Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abc30cda-3b3f-4e8e-a687-b20d5448a4e7/4001cb3a-e206-32d5-9c9a-bd86ac3a6365.roa
File: 4001cb3a-e206-32d5-9c9a-bd86ac3a6365.roa (raw, json)
Hash identifier: SWgk8z2KICPs5QOkbrFfG/HP/JJbkmf1i8um3iLK8Vs=
Subject key identifier: A8:A0:64:E9:E4:A3:8E:EF:51:48:4E:59:7C:D3:15:46:6C:C8:60:CC
Certificate issuer: /CN=abc30cda-3b3f-4e8e-a687-b20d5448a4e7
Certificate serial: 010D0C9F43285848DF9D75D93E136760F973EA80
Authority key identifier: 5A:33:54:71:2D:81:E3:FF:01:05:04:F9:2C:0E:5F:E3:90:36:BC:C1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abc30cda-3b3f-4e8e-a687-b20d5448a4e7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abc30cda-3b3f-4e8e-a687-b20d5448a4e7/4001cb3a-e206-32d5-9c9a-bd86ac3a6365.roa
Signing time: Thu 13 Feb 2025 22:29:25 +0000
ROA not before: Thu 13 Feb 2025 22:29:25 +0000
ROA not after: Wed 14 May 2025 21:29:25 +0000
asID: 398325
IP address blocks: 2605:e040::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:df:9d:75:d9:3e:13:67:60:f9:73:ea:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abc30cda-3b3f-4e8e-a687-b20d5448a4e7
Validity
Not Before: Feb 13 22:29:25 2025 GMT
Not After : May 14 21:29:25 2025 GMT
Subject: CN=d4faf68f-3bad-4850-b385-6fa99dd6e61f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:14:a2:82:14:eb:42:e0:e0:4d:32:71:e8:96:
49:be:c6:74:79:d2:7e:36:ed:50:5b:a3:94:f9:9a:
13:84:b7:df:c4:4d:97:90:5c:7f:a6:6a:4d:d6:67:
6e:28:b9:ca:ae:a3:18:f7:ef:cc:be:6c:d5:05:ee:
89:1f:99:4a:30:e1:87:c5:5a:89:bd:70:82:69:e6:
db:ac:05:59:59:d1:f6:ff:6b:64:71:dc:56:f6:53:
2e:d4:ac:f0:88:80:99:a2:41:0f:63:c1:f9:6a:a3:
84:cd:84:d6:19:6f:6e:b1:26:fe:a0:71:b4:dd:12:
ec:c5:82:c6:0e:6c:f0:f5:16:45:24:f2:04:24:92:
7d:1e:b2:c9:70:d4:d9:52:a9:9f:94:66:63:02:ec:
b4:4d:42:f5:cd:67:97:c7:6f:f4:24:de:36:f7:65:
c1:34:cf:75:22:79:c1:96:29:f4:8d:44:cd:74:ef:
48:4d:22:fc:38:fd:77:f2:f7:aa:4b:92:a0:0d:36:
55:67:16:c5:3e:69:92:ef:39:ab:29:1c:b8:99:f9:
1f:8f:0a:c3:0f:53:1e:c0:60:98:80:bd:92:89:f0:
68:49:72:4d:6c:84:61:43:22:8d:0f:54:25:36:19:
da:ba:72:b4:42:d2:dc:6c:11:d6:c7:df:9c:ef:22:
58:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:A0:64:E9:E4:A3:8E:EF:51:48:4E:59:7C:D3:15:46:6C:C8:60:CC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abc30cda-3b3f-4e8e-a687-b20d5448a4e7/4001cb3a-e206-32d5-9c9a-bd86ac3a6365.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abc30cda-3b3f-4e8e-a687-b20d5448a4e7/abc30cda-3b3f-4e8e-a687-b20d5448a4e7.crl
X509v3 Authority Key Identifier:
keyid:5A:33:54:71:2D:81:E3:FF:01:05:04:F9:2C:0E:5F:E3:90:36:BC:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abc30cda-3b3f-4e8e-a687-b20d5448a4e7.cer
sbgp-ipAddrBlock: critical
IPv6:
2605:e040::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
54:09:13:04:84:51:00:63:a9:87:6b:a2:56:93:a1:b5:30:14:
a2:9e:a0:c6:2b:ec:5e:b7:98:c0:e4:7c:4a:e7:5b:88:20:07:
b2:e7:f2:27:3f:ea:ca:f3:5b:cc:4b:4a:ec:71:34:28:c4:78:
25:b1:40:03:6e:58:f9:c2:4c:4e:b1:0d:e7:c8:7e:79:d9:12:
d3:d3:10:28:dd:a5:b1:9e:8b:90:9a:e7:fb:0c:68:43:3c:ad:
5d:68:e2:e5:04:88:6c:38:b9:2c:bd:b3:4d:29:67:9d:f1:2e:
0a:69:00:fc:c0:93:73:94:47:a0:bb:38:64:2e:a5:75:0f:02:
98:08:71:ff:d6:33:16:9e:45:e7:6c:76:7c:86:ae:b7:69:4f:
d3:1f:82:98:43:8a:3c:28:cf:4e:84:d5:f4:eb:70:d1:c1:1a:
d9:0d:1b:69:a5:3f:5d:b3:c7:49:9d:b8:eb:f1:02:a1:f9:74:
16:fc:96:1e:4e:30:fb:e1:84:08:f1:fb:d8:64:aa:dc:1b:15:
c7:5f:a4:bc:d8:53:63:e6:9a:b2:e1:82:17:d9:48:bb:e8:f2:
ac:5f:f6:92:5a:c7:fd:9a:9d:81:dc:b2:0b:59:e1:cf:54:03:
a3:ab:6e:63:a3:67:36:89:7c:20:c8:03:a0:96:19:b7:9d:36:
0a:73:2e:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:00:27 2025 by rpki-client