Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/39812a66-44de-45e0-a65d-fd3a7673a954/9e7b8c97-188f-3dbd-aff6-3e46671902a5.roa
File: 9e7b8c97-188f-3dbd-aff6-3e46671902a5.roa (raw, json)
Hash identifier: qcz8pB4Fk4w1vY9KPbmq8npYXIxvH/h5Jrkgn1PtrhQ=
Subject key identifier: BB:4A:4E:C2:0B:B0:98:84:4B:B8:AE:4D:BA:FA:E0:3F:61:60:2A:CE
Certificate issuer: /CN=39812a66-44de-45e0-a65d-fd3a7673a954
Certificate serial: 010D0C9F4328584953C44661B8BA5B2680BD9700
Authority key identifier: 8C:B9:CD:61:0D:4D:2F:72:85:2B:F0:01:D2:9B:B9:E9:9D:DF:98:87
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/39812a66-44de-45e0-a65d-fd3a7673a954.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/39812a66-44de-45e0-a65d-fd3a7673a954/9e7b8c97-188f-3dbd-aff6-3e46671902a5.roa
Signing time: Thu 27 Mar 2025 13:00:52 +0000
ROA not before: Thu 27 Mar 2025 13:00:52 +0000
ROA not after: Wed 25 Jun 2025 13:00:52 +0000
asID: 396422
IP address blocks: 2607:39c0::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:53:c4:46:61:b8:ba:5b:26:80:bd:97:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39812a66-44de-45e0-a65d-fd3a7673a954
Validity
Not Before: Mar 27 13:00:52 2025 GMT
Not After : Jun 25 13:00:52 2025 GMT
Subject: CN=6799927a-a2d4-4736-a37a-fbd854ce17b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:d3:b7:9a:cd:0f:b7:4a:39:b6:26:0f:d0:d6:
8f:cf:ae:b1:6d:b7:91:14:e3:24:67:13:1f:67:e8:
32:ef:a1:26:e0:20:1a:ea:8d:71:fd:c8:63:19:36:
c9:05:ed:d8:77:4c:58:91:0e:fd:a9:ae:7e:10:6a:
ed:f3:94:58:fb:10:55:3d:2a:3c:34:a3:40:71:c9:
d0:5c:50:2b:39:78:4f:36:7a:84:6c:b6:49:aa:36:
64:b5:99:0f:6a:30:f9:4a:43:2d:2a:45:af:a0:99:
e9:3a:ce:22:2b:c8:19:55:97:e5:39:2b:91:e6:6e:
a1:6a:74:41:55:e4:0e:78:b8:33:ab:4c:0b:a9:1c:
8b:4b:15:19:0d:cc:1b:a6:f5:68:b2:bc:7e:77:00:
12:98:28:33:9a:c6:65:e5:e7:f8:07:f4:bf:0a:7c:
29:90:55:ed:1f:69:9e:ac:e7:0d:b5:94:85:ca:c5:
c0:23:c0:80:5f:b1:91:6f:81:7b:4f:76:ab:06:48:
29:b0:d8:af:03:03:8b:97:b1:80:6f:a4:67:e2:7d:
83:b8:78:22:4b:73:d4:8e:6b:10:15:2f:23:37:c8:
79:5d:8e:7f:33:08:52:17:fd:a7:ce:21:7e:ce:3e:
eb:34:5f:3d:c7:99:b2:65:b5:24:08:98:3c:54:aa:
59:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:4A:4E:C2:0B:B0:98:84:4B:B8:AE:4D:BA:FA:E0:3F:61:60:2A:CE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/39812a66-44de-45e0-a65d-fd3a7673a954/9e7b8c97-188f-3dbd-aff6-3e46671902a5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/39812a66-44de-45e0-a65d-fd3a7673a954/39812a66-44de-45e0-a65d-fd3a7673a954.crl
X509v3 Authority Key Identifier:
keyid:8C:B9:CD:61:0D:4D:2F:72:85:2B:F0:01:D2:9B:B9:E9:9D:DF:98:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/39812a66-44de-45e0-a65d-fd3a7673a954.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:39c0::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7b:ba:a7:2f:fc:48:68:b3:30:3a:fb:e1:41:cd:7b:b3:f3:aa:
0e:0b:b4:50:96:79:5f:0b:12:a9:3e:28:52:d8:cd:67:34:71:
0e:37:08:d2:29:18:03:76:66:c5:47:9f:d4:2b:84:54:38:a3:
9d:45:ff:0d:27:04:66:c1:2f:e1:52:e6:4c:fe:29:f7:5c:01:
cd:fe:35:1b:5f:10:b3:c2:f2:f6:88:54:a5:0d:c2:af:85:2c:
12:b2:ba:53:9d:32:3e:00:03:e6:9f:90:30:20:d7:47:32:7c:
8c:79:02:f5:7c:a4:69:c0:83:48:e2:b4:98:de:f9:57:a2:80:
57:02:b8:7e:87:37:a9:cc:82:84:f9:7c:3f:df:a8:4e:5b:ea:
0a:68:80:f2:cf:6d:f3:9c:89:08:56:c3:b0:a6:db:d8:a2:b4:
d0:26:4f:c9:e2:27:34:c7:a9:b8:ad:30:18:da:d4:eb:1d:6b:
59:a2:e0:f2:84:8e:63:70:bf:42:05:cf:d2:e7:0b:51:0a:a3:
c2:92:df:c6:f1:e9:ad:11:5a:ad:4f:62:00:bf:95:6b:41:20:
16:0d:60:ca:17:81:76:06:00:4b:7e:11:79:a2:0b:14:ec:14:
b0:26:c4:6d:fc:d7:78:69:ef:d7:d6:a8:5e:0e:a3:58:81:83:
1c:b4:ff:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 13:26:04 2025 by rpki-client