Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/2abfd485-1f0e-3fc6-a7c1-dab12e475e81.roa
File: 2abfd485-1f0e-3fc6-a7c1-dab12e475e81.roa (raw, json)
Hash identifier: sZhljd1+f5wpaJF0Nn6Bw3QvNLiPlmoNR+rkOiPTJVQ=
Subject key identifier: 5C:0E:4D:D0:21:3C:CB:56:62:83:96:B8:36:15:01:40:71:AB:1C:30
Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial: 010D0C9F43285848E2D1A79AE52F7258FDEF0C80
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/2abfd485-1f0e-3fc6-a7c1-dab12e475e81.roa
Signing time: Sat 15 Feb 2025 02:00:39 +0000
ROA not before: Sat 15 Feb 2025 02:00:39 +0000
ROA not after: Fri 16 May 2025 01:00:39 +0000
asID: 3456
IP address blocks: 2001:1998:3000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e2:d1:a7:9a:e5:2f:72:58:fd:ef:0c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Validity
Not Before: Feb 15 02:00:39 2025 GMT
Not After : May 16 01:00:39 2025 GMT
Subject: CN=b7d06eb6-8d1d-464d-814a-fa846c5474d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:77:dc:3b:19:6f:66:12:cd:52:cf:b8:ac:d0:
5e:3b:cb:a1:79:d5:c5:86:a1:4b:69:4d:43:cb:8a:
f8:20:23:ae:ac:7a:2b:e8:e6:40:42:70:5b:c0:3e:
70:ea:1a:d5:ed:88:1f:51:07:35:28:44:80:4d:69:
52:cd:d7:8a:bf:3b:e4:39:c1:89:1e:eb:67:f8:70:
7e:a0:ec:8b:95:21:53:67:39:b2:6a:cd:0f:8a:15:
b4:2f:7d:31:86:fb:83:f4:ab:c7:c5:28:7d:86:06:
06:c5:9a:d8:ea:36:57:fa:6f:eb:19:98:7d:f2:38:
28:c1:37:41:ff:98:00:cc:3a:37:78:31:16:f8:39:
9d:fb:00:64:92:fb:1f:0d:a2:62:8e:a6:47:89:fe:
31:8d:2d:a8:db:af:8c:80:e1:4a:1b:8a:27:0a:ce:
d9:66:16:cc:19:2d:8f:f9:cb:e1:4f:8a:03:45:e2:
16:bb:24:c8:a1:41:56:ce:69:f9:ba:33:17:7a:7b:
14:36:b0:0f:c4:ff:32:4f:3b:c8:2e:37:0b:97:c0:
22:73:85:9e:66:06:37:25:a0:77:4f:82:5e:0b:60:
9b:8c:47:38:10:5e:51:ba:88:39:c2:98:62:7e:10:
4e:11:8f:32:40:77:c5:e1:70:92:6d:5f:8d:fd:b4:
99:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:0E:4D:D0:21:3C:CB:56:62:83:96:B8:36:15:01:40:71:AB:1C:30
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/2abfd485-1f0e-3fc6-a7c1-dab12e475e81.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
X509v3 Authority Key Identifier:
keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:1998:3000::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
52:6c:34:17:6a:54:82:de:31:1c:c2:31:fe:de:b6:de:a4:7b:
17:b0:76:90:cf:ab:7c:4d:90:da:58:79:f4:2b:76:cd:8e:8f:
a9:e2:57:1a:12:cd:0f:6c:8b:0d:c8:09:3f:e6:27:17:b4:24:
f0:e9:fa:d7:f1:45:44:03:9f:eb:34:9c:50:68:e9:09:d1:1d:
47:c3:09:0c:51:9e:cc:0d:27:42:cb:1f:67:b1:45:0e:84:39:
8c:60:41:18:87:18:45:9c:15:1a:df:b0:c2:ec:3a:e2:26:16:
9e:3f:61:be:85:d8:bb:fb:49:ca:e7:aa:d4:60:9c:eb:58:ee:
c6:d6:15:6b:01:ce:4a:7b:16:10:b8:3a:94:65:4a:8e:e7:71:
34:ad:da:71:5f:b3:26:fd:e3:6f:d1:2e:dd:7b:d2:bf:6f:54:
2b:c7:8d:f6:35:4d:3c:7d:08:6d:5f:89:15:ee:6c:db:45:13:
54:39:aa:7b:7f:a8:fc:dd:8a:f8:eb:a3:59:88:dc:88:5d:c0:
24:1e:37:99:3b:a4:27:48:bb:d7:53:f0:a1:18:57:3a:1b:1e:
04:36:d4:8e:0a:56:a6:30:44:d1:e5:a3:c6:da:2f:a7:cd:92:
93:e3:70:be:bd:08:7b:f2:c5:e1:72:90:03:46:f4:24:b1:9f:
e1:7f:1b:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:29:17 2025 by rpki-client