Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/c1808995-a989-3460-84e1-9e3e553ab848.roa
File: c1808995-a989-3460-84e1-9e3e553ab848.roa (raw, json)
Hash identifier: dh5zKIOeFIHOiktJHVdW9M86vkvcRrLKptx+spWTZLo=
Subject key identifier: 02:34:B0:D0:89:9C:9B:2E:A3:D2:1E:2E:77:4C:9A:04:43:03:61:75
Certificate issuer: /CN=28aeee72-bc9c-4a01-a9f5-38a80ac84d52
Certificate serial: 010D0C9F43285848CB16516D36EA34E8F10EC880
Authority key identifier: 06:58:3B:EA:57:D6:D4:77:3A:5F:F1:0D:74:EF:6D:9A:EC:76:41:F5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/c1808995-a989-3460-84e1-9e3e553ab848.roa
Signing time: Thu 06 Feb 2025 14:00:52 +0000
ROA not before: Thu 06 Feb 2025 14:00:52 +0000
ROA not after: Wed 07 May 2025 13:00:52 +0000
asID: 30037
IP address blocks: 2620:10f:400f::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:cb:16:51:6d:36:ea:34:e8:f1:0e:c8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28aeee72-bc9c-4a01-a9f5-38a80ac84d52
Validity
Not Before: Feb 6 14:00:52 2025 GMT
Not After : May 7 13:00:52 2025 GMT
Subject: CN=7840fc30-912c-4bcf-a44a-e2abad58925b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:06:e1:e4:54:97:2c:50:0f:36:e0:a5:0f:58:
77:84:7d:03:89:fe:82:60:88:6b:9e:2a:82:a9:b5:
e0:8f:7b:82:0f:7e:10:1e:b6:8a:28:44:2b:0b:28:
84:32:ad:5a:fd:5c:91:9d:a1:9e:cb:40:00:05:84:
7c:f4:55:7e:48:05:37:04:26:b5:de:62:5a:22:5a:
92:9e:5e:09:3b:d6:cf:2b:36:91:ec:ca:93:67:f6:
1c:94:17:d6:ea:6b:f9:62:75:a2:4a:e5:f6:60:81:
6a:11:7b:62:2c:5d:d4:63:24:c0:3d:36:01:90:f8:
16:63:ba:a0:6e:69:63:5d:0c:c6:dd:5c:11:ff:1f:
ef:6f:9f:25:51:49:ca:00:ff:74:92:cc:51:2c:34:
e9:fe:2e:31:50:d8:c7:dd:fe:63:dd:cc:f3:bc:21:
5e:38:01:a6:30:cf:04:2f:22:6a:7e:f1:e6:c3:59:
b4:8a:24:1f:4b:65:2a:98:e7:8c:69:5c:93:8f:1e:
0c:58:aa:ed:01:13:d0:e2:46:c6:87:96:bb:07:dd:
3e:40:78:52:28:b2:41:fc:a4:e7:24:ef:02:6a:c9:
b9:de:87:bc:2d:01:91:b6:ca:ff:3a:c4:bd:3c:8a:
87:1f:72:35:61:2b:9b:f2:c2:ab:1e:29:86:54:b7:
27:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:34:B0:D0:89:9C:9B:2E:A3:D2:1E:2E:77:4C:9A:04:43:03:61:75
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/c1808995-a989-3460-84e1-9e3e553ab848.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.crl
X509v3 Authority Key Identifier:
keyid:06:58:3B:EA:57:D6:D4:77:3A:5F:F1:0D:74:EF:6D:9A:EC:76:41:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:10f:400f::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b1:9d:67:46:cc:37:7b:0a:84:0d:30:74:66:86:63:d6:dc:6a:
95:ff:6c:a2:95:17:98:6f:d5:3c:2a:25:66:49:09:db:6f:f5:
8b:30:16:70:20:23:6e:26:22:ca:0b:d9:5e:01:9f:bc:de:be:
f4:96:8c:7a:a7:92:2c:ed:e5:77:08:00:fe:34:6a:9a:8e:2c:
a5:e3:8a:64:f1:da:dd:86:06:60:71:d7:99:07:9f:2d:cd:2c:
50:8a:1d:ae:78:bc:93:a8:17:bd:fa:51:73:86:11:5b:4b:64:
ee:bc:c1:60:ef:da:99:30:e0:2b:b4:3f:8b:fb:1e:99:b5:34:
aa:66:27:c9:a3:44:22:8b:bf:4b:a1:53:92:1e:95:07:e2:a0:
fe:05:00:7e:9a:6f:25:b0:fe:fa:3f:b6:9b:fe:11:0d:98:82:
82:40:30:c8:fb:47:46:4e:cf:be:3e:05:47:fc:59:ae:51:fb:
5b:8d:2a:6f:0f:67:4e:85:c7:13:a3:1e:6b:28:ab:0b:69:cc:
77:b1:c2:ac:41:aa:c1:ef:a4:47:e4:d9:88:b5:5d:2f:98:a1:
a2:c0:26:88:b3:c3:06:b2:d9:79:35:89:7b:d9:4b:0c:3f:e3:
4a:06:a5:70:7a:bb:44:b6:c6:c0:7b:da:a8:ae:8d:b6:d6:a1:
35:f0:5c:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:42:40 2025 by rpki-client