Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/c20badee-9057-3bd2-9eae-6e452c4e55e9.roa
File: c20badee-9057-3bd2-9eae-6e452c4e55e9.roa (raw, json)
Hash identifier: jfDAyS+XaMzl3rjj8t+fzSBhKWH1PtYa+0JeaxunEGM=
Subject key identifier: 6F:99:0F:CE:7B:D5:34:27:8C:AB:4D:AE:AF:3D:B6:7B:B8:FE:B3:5B
Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial: 010D0C9F43285848B35B633D0CE6FA73C8916540
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/c20badee-9057-3bd2-9eae-6e452c4e55e9.roa
Signing time: Wed 29 Jan 2025 02:00:39 +0000
ROA not before: Wed 29 Jan 2025 02:00:39 +0000
ROA not after: Tue 29 Apr 2025 01:00:39 +0000
asID: 852
IP address blocks: 2001:568:201::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b3:5b:63:3d:0c:e6:fa:73:c8:91:65:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Validity
Not Before: Jan 29 02:00:39 2025 GMT
Not After : Apr 29 01:00:39 2025 GMT
Subject: CN=a745054b-4f19-44be-a540-3df6e3d45367
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:6c:20:7f:4d:c1:64:41:28:37:fb:ec:20:81:
31:17:71:b1:b4:f5:a1:32:a5:f0:2b:9f:24:28:98:
06:3a:8e:1b:1a:5d:da:2c:94:67:9b:d9:6d:7a:3a:
85:61:4d:aa:17:b3:a3:96:a6:99:30:b1:84:f8:27:
11:89:00:21:4b:5c:c9:a7:9d:ef:b2:1d:5f:84:f3:
59:59:2e:b6:04:cf:bb:7f:be:c9:b1:e7:30:d5:ec:
fe:59:21:59:2a:b4:b8:9c:a0:cc:97:4f:f4:54:4d:
18:90:aa:2c:98:3c:d6:94:17:a8:a9:44:89:a1:05:
92:32:6e:90:23:1e:5b:51:a2:7d:71:9b:a4:92:10:
f3:9e:51:ff:07:b4:13:b5:ce:ca:35:70:c1:1a:38:
b8:ed:ff:1e:fe:2b:bc:d4:93:cc:88:4b:c6:ce:f7:
04:3a:3c:59:72:dd:5d:ca:0b:5a:ab:13:6b:d3:46:
b2:53:8c:15:ed:91:cc:5c:7a:b4:f2:38:bb:fb:64:
fb:4e:c0:a3:ed:3d:3e:40:b3:4a:79:10:a5:29:ad:
ac:68:b1:a0:80:d2:47:5c:c0:fa:90:d2:25:d8:8d:
9e:cf:53:bf:83:0e:28:b0:ef:79:55:ba:c9:27:f1:
18:e2:8a:42:df:56:11:50:83:51:d9:d9:d1:6d:07:
78:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:99:0F:CE:7B:D5:34:27:8C:AB:4D:AE:AF:3D:B6:7B:B8:FE:B3:5B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/c20badee-9057-3bd2-9eae-6e452c4e55e9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
X509v3 Authority Key Identifier:
keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:568:201::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
98:f1:d2:b7:ea:cb:c4:da:a7:80:c4:58:1e:db:46:25:0c:65:
9a:d7:ad:f8:c1:62:99:6b:60:a4:e9:84:52:c9:61:00:58:a9:
5c:d9:16:a7:6c:89:be:26:e7:05:4f:bc:dc:37:e2:24:e1:ed:
9e:85:0b:bd:2d:b3:61:5e:b0:83:d1:83:3a:b1:9d:0c:49:a9:
75:f6:09:ed:57:1a:ad:15:f9:ca:dc:d7:21:d2:58:51:b2:95:
28:3e:3c:44:d5:5f:f0:1c:6b:ab:88:9c:c9:07:f0:af:06:5f:
ef:e5:00:4f:ed:da:f5:d5:d8:96:96:dc:53:20:e4:04:b4:e3:
d1:8c:66:91:cb:c5:89:0f:b4:16:dd:ca:f3:8e:5b:39:6b:3e:
33:0f:72:b1:be:68:63:ce:6c:5f:19:14:7b:09:5b:10:31:b7:
c0:a0:a4:fe:c1:ef:1c:01:ec:ea:59:b7:86:36:27:84:fc:fe:
f3:fc:59:99:90:8f:a4:2f:02:98:ae:9e:12:80:16:4f:ba:fc:
46:25:45:ef:9b:3d:34:c3:36:83:3a:17:39:f6:3b:31:15:26:
69:9a:77:ca:be:c4:18:2b:be:32:1a:42:5d:b4:1a:49:ca:22:
98:dc:d2:78:f3:36:59:65:8f:dc:7a:68:cb:3c:2f:ec:7a:0d:
73:90:40:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:58:53 2025 by rpki-client