Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/6b4baea5-aef5-3944-a255-8ef52ec2f01b.roa
File: 6b4baea5-aef5-3944-a255-8ef52ec2f01b.roa (raw, json)
Hash identifier: 7t/RLgGzYdamqB7I++BA01K8bAU++H2r8Nl5y9IC5lM=
Subject key identifier: F8:74:52:32:84:E8:24:3C:1A:79:FF:EE:35:29:97:05:72:BD:69:C9
Certificate issuer: /CN=208edf3a-73a5-4614-9c76-5702d5c88977
Certificate serial: 010D0C9F43285849218404D2F70D222BFC33A310
Authority key identifier: 8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/6b4baea5-aef5-3944-a255-8ef52ec2f01b.roa
Signing time: Sun 09 Mar 2025 13:00:52 +0000
ROA not before: Sun 09 Mar 2025 13:00:52 +0000
ROA not after: Sat 07 Jun 2025 13:00:52 +0000
asID: 398549
IP address blocks: 2605:dd40::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:21:84:04:d2:f7:0d:22:2b:fc:33:a3:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=208edf3a-73a5-4614-9c76-5702d5c88977
Validity
Not Before: Mar 9 13:00:52 2025 GMT
Not After : Jun 7 13:00:52 2025 GMT
Subject: CN=41b62432-4644-45e4-aff7-d4d97da02408
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:19:b5:15:d4:47:9e:cb:f0:7b:67:b2:8e:1f:
b0:ac:3d:d7:f2:97:da:a6:58:77:a4:f3:6c:9d:9f:
ae:49:af:1f:02:7c:7a:c9:f7:58:18:f1:c8:81:68:
d6:6b:83:26:d6:57:18:ae:f4:59:60:e4:e4:26:66:
d4:32:1a:38:cc:e1:31:26:25:6e:df:c5:a5:43:b5:
b4:e7:8d:87:c0:ee:80:4c:10:2a:fd:87:cb:42:74:
37:08:38:3a:18:25:af:ea:e9:69:d1:61:f9:bf:4e:
52:7d:76:65:08:34:e7:55:f2:e4:91:89:81:a0:82:
06:e1:41:47:53:79:8b:7d:07:e6:b5:70:3e:ce:9e:
07:e1:c7:38:20:01:8d:70:77:79:3e:d3:ab:f9:4c:
6f:c0:dc:3f:cf:2f:fe:f2:1e:74:c2:b4:65:ce:05:
1d:cd:03:ee:1c:5c:33:86:71:2b:7b:5e:ac:55:ed:
19:af:fd:cb:ec:6e:a6:ef:77:dd:23:b4:83:4f:45:
6b:89:8f:63:c0:78:93:c8:06:66:a3:1a:87:f6:0c:
af:8f:56:71:33:6d:8c:b8:27:f6:c2:8b:f0:a4:72:
b4:bd:0c:20:d7:0a:90:71:b3:f4:ca:71:bb:e5:1c:
cd:78:49:7d:54:e0:7b:96:61:80:35:72:d5:fe:c7:
a8:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:74:52:32:84:E8:24:3C:1A:79:FF:EE:35:29:97:05:72:BD:69:C9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/6b4baea5-aef5-3944-a255-8ef52ec2f01b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.crl
X509v3 Authority Key Identifier:
keyid:8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer
sbgp-ipAddrBlock: critical
IPv6:
2605:dd40::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6b:42:14:30:03:dc:8d:f4:e1:5c:72:89:5f:01:4c:25:56:8c:
85:b2:b5:39:09:a1:93:89:74:4e:36:67:26:75:58:e6:db:f8:
77:23:e8:03:25:b8:28:d9:d6:14:59:78:89:3f:8d:e9:4a:e7:
0a:29:0d:8b:e2:c6:b9:0e:bb:05:f7:d2:88:6a:0a:a8:7e:17:
a6:2d:8c:05:39:0f:7a:b4:54:f6:d0:6a:93:01:9d:50:72:cc:
0c:99:35:5f:62:5e:55:be:77:63:23:71:95:52:df:f7:c7:1e:
89:d6:ab:28:04:df:44:e8:0a:2b:83:3e:c0:e1:71:2a:bc:61:
04:c1:77:31:c3:20:c8:e7:aa:20:66:56:25:71:cc:83:1c:85:
07:f3:3c:0a:d3:4c:5b:49:fe:32:f0:c2:44:6c:d9:ed:15:94:
03:d3:00:7e:e6:c4:6e:ff:44:5a:97:f0:8b:cc:34:3d:e4:f6:
7a:2c:d3:d9:cf:8b:2a:1c:bf:92:de:28:5a:8c:ee:2b:dc:cb:
ae:fb:56:a2:d3:57:a2:4c:35:5d:91:4d:c2:f8:c8:d2:14:9c:
65:26:87:1f:6e:ea:a1:86:2f:72:a6:32:28:8e:fc:45:6c:7f:
9f:17:f5:39:33:e0:02:97:37:4c:42:b1:1b:c3:fa:71:31:41:
40:16:6e:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:49:02 2025 by rpki-client