Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/7b1b00c5-7f65-3e15-8bb5-56a94dfa4365.roa
File: 7b1b00c5-7f65-3e15-8bb5-56a94dfa4365.roa (raw, json)
Hash identifier: bEQ0fOwwiytNgkBPbzmzKXPnVTRPUmbWOB1IJYcDy68=
Subject key identifier: 21:2C:A5:9D:A1:5A:FC:E1:D5:C7:E9:CE:D8:E8:E3:5D:C6:58:E5:22
Certificate issuer: /CN=6f3d25a0-f7e5-421d-8842-fc967bf08f72
Certificate serial: 010D0C9F43285848FD56A9C235729069DC9195C0
Authority key identifier: 57:D0:A4:F9:63:7E:3D:00:47:81:2C:DD:A6:7E:CC:7E:4E:BD:E9:AA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/7b1b00c5-7f65-3e15-8bb5-56a94dfa4365.roa
Signing time: Mon 24 Feb 2025 14:00:52 +0000
ROA not before: Mon 24 Feb 2025 14:00:52 +0000
ROA not after: Sun 25 May 2025 13:00:52 +0000
asID: 212149
IP address blocks: 2605:f440:b00b::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:fd:56:a9:c2:35:72:90:69:dc:91:95:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f3d25a0-f7e5-421d-8842-fc967bf08f72
Validity
Not Before: Feb 24 14:00:52 2025 GMT
Not After : May 25 13:00:52 2025 GMT
Subject: CN=60e8e58f-bd85-4df3-80e1-1e57ba58f7a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c8:61:79:d5:02:79:b2:38:52:9d:4d:2a:92:
5e:66:69:ed:04:76:f3:02:97:c6:e0:97:ad:76:d2:
dd:99:21:f0:ab:64:7a:86:44:75:8e:02:d5:70:40:
43:54:15:9e:6a:1b:24:7c:cf:4a:4c:77:d3:47:08:
b9:6e:7f:85:2b:49:6d:f6:63:ae:80:0c:f5:3f:fc:
0b:f1:8b:81:07:08:74:e5:a7:55:41:56:d8:44:01:
38:b7:30:5e:6a:7c:a4:e5:1f:7e:c3:6e:57:0e:bb:
13:7b:94:d7:ca:d9:17:2a:25:83:b8:95:cf:bb:56:
14:0c:bf:21:52:19:14:96:f3:4a:f7:9a:7d:ce:2d:
dc:68:11:ad:78:f0:77:22:5e:6e:e3:76:ba:52:e4:
61:80:70:13:f3:61:f3:90:ed:ea:80:06:73:55:cd:
f6:bb:34:8d:0c:02:ca:33:c3:b3:9d:22:66:df:f6:
13:34:f7:d8:53:57:93:ab:4f:e2:06:e0:6a:62:50:
d9:e5:23:4f:7b:41:5c:02:bb:f9:6b:6a:56:a2:1c:
45:14:01:0a:8b:40:e9:27:2c:db:e1:5e:34:bb:c7:
af:32:73:f1:77:61:f2:d3:90:bb:cc:26:67:a8:ce:
f9:30:de:da:a2:b8:dc:6f:37:b5:e9:c7:a9:47:c9:
f2:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:2C:A5:9D:A1:5A:FC:E1:D5:C7:E9:CE:D8:E8:E3:5D:C6:58:E5:22
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/7b1b00c5-7f65-3e15-8bb5-56a94dfa4365.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/6f3d25a0-f7e5-421d-8842-fc967bf08f72.crl
X509v3 Authority Key Identifier:
keyid:57:D0:A4:F9:63:7E:3D:00:47:81:2C:DD:A6:7E:CC:7E:4E:BD:E9:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72.cer
sbgp-ipAddrBlock: critical
IPv6:
2605:f440:b00b::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
01:82:be:0d:e6:5d:b6:9a:b7:4a:d6:5d:47:33:1c:5f:80:c7:
33:4e:88:ae:8c:fd:fc:03:97:25:bc:1e:b1:89:ae:06:3c:84:
c2:a3:d4:50:aa:69:2f:73:a8:7d:41:8a:8f:48:e7:70:b2:31:
6d:75:80:ae:0d:94:50:5d:a3:fa:b2:7f:7f:51:c1:83:ce:4b:
c1:d4:1c:97:d6:d3:9c:cd:95:ec:01:85:ce:10:49:8c:54:21:
3b:a9:72:a0:5a:45:97:ad:a0:a8:5a:0d:3b:5e:8d:13:aa:02:
ec:59:2e:29:8d:27:db:a1:8e:51:96:2e:cf:85:99:1e:89:fb:
e0:27:48:17:6a:3b:da:ae:c0:55:0d:59:35:45:bd:07:8f:03:
90:ea:e9:23:ef:eb:d6:5f:11:ea:d1:32:23:ed:c6:28:9c:4e:
80:ee:18:6d:20:d2:8c:df:3e:03:6f:42:ab:af:31:11:17:38:
df:3a:da:f9:12:61:e1:52:30:7a:5c:f2:45:b4:48:b4:c0:83:
b5:4f:13:2c:58:79:b4:11:0f:b3:a1:83:1b:9e:d1:39:20:97:
5a:81:fc:61:be:85:37:b2:c6:86:2a:f5:c8:94:bf:fc:51:64:
b3:ef:80:94:b3:83:e6:8e:a9:4f:73:52:c3:fa:6f:bc:32:4f:
db:ee:90:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:54:06 2025 by rpki-client