Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/d3b9852b-2053-3254-ba51-db1cf7758052.roa
File: d3b9852b-2053-3254-ba51-db1cf7758052.roa (raw, json)
Hash identifier: A4HJu5kqX6g5a12zyo7rtyOZ63E1ocqBmgQan0IbSek=
Subject key identifier: 35:2D:56:2A:D1:85:E6:CF:41:17:06:24:28:77:BE:19:E1:CB:6B:1F
Certificate issuer: /CN=208edf3a-73a5-4614-9c76-5702d5c88977
Certificate serial: 010D0C9F43285849287E5EAC2129E62065CED500
Authority key identifier: 8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/d3b9852b-2053-3254-ba51-db1cf7758052.roa
Signing time: Wed 12 Mar 2025 01:00:39 +0000
ROA not before: Wed 12 Mar 2025 01:00:39 +0000
ROA not after: Tue 10 Jun 2025 01:00:39 +0000
asID: 398549
IP address blocks: 2605:dd40:8260::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:28:7e:5e:ac:21:29:e6:20:65:ce:d5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=208edf3a-73a5-4614-9c76-5702d5c88977
Validity
Not Before: Mar 12 01:00:39 2025 GMT
Not After : Jun 10 01:00:39 2025 GMT
Subject: CN=a76316bb-4f4b-4fbd-ad37-b13023f2432c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:38:27:c3:aa:c6:03:d3:57:9a:de:53:f5:23:
13:02:d5:b8:91:3e:ee:a2:be:06:f1:de:df:10:02:
31:4b:70:df:17:24:4c:ad:b9:42:97:09:43:d2:86:
87:d7:a4:81:86:da:b2:df:4b:f2:0c:e6:32:a1:7c:
9f:a1:0e:cc:b3:58:43:7d:64:90:36:1d:c7:d0:37:
cb:40:b5:d0:89:a6:57:f3:66:2a:70:d9:2c:b2:02:
97:90:6d:2a:e7:06:01:97:78:b7:28:4c:79:85:a8:
76:74:dc:1b:99:41:98:e7:5e:78:11:61:86:a5:58:
4f:1c:92:b7:bf:aa:92:72:ed:a8:c4:06:a1:7b:f2:
b5:22:af:da:67:63:3a:bd:63:fd:44:fc:16:b3:c3:
50:5c:18:22:a5:8f:2e:c3:f9:5b:a4:9a:16:d3:2e:
de:f0:53:42:5d:20:4f:2f:90:e2:ea:f4:d7:7d:7c:
1e:c0:ef:8b:2a:53:ee:0e:27:5f:96:cf:59:69:dc:
83:e6:ac:94:33:ca:20:b4:c0:7f:48:13:1a:d3:29:
7a:3d:e1:3d:ea:96:32:ec:2a:21:0d:99:7d:05:19:
72:1a:78:bd:9c:dc:72:ff:ac:85:a4:50:58:77:20:
4f:d6:6d:1b:4e:f4:ea:ab:3a:54:1d:0a:01:a7:5a:
f6:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:2D:56:2A:D1:85:E6:CF:41:17:06:24:28:77:BE:19:E1:CB:6B:1F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/d3b9852b-2053-3254-ba51-db1cf7758052.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.crl
X509v3 Authority Key Identifier:
keyid:8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer
sbgp-ipAddrBlock: critical
IPv6:
2605:dd40:8260::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0f:62:d0:7a:0d:17:9b:47:6c:97:b3:d2:e4:46:e5:93:d8:fb:
bb:33:00:b3:8e:e5:02:a2:cc:d3:a3:62:4d:6f:b2:b4:fd:0e:
fe:1c:e8:0f:08:14:9f:0d:1c:f4:af:e5:ff:e4:ee:fb:0f:08:
e0:f8:24:b4:e6:37:b6:1c:86:51:80:0d:4a:fb:ce:f2:4b:30:
ff:6a:24:d1:b8:1a:48:6c:2c:d5:ca:74:26:d7:4f:e2:86:76:
11:0a:84:23:af:8a:39:16:af:8a:81:ad:38:ad:b9:e2:64:39:
54:78:7b:e0:90:51:a4:03:0b:2c:b0:58:48:b2:d5:b7:fd:31:
56:94:a8:45:db:b2:0e:3a:35:91:47:da:5b:75:c5:fa:ea:7e:
16:51:37:f3:af:fe:cd:1a:ea:04:7b:79:4e:32:04:1a:c1:a1:
13:37:86:01:e0:b2:45:a0:8c:71:b1:93:e9:d0:50:4b:6b:ee:
74:68:51:56:d6:54:02:a2:dc:60:3b:44:98:01:3e:a7:65:e1:
a9:38:b3:87:12:65:9a:aa:2d:55:31:d8:70:cc:32:85:cf:65:
ae:19:49:7b:29:06:1d:9f:13:e1:cd:bd:4c:79:03:84:4e:56:
20:ea:4f:49:47:11:f3:f4:7e:3d:f2:2a:84:de:54:a1:26:c6:
19:03:7c:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:20:22 2025 by rpki-client