Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/70ecfc71-1f8a-3639-82b8-69b57cee073e.roa
File: 70ecfc71-1f8a-3639-82b8-69b57cee073e.roa (raw, json)
Hash identifier: eLUo4Zi+AtC6y/lTmfBA/BW7U1V4xv0TAgTFvjEEDuI=
Subject key identifier: 35:E0:B0:FC:38:F7:98:27:63:DF:87:51:DE:23:1E:DB:E8:91:27:F9
Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial: 010D0C9F43285848B35B5F168EA4A5AB2E99C080
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/70ecfc71-1f8a-3639-82b8-69b57cee073e.roa
Signing time: Wed 29 Jan 2025 02:00:39 +0000
ROA not before: Wed 29 Jan 2025 02:00:39 +0000
ROA not after: Tue 29 Apr 2025 01:00:39 +0000
asID: 852
IP address blocks: 2001:569:6f09::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b3:5b:5f:16:8e:a4:a5:ab:2e:99:c0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Validity
Not Before: Jan 29 02:00:39 2025 GMT
Not After : Apr 29 01:00:39 2025 GMT
Subject: CN=3bde5339-bc72-498f-920c-4d775b5f4e48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:84:40:20:b7:38:ab:d1:2f:a6:81:93:87:55:
fd:4b:9f:0d:1c:1e:a2:22:00:f8:74:7e:63:1e:c9:
33:f1:48:c0:17:a1:36:85:9b:44:58:7f:22:ef:47:
b5:09:40:32:76:ef:b2:4e:0a:a7:1a:7e:cf:b6:a9:
5f:c4:aa:c9:28:97:a9:00:99:8e:a7:27:7e:f2:73:
56:9d:f4:20:e4:25:57:0f:19:58:9a:1e:14:a7:c3:
c2:21:e8:f6:07:fb:18:10:27:5a:b0:b5:5c:9c:06:
f4:42:ed:95:7a:e8:72:8c:68:7a:2f:b9:86:79:a5:
57:bc:75:1d:6e:67:a1:cb:ad:cc:6c:d8:6d:d1:76:
5c:c5:36:35:bd:ac:38:8c:bf:9c:11:0c:12:52:1e:
2b:86:5c:fb:b8:5c:81:44:70:e8:36:e2:4c:4a:49:
11:a0:02:4d:ba:85:67:bc:ca:ee:83:97:e4:dd:5e:
1a:bd:78:4c:0a:8c:6a:cb:5c:f6:17:32:05:31:f7:
36:23:0b:fb:37:39:ed:8a:fa:43:95:71:b1:d3:c7:
ef:5e:ae:84:a2:70:31:be:76:f8:bf:0a:84:e8:b6:
b1:d4:46:ea:d0:8e:cc:d0:7d:48:de:2f:17:ab:f4:
6b:8a:ad:67:f6:8e:26:4b:57:5d:f7:39:f5:7f:4f:
06:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:E0:B0:FC:38:F7:98:27:63:DF:87:51:DE:23:1E:DB:E8:91:27:F9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/70ecfc71-1f8a-3639-82b8-69b57cee073e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
X509v3 Authority Key Identifier:
keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:569:6f09::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
64:a2:96:44:06:46:0a:cb:97:74:54:e2:5b:a2:05:eb:54:c0:
ed:3d:e6:55:4c:08:10:76:74:ed:cd:5e:94:d6:1c:c5:b7:a2:
7c:13:26:9c:2d:39:54:f6:98:1c:9a:11:63:98:1e:5f:23:71:
11:a0:fd:a1:16:c0:a1:bc:ad:98:30:af:40:34:af:5c:f6:41:
11:d8:f7:c3:7b:7b:57:67:ce:d5:b5:ba:e3:37:3a:36:df:12:
76:6b:61:f4:af:9e:f9:86:53:d3:be:6a:1b:92:26:eb:f3:30:
c8:73:b1:76:55:1b:ee:27:f6:bc:db:f9:04:1f:23:e1:75:b0:
eb:0d:9d:e0:61:7b:37:71:7f:56:f6:d3:4b:44:3f:1f:ed:fe:
88:df:fa:7e:8a:f3:b1:b8:13:72:9a:e1:98:a5:b9:32:a4:48:
b2:e7:33:1f:e7:86:67:d6:28:1b:44:52:76:84:11:e8:ba:ab:
fd:db:d2:e0:c6:74:a4:c7:e8:2e:aa:44:b5:b4:0c:47:76:83:
0e:56:bb:cc:42:17:e5:4e:77:b8:b2:ae:2c:b2:95:05:7d:82:
7b:5f:79:51:56:1e:02:14:2d:40:12:96:e5:f1:1f:c8:bd:39:
42:3e:bf:bc:76:31:7e:54:60:a6:c3:ff:22:68:f3:40:3a:05:
f6:4a:90:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:02:09 2025 by rpki-client