Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ea3f9044-c185-4062-8dad-240b32b11348/b0a5c45a-5eeb-3ea0-833f-7f9c21d6f92b.roa
File: b0a5c45a-5eeb-3ea0-833f-7f9c21d6f92b.roa (raw, json)
Hash identifier: jMV2PzhA9zsODnJgbGzaO7pd5uH6KaeyiEAxVZrLQaM=
Subject key identifier: C2:74:B2:15:7E:F5:75:39:36:EE:A1:3B:F2:F2:90:C3:F6:81:C6:FC
Certificate issuer: /CN=ea3f9044-c185-4062-8dad-240b32b11348
Certificate serial: 010D0C9F4328584951EABEF3C5B4FC98B3CFD040
Authority key identifier: FE:A0:9D:90:12:27:F6:C7:83:B1:36:01:F0:F6:B6:F2:0B:7F:28:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ea3f9044-c185-4062-8dad-240b32b11348.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ea3f9044-c185-4062-8dad-240b32b11348/b0a5c45a-5eeb-3ea0-833f-7f9c21d6f92b.roa
Signing time: Wed 26 Mar 2025 21:07:17 +0000
ROA not before: Wed 26 Mar 2025 21:07:17 +0000
ROA not after: Tue 24 Jun 2025 21:07:17 +0000
asID: 395661
IP address blocks: 2607:bc40:100::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:51:ea:be:f3:c5:b4:fc:98:b3:cf:d0:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea3f9044-c185-4062-8dad-240b32b11348
Validity
Not Before: Mar 26 21:07:17 2025 GMT
Not After : Jun 24 21:07:17 2025 GMT
Subject: CN=78471201-6f64-4d3f-8bce-9531c4d0e3d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:64:ce:0f:a7:ad:74:70:b4:da:5f:95:d0:9e:
9e:6a:0c:86:a1:79:e1:f7:b3:59:f7:6a:4e:a6:37:
36:d0:b1:d2:c1:1e:23:d8:ec:cb:3d:de:4b:0e:df:
c8:ce:04:a3:1e:56:db:a2:02:e5:6d:c8:37:52:5e:
36:72:7b:4d:93:4b:84:23:62:61:d8:d5:9e:9d:82:
80:43:ed:87:7c:43:21:67:d9:6d:a8:5e:ad:7e:b4:
af:fc:09:3c:2e:8e:50:a2:87:5b:86:ee:25:7b:33:
a8:3e:be:1e:47:6d:3c:84:48:46:55:2f:96:7e:bd:
e2:3e:36:ac:c2:a9:25:60:3a:25:c1:bc:ed:b6:68:
8a:aa:a4:ea:8e:76:29:09:2b:5c:f9:ee:9c:1c:42:
2b:f9:d1:84:ee:a8:60:66:b1:48:b5:c3:4a:17:0a:
f7:c6:15:9e:83:82:90:0a:5b:f4:7b:68:5e:85:29:
e9:33:e8:ba:13:2e:46:c6:a6:d1:64:7d:e5:a0:47:
a4:b8:7f:61:15:cb:1d:0d:97:60:d2:e8:ac:28:0b:
4e:d0:6b:bf:e4:d1:17:bf:37:66:ed:29:76:ee:0d:
59:9b:f3:67:fc:5a:b8:e2:bb:e2:61:25:a6:1d:7f:
d0:3c:ce:d5:96:80:82:11:82:ad:1f:ce:16:ec:16:
3f:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:74:B2:15:7E:F5:75:39:36:EE:A1:3B:F2:F2:90:C3:F6:81:C6:FC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ea3f9044-c185-4062-8dad-240b32b11348/b0a5c45a-5eeb-3ea0-833f-7f9c21d6f92b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ea3f9044-c185-4062-8dad-240b32b11348/ea3f9044-c185-4062-8dad-240b32b11348.crl
X509v3 Authority Key Identifier:
keyid:FE:A0:9D:90:12:27:F6:C7:83:B1:36:01:F0:F6:B6:F2:0B:7F:28:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ea3f9044-c185-4062-8dad-240b32b11348.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:bc40:100::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5d:ac:e2:76:39:df:44:9f:f5:28:48:1e:11:d6:45:9f:d0:9d:
73:fb:ea:f8:8b:3c:95:a4:b2:f6:eb:53:ab:ec:2c:6f:ad:3e:
5f:d5:e7:29:bb:39:28:c3:1d:fa:23:87:e7:38:33:8a:d3:56:
f3:8d:a4:44:c0:9d:75:dc:5f:f4:3d:0b:43:6c:18:db:21:d4:
17:f5:36:36:89:9b:ca:f6:c2:27:55:bf:4a:d5:ed:b8:a7:fd:
ca:4e:1f:cc:05:67:79:0c:ce:84:b8:15:a9:0a:26:f0:58:2a:
e3:3a:fc:e0:af:d3:b5:6b:3c:84:41:5f:0d:36:1c:1d:33:51:
fe:58:f1:74:22:ad:04:0a:47:c1:ce:93:3d:cc:0f:66:cb:57:
25:19:a6:50:6c:f6:88:36:d9:e2:f8:ad:94:a0:20:ca:e3:1f:
41:0e:05:de:87:33:ee:dc:5b:7e:fd:a1:f9:f4:45:d2:d2:fc:
ef:a9:d7:d0:9f:1a:04:6d:66:ec:ba:e3:80:f5:42:56:4d:98:
84:c0:30:a5:0a:37:ad:15:fd:33:33:3a:7a:63:ea:57:12:17:
80:61:6d:d8:94:ac:34:76:79:61:b8:6e:fc:b0:e2:8a:ca:2a:
b6:5e:13:71:6d:56:46:09:0a:e5:47:39:ff:fb:50:96:5b:07:
97:c7:5a:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:22:00 2025 by rpki-client