Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3/c29cd6d6-48c5-3504-be27-36da993c905d.roa
File: c29cd6d6-48c5-3504-be27-36da993c905d.roa (raw, json)
Hash identifier: 7p7+apozRdv1oyUl3k9eSyi3HGU4pCeRVamR+zxWZLc=
Subject key identifier: 06:E4:67:CD:66:1A:66:59:92:06:42:55:0A:6D:F0:22:5C:DF:FB:AD
Certificate issuer: /CN=7daa4589-66d8-4675-8538-e075ba80ecd3
Certificate serial: 010D0C9F43285848CC7B94628F078CA758C29920
Authority key identifier: BF:D4:FE:F7:0A:A9:40:EC:B8:54:09:F4:36:9B:34:3F:86:5A:0A:02
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3/c29cd6d6-48c5-3504-be27-36da993c905d.roa
Signing time: Fri 07 Feb 2025 02:00:39 +0000
ROA not before: Fri 07 Feb 2025 02:00:39 +0000
ROA not after: Thu 08 May 2025 01:00:39 +0000
asID: 19054
IP address blocks: 2620:133:8000::/48 maxlen: 48
2620:133:8001::/48 maxlen: 48
2620:133:8002::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:cc:7b:94:62:8f:07:8c:a7:58:c2:99:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7daa4589-66d8-4675-8538-e075ba80ecd3
Validity
Not Before: Feb 7 02:00:39 2025 GMT
Not After : May 8 01:00:39 2025 GMT
Subject: CN=7834a5a7-8435-45a3-87d0-d687361c2e2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:6b:f2:1e:64:4d:5a:5d:0d:28:87:ed:0f:f1:
aa:7d:bd:6a:29:19:44:1d:03:15:fc:c7:cf:28:f6:
a2:d2:df:a2:70:e0:49:c0:46:92:1a:d0:33:fc:fe:
f5:01:9a:9c:fd:9b:39:4e:c1:88:57:8a:89:17:74:
79:fe:2d:ab:50:03:57:4b:76:eb:6f:f4:c0:95:98:
78:74:82:e0:67:42:ef:f4:04:4a:d0:5f:a6:e8:01:
1c:0c:e2:7f:4b:83:8f:65:5e:e0:46:81:10:59:b6:
93:f0:3d:da:5f:b8:37:a8:99:2c:fb:cb:e7:56:1f:
1f:10:2e:88:32:61:c4:96:17:ea:dd:2f:f3:da:c3:
68:86:13:8f:fd:39:8b:26:e3:51:ac:82:e7:35:ba:
d0:e7:d1:3b:c9:bc:66:6b:ad:40:41:5c:d2:69:cd:
8b:94:3f:66:1d:86:80:56:4c:c0:bd:9f:3f:4f:39:
b2:d9:4a:7b:01:cd:95:7c:24:81:6d:f2:a4:eb:63:
03:d8:02:b1:c4:b2:7c:62:0d:25:71:f7:b0:df:7a:
c1:bd:9c:1c:50:df:42:43:c3:45:66:c9:c1:4c:f4:
0c:74:60:9a:a8:2b:64:b8:7c:fc:2c:8a:d7:97:08:
59:0a:08:0c:14:30:e5:57:79:78:fd:b1:cb:cc:de:
21:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:E4:67:CD:66:1A:66:59:92:06:42:55:0A:6D:F0:22:5C:DF:FB:AD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3/c29cd6d6-48c5-3504-be27-36da993c905d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3/7daa4589-66d8-4675-8538-e075ba80ecd3.crl
X509v3 Authority Key Identifier:
keyid:BF:D4:FE:F7:0A:A9:40:EC:B8:54:09:F4:36:9B:34:3F:86:5A:0A:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:133:8000::-2620:133:8002:ffff:ffff:ffff:ffff:ffff
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2a:50:cd:40:c0:e3:09:f3:2d:a5:a6:40:85:e2:7a:62:23:e2:
78:d1:8f:84:7d:ed:ae:5c:3a:b4:ce:07:85:1a:8a:f9:f5:f6:
cd:ad:97:8f:11:ed:cd:8d:b3:d6:a1:23:d2:d1:38:9b:d0:39:
66:89:41:7f:8d:f6:ca:dd:3f:60:b6:58:40:b4:75:1f:68:ba:
11:b5:0f:50:6c:9f:b1:be:7d:63:57:aa:7e:68:ac:fb:08:99:
bf:d9:ee:83:20:7e:5e:d0:ee:87:ef:5b:8f:2f:7c:51:35:f7:
2b:e7:7d:b0:2b:98:2d:dc:d3:46:01:28:9b:e6:bf:da:39:16:
f2:6f:79:82:35:fd:fd:3d:28:53:95:c3:d9:21:f1:a4:b7:54:
82:2a:e9:42:c4:f8:42:e5:76:ab:ff:6e:a9:54:a4:44:28:81:
2d:bf:d5:3d:86:ea:4f:e1:a9:b2:ce:da:d7:41:ee:42:f7:d4:
b1:af:e7:44:77:f2:a9:4d:b9:0d:5e:09:3e:6b:67:7d:83:91:
e8:bd:74:05:52:b1:4f:3b:eb:99:50:67:f2:e6:63:82:02:d3:
f3:3b:46:74:5a:ab:13:53:53:f2:8f:3d:24:24:1d:bc:d9:5c:
1c:cc:2f:27:81:81:3e:cd:39:b7:ab:17:f8:e4:9b:7d:0f:e1:
b4:33:8a:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:17:32 2025 by rpki-client