Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/bca9f8c4-4f2c-39b6-bcc2-a136b7b16fa1.roa
File: bca9f8c4-4f2c-39b6-bcc2-a136b7b16fa1.roa (raw, json)
Hash identifier: xzwFdLaGHquBtJ2E3dUKBSDpdxfYpw9wBUFATmPX4jo=
Subject key identifier: 3A:D2:E3:53:3D:E8:FF:3E:45:70:22:6E:10:3E:45:1C:51:A3:96:95
Certificate issuer: /CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758
Certificate serial: 010D0C9F43285848EF61528FCB8CCAB5F6EFF180
Authority key identifier: 63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/bca9f8c4-4f2c-39b6-bcc2-a136b7b16fa1.roa
Signing time: Wed 19 Feb 2025 14:00:52 +0000
ROA not before: Wed 19 Feb 2025 14:00:52 +0000
ROA not after: Tue 20 May 2025 13:00:52 +0000
asID: 20940
IP address blocks: 2001:5a0:4402::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ef:61:52:8f:cb:8c:ca:b5:f6:ef:f1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758
Validity
Not Before: Feb 19 14:00:52 2025 GMT
Not After : May 20 13:00:52 2025 GMT
Subject: CN=da1ffdb1-77fb-479b-a0d8-8ed2df9565c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:a0:f8:4b:70:6f:c3:25:7c:84:f4:d1:78:8f:
f3:8f:d2:ab:35:b0:78:06:e8:be:70:7f:a5:74:77:
1f:80:24:5e:0d:a7:f2:05:f5:03:a7:74:70:76:5d:
d4:54:d6:49:40:35:21:ec:04:3d:d9:3e:1a:0c:d2:
e1:9a:4e:db:38:bd:ef:0a:22:5e:ec:95:e6:77:c1:
9b:38:ec:fc:14:02:73:01:f3:00:df:a5:c9:49:5e:
76:b1:eb:6a:9d:be:a6:11:aa:81:65:52:0f:98:fc:
e0:cb:f5:ab:5e:44:05:30:5e:a9:f4:ed:62:a4:05:
f2:e9:51:af:a4:67:34:2c:e3:0f:fb:38:50:40:09:
82:37:e7:9a:c9:2a:cb:a9:ae:35:ce:86:ea:e3:12:
bc:10:dd:11:36:2e:95:92:d7:f3:3b:97:78:53:32:
99:80:35:bd:b4:ea:8e:24:e5:61:8f:11:c4:a2:ef:
65:7f:be:0c:a7:28:1b:36:83:67:2c:a5:98:69:63:
50:55:97:cb:27:19:55:05:6b:a6:9c:f0:6e:06:c1:
5c:82:c1:d8:82:ef:64:69:43:f1:fe:a1:2c:f1:58:
e4:50:48:78:bc:ff:3e:f2:5e:1c:1e:ca:c1:56:e9:
2b:ba:f7:4d:01:80:1b:41:21:f1:9b:3f:75:03:59:
84:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:D2:E3:53:3D:E8:FF:3E:45:70:22:6E:10:3E:45:1C:51:A3:96:95
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/bca9f8c4-4f2c-39b6-bcc2-a136b7b16fa1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.crl
X509v3 Authority Key Identifier:
keyid:63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:5a0:4402::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
43:88:e5:3a:9e:0e:1e:47:d9:86:2e:aa:a8:34:cd:32:5f:53:
43:0a:96:e6:44:73:79:34:1a:89:95:41:5c:85:dd:21:e0:d8:
0e:04:a0:49:6f:2a:b0:45:5c:02:aa:6c:16:a6:42:41:fc:d9:
82:25:c4:96:65:e9:2d:1d:6d:fa:02:26:36:de:3b:4a:ff:06:
16:77:a8:1d:4f:6f:ee:5c:d3:f1:9b:64:2d:49:b4:ac:70:fd:
e4:52:af:38:df:91:e5:f1:e7:ba:48:81:78:c9:44:b3:8c:c4:
67:8b:1d:73:3d:c9:79:a4:34:6f:b2:3c:c6:bf:8d:c3:3c:2f:
e7:2f:4f:86:36:2b:54:28:d4:bb:31:b1:66:7f:9c:14:4c:49:
22:74:d6:7f:0d:56:fd:8a:20:6c:39:f3:59:b7:3c:9b:b2:ba:
48:89:75:77:0b:30:73:f3:45:a9:c7:8b:07:6a:e1:9f:6d:f2:
94:a8:1c:56:1b:ee:65:a8:d2:23:2b:b6:27:9d:93:7d:05:6a:
93:69:47:3a:3b:c0:5c:71:31:3c:e7:93:71:fc:9f:05:1d:9f:
b0:e7:ff:a4:05:79:35:58:cf:c6:cc:3a:3b:84:06:d7:e6:0c:
7f:fd:ef:8e:41:9c:59:df:11:a7:0c:17:84:b8:cd:06:8a:27:
ef:e3:57:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:38:03 2025 by rpki-client