Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1/bfc8160e-ea00-31d5-a587-02c976b74661.roa
File: bfc8160e-ea00-31d5-a587-02c976b74661.roa (raw, json)
Hash identifier: 8MX+S58wS3bAUn4cgM4DO4SpMuHZQ1GAQzNIc2bCBbQ=
Subject key identifier: 71:6A:97:11:EE:55:54:5A:79:7A:95:D4:F5:80:53:6C:92:DA:DD:E5
Certificate issuer: /CN=974309dc-20f5-4894-9707-f2e446573ea1
Certificate serial: 010D0C9F43285848A22B0A89543DDFA235C16980
Authority key identifier: F3:0A:72:2B:C9:79:15:ED:6B:77:2F:DF:BE:AC:07:8E:2E:A5:D5:E1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1/bfc8160e-ea00-31d5-a587-02c976b74661.roa
Signing time: Wed 22 Jan 2025 22:14:34 +0000
ROA not before: Wed 22 Jan 2025 22:14:34 +0000
ROA not after: Tue 22 Apr 2025 21:14:34 +0000
asID: 16509
IP address blocks: 2607:e740::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a2:2b:0a:89:54:3d:df:a2:35:c1:69:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=974309dc-20f5-4894-9707-f2e446573ea1
Validity
Not Before: Jan 22 22:14:34 2025 GMT
Not After : Apr 22 21:14:34 2025 GMT
Subject: CN=7100fdd1-f709-4015-b78f-56ee5fb0fc1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:25:6a:d5:60:d3:99:bc:2b:b4:28:72:4d:55:
fa:1f:d1:19:b8:0d:49:03:e6:27:68:17:2f:b0:1c:
01:67:53:fb:19:3e:e3:91:21:80:6d:60:ee:ec:37:
a6:ac:05:27:64:39:c5:5a:75:e2:eb:34:5f:38:2d:
08:06:48:78:a6:d0:50:a1:1b:b8:a9:8a:9a:31:c9:
04:a8:90:e6:9c:5b:26:09:35:a7:b2:ec:1d:01:6b:
f5:21:5e:92:28:43:ff:62:8b:8f:cc:ad:cc:51:15:
4b:2b:2e:f8:4f:c6:3a:dd:ad:7d:72:de:de:5d:9a:
f8:f7:22:3b:b2:53:d4:17:d5:c4:1d:0b:6b:29:bb:
f4:cb:40:6b:37:a8:d8:be:04:ee:fd:7b:57:f9:98:
26:ac:b9:7b:26:24:20:7d:56:b7:dc:49:f9:63:3c:
2d:3e:45:67:7c:ed:a6:f4:35:2a:e0:d8:e5:1f:06:
7c:70:4a:ce:bf:fe:dc:8b:85:c4:e5:b4:c6:8f:4a:
07:7a:a1:ab:0c:ae:d0:8d:0a:3f:be:49:22:46:a9:
81:19:ec:6d:68:5c:1d:d3:a4:af:6c:ea:19:84:93:
80:09:44:8d:38:36:c7:df:04:4b:60:10:f4:39:15:
52:eb:b2:db:09:c1:f0:ac:6d:3b:d8:3c:9f:b8:ee:
85:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:6A:97:11:EE:55:54:5A:79:7A:95:D4:F5:80:53:6C:92:DA:DD:E5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1/bfc8160e-ea00-31d5-a587-02c976b74661.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1/974309dc-20f5-4894-9707-f2e446573ea1.crl
X509v3 Authority Key Identifier:
keyid:F3:0A:72:2B:C9:79:15:ED:6B:77:2F:DF:BE:AC:07:8E:2E:A5:D5:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:e740::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
58:21:73:c3:10:32:2e:82:95:f7:d2:cb:bb:d6:28:aa:de:27:
41:4a:66:8b:55:45:b3:df:df:a9:ca:fe:18:45:fa:e9:a5:e0:
eb:33:ac:97:1a:8a:37:a7:24:8d:37:c5:50:12:15:7f:a0:a5:
84:a9:f6:a2:c4:58:69:05:8a:4b:db:38:23:ed:47:d7:d7:a2:
27:e6:bd:46:61:89:69:47:6e:84:b8:14:38:cc:bc:bc:e5:47:
54:ab:5b:1c:af:0e:2f:96:8c:f4:bf:78:8a:92:91:0d:06:a4:
8a:8a:0d:e6:0a:5d:38:20:cf:7e:17:e6:76:d4:6b:b2:11:39:
28:f1:8f:f5:48:a4:86:a0:6a:f0:0e:1c:ca:dc:d9:57:e0:ce:
e0:c3:ce:9c:77:49:d1:ff:8c:a1:76:c8:97:e9:5f:f0:56:25:
13:c4:12:85:e0:17:83:f6:57:fd:b3:c6:13:d2:d6:03:78:c3:
0c:72:e4:2f:37:9f:0b:1e:2b:54:d2:44:63:09:92:69:a9:18:
c3:a3:8d:c0:78:cb:49:36:c7:d4:da:54:c1:7c:9a:99:9c:6d:
9e:d9:8d:9c:8d:7c:50:94:23:bd:6b:ae:27:d1:94:7e:28:2e:
c7:18:e5:04:be:89:5e:59:94:99:1f:df:37:4a:a8:b7:19:7d:
df:04:7a:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:33:16 2025 by rpki-client