Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8912efe9-9a7a-4e99-821c-82dc2da25794/84cf43c0-6e6d-3e89-9951-082b1eb0d7e6.roa
File: 84cf43c0-6e6d-3e89-9951-082b1eb0d7e6.roa (raw, json)
Hash identifier: H02HOgT+N8XELhAbPeLOQT2R1KG13natU2Ppojq/xyE=
Subject key identifier: 55:72:EC:B9:C9:E3:38:1A:AA:63:60:BA:7A:68:D4:0D:E0:FD:3F:18
Certificate issuer: /CN=8912efe9-9a7a-4e99-821c-82dc2da25794
Certificate serial: 010D0C9F43285848C580F58D65432CAC7DA1A1C0
Authority key identifier: 78:CD:25:62:0C:01:47:AC:52:84:E5:26:FA:A2:B4:28:53:B4:E3:94
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8912efe9-9a7a-4e99-821c-82dc2da25794.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8912efe9-9a7a-4e99-821c-82dc2da25794/84cf43c0-6e6d-3e89-9951-082b1eb0d7e6.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 20208
IP address blocks: 2607:b080::/32 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:80:f5:8d:65:43:2c:ac:7d:a1:a1:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8912efe9-9a7a-4e99-821c-82dc2da25794
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=5af5950e-684c-4caf-b7fb-d1cefc85d7ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:5a:97:25:f5:8b:11:54:83:60:1f:1b:24:b0:
19:c8:e9:1f:aa:4e:eb:41:c9:0b:e2:53:4e:47:08:
a3:38:a2:4d:60:62:21:cb:71:6e:03:c3:c4:b9:30:
e7:8d:78:f0:bc:1e:e2:47:dc:af:70:f6:82:b8:6c:
18:36:52:dd:48:d1:3f:56:40:96:34:cc:a3:10:4f:
5f:5f:63:26:12:e1:e6:5b:b1:24:5d:a8:9b:71:12:
9a:14:8c:d6:41:d4:85:4b:55:a3:b9:9c:0e:4a:b7:
57:ee:d0:b1:2c:1a:06:80:5e:26:a1:b8:4a:52:23:
e5:ca:8c:5c:6d:37:86:9c:8d:b1:85:15:19:14:41:
84:b2:d1:70:3d:aa:cb:25:a7:5c:20:2d:7d:f1:14:
55:1d:f4:69:30:d3:5c:8a:3e:55:2c:56:dd:e8:bf:
59:2c:7a:88:77:d6:fe:e0:c4:0e:53:6d:ca:6b:81:
d0:20:a1:45:ad:e4:63:10:fd:e4:d7:70:0c:39:b6:
8f:6c:ff:da:da:40:dd:83:f4:74:90:25:9f:ac:9a:
33:7c:ac:0c:28:c2:8d:25:ba:ee:11:33:51:19:c0:
05:fd:4c:2a:a8:be:ed:ce:8c:d1:32:3a:7d:b8:24:
7d:86:5e:e0:6b:cc:43:81:07:9d:9c:30:d3:93:70:
08:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:72:EC:B9:C9:E3:38:1A:AA:63:60:BA:7A:68:D4:0D:E0:FD:3F:18
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8912efe9-9a7a-4e99-821c-82dc2da25794/84cf43c0-6e6d-3e89-9951-082b1eb0d7e6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8912efe9-9a7a-4e99-821c-82dc2da25794/8912efe9-9a7a-4e99-821c-82dc2da25794.crl
X509v3 Authority Key Identifier:
keyid:78:CD:25:62:0C:01:47:AC:52:84:E5:26:FA:A2:B4:28:53:B4:E3:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8912efe9-9a7a-4e99-821c-82dc2da25794.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:b080::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
13:09:94:95:a0:39:dd:e0:e9:79:09:18:67:3d:f1:f0:ee:46:
9d:63:6e:99:aa:bd:28:aa:0d:12:5c:77:e3:c1:bf:4e:39:8f:
36:3d:11:91:9f:48:0a:93:e9:d3:da:2e:2c:14:ba:b2:73:81:
bd:53:7b:fd:be:10:68:d7:34:85:2f:fb:ca:c0:6e:f4:8a:22:
58:09:20:04:3c:f5:c0:e5:d9:d6:7f:6a:85:fa:1d:b7:f5:9f:
dc:64:63:df:44:0a:64:cb:3e:b9:4a:1d:5a:98:d7:ed:b8:60:
46:03:21:38:46:28:75:cb:71:7e:9a:8d:4e:48:3c:74:87:e3:
4c:a0:c9:39:86:70:4e:b8:5c:3b:40:69:90:4e:e6:dc:b8:32:
4a:f0:fe:4c:7c:1c:41:1d:4e:e2:e4:b8:f4:d3:89:2e:e1:72:
04:bc:c8:4b:51:04:9d:80:fe:37:a8:ed:0f:1a:e6:7b:5d:40:
3b:ba:03:8e:67:2b:70:55:34:1d:43:95:49:29:91:09:f3:5f:
ca:b9:a6:b3:7b:77:cb:a8:a6:5f:e1:63:82:dd:fe:bd:28:db:
a5:7c:e5:09:82:83:cf:af:dc:00:c1:dc:5a:30:c1:1b:3c:34:
5d:10:ef:38:90:75:29:af:5a:2b:c3:2e:94:54:dd:de:8f:ab:
2e:d4:e3:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:23:41 2025 by rpki-client