:
68:ad:dc:71:28:9a:7b:d9:5b:8b:57:42:fb:e0:8e:df:47:82:
02:d1:35:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:14:01 2025 by rpki-client