Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/195aa559-2ee4-466a-993d-e35043b7752b/4290d087-dcc9-3d70-8298-b24398950b3a.roa
File: 4290d087-dcc9-3d70-8298-b24398950b3a.roa (raw, json)
Hash identifier: 9If9EnO3EV+Rnk8svklVm/+Rdy91RvDHT4htvWC8I28=
Subject key identifier: 3F:EA:52:D4:A7:69:01:4A:26:48:9C:B3:0F:36:6B:25:9D:86:B6:7E
Certificate issuer: /CN=195aa559-2ee4-466a-993d-e35043b7752b
Certificate serial: 010D0C9F43285848B62620E09F83FFE7848CCA00
Authority key identifier: C8:74:0E:F2:1B:CC:D0:36:65:A9:AE:02:D3:6A:A3:E5:B7:BD:97:8E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/195aa559-2ee4-466a-993d-e35043b7752b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/195aa559-2ee4-466a-993d-e35043b7752b/4290d087-dcc9-3d70-8298-b24398950b3a.roa
Signing time: Thu 30 Jan 2025 02:00:40 +0000
ROA not before: Thu 30 Jan 2025 02:00:40 +0000
ROA not after: Wed 30 Apr 2025 01:00:40 +0000
asID: 399970
IP address blocks: 2620:10f:f000::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b6:26:20:e0:9f:83:ff:e7:84:8c:ca:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=195aa559-2ee4-466a-993d-e35043b7752b
Validity
Not Before: Jan 30 02:00:40 2025 GMT
Not After : Apr 30 01:00:40 2025 GMT
Subject: CN=6aa2d62d-7383-4c2a-83df-530163ce8c5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:1d:49:75:78:08:7e:8f:02:89:87:15:d4:e6:
b6:f3:4e:e9:c9:4e:70:9b:42:c0:7c:4c:56:a4:85:
45:b5:84:71:d4:8d:63:a9:de:6c:aa:b0:29:ec:1e:
9e:ef:0e:0a:d2:35:f4:c3:19:61:f6:53:b4:00:78:
3a:ab:b2:66:04:cb:16:62:e9:b5:04:94:36:51:c4:
56:ed:7b:fb:c2:09:2c:8f:75:2e:1d:da:93:87:3a:
ef:5b:81:47:50:92:98:cc:5c:eb:72:09:d2:63:8d:
0c:68:74:69:ff:c9:69:a5:5b:67:fc:ea:f1:11:31:
48:67:af:1f:ad:4a:e4:8d:6b:c3:e7:66:c1:65:35:
3c:30:cf:f8:8b:c0:32:66:42:fc:f3:ed:d0:3a:19:
19:41:f8:39:0c:9b:1e:2a:71:8f:68:0f:e9:1c:36:
66:f4:2f:40:7e:a0:ea:17:83:6a:b8:70:48:1a:37:
d6:56:46:8f:ce:53:db:1a:f9:69:5c:5c:7b:56:68:
88:17:d3:96:eb:7f:c0:b9:96:d5:d7:bd:e5:81:3b:
67:3e:85:4e:b0:08:25:78:3f:38:b0:b0:db:a8:fa:
10:e8:c8:49:05:62:df:76:df:a3:a8:2e:ad:16:b5:
84:c7:be:c0:75:59:cb:f9:9d:4e:a1:87:9a:01:09:
4f:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:EA:52:D4:A7:69:01:4A:26:48:9C:B3:0F:36:6B:25:9D:86:B6:7E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/195aa559-2ee4-466a-993d-e35043b7752b/4290d087-dcc9-3d70-8298-b24398950b3a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/195aa559-2ee4-466a-993d-e35043b7752b/195aa559-2ee4-466a-993d-e35043b7752b.crl
X509v3 Authority Key Identifier:
keyid:C8:74:0E:F2:1B:CC:D0:36:65:A9:AE:02:D3:6A:A3:E5:B7:BD:97:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/195aa559-2ee4-466a-993d-e35043b7752b.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:10f:f000::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6d:ca:16:1b:16:ff:a4:d3:75:36:6b:86:a0:1d:8f:07:b9:23:
62:a4:2b:eb:12:b2:b9:3d:77:c0:ff:83:67:9f:a7:4c:3f:77:
f9:14:c6:16:66:a1:ac:c3:79:82:43:05:19:01:8e:7d:d6:ad:
65:df:2b:1c:5f:d0:4b:21:2e:38:67:cc:51:cf:7c:86:6e:77:
c6:1f:ed:dd:70:bb:37:9f:28:79:6a:20:d0:e0:5a:0b:92:6f:
49:42:a3:59:d0:4c:d6:58:54:ca:cf:16:b4:1b:dd:f8:00:47:
2e:67:82:77:25:25:c4:4b:79:70:85:0b:c4:fa:8e:2c:d8:56:
46:4e:8a:0f:45:7b:18:45:c1:5a:93:e2:94:44:2a:f7:2f:cc:
83:9f:35:22:bd:45:90:8b:4a:4a:ee:5d:65:cd:91:93:b5:8d:
01:cf:2a:83:2e:f8:90:82:1f:63:5e:f7:5f:af:31:81:92:f7:
1a:41:0a:90:53:6f:94:76:2b:f2:ab:fe:5e:9a:43:48:b6:03:
de:fb:92:be:00:de:1f:0b:18:4e:a4:f3:ea:67:ed:2d:9c:ad:
11:7c:76:7b:75:61:cf:9d:0b:19:4f:d8:09:7b:2f:9f:8d:e7:
bb:f8:0c:b1:e6:c0:3c:da:df:c1:81:a4:e1:ca:31:3d:54:17:
e5:2c:04:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:57:41 2025 by rpki-client