Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5c075a41-a878-494c-804f-5abe30d80284/40b52c26-48e4-3577-8675-6cb223ee78aa.roa
File: 40b52c26-48e4-3577-8675-6cb223ee78aa.roa (raw, json)
Hash identifier: WPawWVgjNyLXm73UFRHbVKhkTR0saF3GjVEdNaStA1w=
Subject key identifier: 37:B9:F9:45:2A:DF:1D:F0:30:D2:C2:9E:7F:52:99:3B:72:3F:C0:4C
Certificate issuer: /CN=5c075a41-a878-494c-804f-5abe30d80284
Certificate serial: 010D0C9F43285848AAFB6C4B758DFA5A318D6EC0
Authority key identifier: EA:E3:66:50:14:7E:B9:8B:6D:53:74:2D:52:02:15:62:C3:EA:8E:15
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5c075a41-a878-494c-804f-5abe30d80284.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5c075a41-a878-494c-804f-5abe30d80284/40b52c26-48e4-3577-8675-6cb223ee78aa.roa
Signing time: Sun 26 Jan 2025 02:00:38 +0000
ROA not before: Sun 26 Jan 2025 02:00:38 +0000
ROA not after: Sat 26 Apr 2025 01:00:38 +0000
asID: 21738
IP address blocks: 2607:cd40::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:aa:fb:6c:4b:75:8d:fa:5a:31:8d:6e:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c075a41-a878-494c-804f-5abe30d80284
Validity
Not Before: Jan 26 02:00:38 2025 GMT
Not After : Apr 26 01:00:38 2025 GMT
Subject: CN=c85a6ad6-7015-448d-a7dc-f91fd2d3bd2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:74:a4:d6:d1:a2:c2:b4:eb:03:ee:e1:20:d5:
ad:8c:76:fa:68:b6:62:43:67:cf:0e:0a:cf:e4:ab:
a3:3e:22:86:12:52:bf:ee:f5:55:83:2f:3c:87:15:
5f:77:68:e0:1e:ad:74:56:1f:07:23:2e:09:20:8e:
91:62:b6:a1:ba:04:5b:ed:bd:30:bc:a0:2f:53:ba:
63:13:e8:f0:f6:0a:c7:97:0f:dd:c2:0d:2b:05:c8:
f4:f1:e4:96:85:26:76:b0:95:ef:dc:f7:66:72:73:
07:a6:92:59:72:c2:79:79:15:7a:88:af:4e:3c:80:
d3:c0:c6:0d:6c:9b:6e:5f:11:1a:21:2c:96:f9:a4:
fa:4a:3b:b4:8b:f1:b0:2d:e9:53:a6:6f:b5:09:5a:
d3:9c:15:ae:cb:bd:95:1d:a3:b4:2e:01:80:9c:c8:
39:32:3d:74:00:b1:aa:9d:93:72:86:f3:80:b1:73:
ce:1b:65:1b:7b:9b:d6:d7:c9:8f:13:c6:33:5d:10:
fe:b8:ee:43:0b:04:cf:1e:1b:31:9d:bc:6f:2b:7f:
67:1e:ca:9b:fd:c0:17:49:a8:f2:ff:a3:06:cc:60:
77:29:b6:b0:97:ff:80:a1:71:78:2b:dd:11:b8:b5:
20:c4:34:47:7b:02:2b:fb:01:70:f4:0c:0e:5f:7c:
a5:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:B9:F9:45:2A:DF:1D:F0:30:D2:C2:9E:7F:52:99:3B:72:3F:C0:4C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5c075a41-a878-494c-804f-5abe30d80284/40b52c26-48e4-3577-8675-6cb223ee78aa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5c075a41-a878-494c-804f-5abe30d80284/5c075a41-a878-494c-804f-5abe30d80284.crl
X509v3 Authority Key Identifier:
keyid:EA:E3:66:50:14:7E:B9:8B:6D:53:74:2D:52:02:15:62:C3:EA:8E:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5c075a41-a878-494c-804f-5abe30d80284.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:cd40::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4c:d4:bd:18:f6:aa:6c:59:11:5d:a6:8c:44:21:00:2b:05:af:
a9:2a:f2:f2:39:22:82:18:22:72:1d:9f:0c:40:04:03:8c:94:
4e:5c:4a:e2:8c:e8:8b:59:6f:dd:3f:39:39:6b:18:ce:06:26:
b5:df:ca:f9:d3:fc:18:16:ca:47:cd:3c:77:16:85:21:62:d4:
42:b1:f7:73:70:c1:d5:cd:31:d5:52:56:b5:4b:c7:30:c6:5b:
68:f0:46:30:9e:41:ce:2d:33:05:74:5e:03:28:08:55:ef:a7:
8f:de:49:c7:12:e2:2b:f7:28:50:43:51:29:34:20:47:e8:1c:
0a:c6:ae:c6:cb:30:f8:4c:07:7d:fe:04:dd:88:95:2c:1b:a9:
bb:68:d5:76:f0:05:b2:90:42:d5:a8:18:04:f9:c5:79:a1:aa:
48:fa:b5:00:84:40:15:bb:42:05:a2:f7:69:7f:88:6e:5d:1e:
74:2c:bb:28:9c:a6:2b:ec:32:17:55:22:80:6f:3e:25:eb:f8:
d2:c0:83:d6:6c:f8:c1:7d:34:81:c0:24:23:72:75:7e:fe:58:
8f:a6:8a:2a:d2:db:dc:18:b7:94:a5:93:f9:18:67:df:56:e0:
33:f2:79:87:a1:68:a1:57:ed:ee:67:02:09:f0:0f:d4:d4:d9:
23:43:47:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:23:39 2025 by rpki-client