Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/0ff47d67-feb6-3e72-bdff-b2b591682033.roa
File: 0ff47d67-feb6-3e72-bdff-b2b591682033.roa (raw, json)
Hash identifier: mKsVLemOFCNEDylRr2x99ooB6jK+6R08+Sd8rZOcPHs=
Subject key identifier: AC:1A:E6:76:D5:F1:7D:AE:1D:C3:00:5D:27:4A:24:6A:B7:A3:19:85
Certificate issuer: /CN=fd356b15-92b2-4e72-b8d9-fa490480d177
Certificate serial: 010D0C9F43285848F65BCDED4D127DEDAC439200
Authority key identifier: 1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/0ff47d67-feb6-3e72-bdff-b2b591682033.roa
Signing time: Sat 22 Feb 2025 02:00:38 +0000
ROA not before: Sat 22 Feb 2025 02:00:38 +0000
ROA not after: Fri 23 May 2025 01:00:38 +0000
asID: 30133
IP address blocks: 2001:500:9a::/47 maxlen: 47
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f6:5b:cd:ed:4d:12:7d:ed:ac:43:92:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd356b15-92b2-4e72-b8d9-fa490480d177
Validity
Not Before: Feb 22 02:00:38 2025 GMT
Not After : May 23 01:00:38 2025 GMT
Subject: CN=85201d2d-ee6b-47e6-a4e0-d444eb9fc261
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:9b:1a:65:02:02:46:11:aa:ba:cc:7f:bb:f6:
4d:15:0f:55:5b:f4:bb:2b:fb:a6:ad:ed:7f:a3:16:
12:82:de:f7:09:35:f9:fa:7f:cd:2e:23:d7:af:ac:
ba:07:2a:90:a3:f2:e4:7b:08:c2:c2:b7:81:cf:ea:
3b:73:68:e5:44:25:05:d9:70:89:c7:57:c8:b9:4b:
16:c7:f6:28:9e:67:41:26:b9:cb:fa:6b:f3:4a:67:
7a:cf:ad:3c:0e:e2:a2:40:d8:d5:b3:d4:5c:8c:4e:
8d:4f:f1:6f:06:f9:39:31:34:8e:09:73:2b:1f:fd:
62:ec:4d:42:dd:cd:de:90:99:ac:20:41:56:5b:af:
91:5e:f9:cb:9d:10:fa:75:d2:f0:9f:76:dc:50:00:
82:0e:c0:ea:33:48:e2:f4:2e:ce:f5:8c:c6:10:a2:
cf:0b:16:6c:be:6f:c1:16:fc:bd:1a:92:35:a1:48:
2f:c8:8b:56:8f:bf:3a:93:d0:80:16:bd:32:12:2f:
83:6d:ff:5a:71:0e:fc:b1:bd:d3:e8:89:41:6e:ff:
95:05:6b:ca:56:db:2b:72:3e:e6:a9:23:23:df:f9:
95:58:68:3f:a6:fb:07:a6:86:bd:21:47:19:e6:43:
a7:3e:73:e5:7c:8e:aa:15:53:d2:44:52:d9:88:f6:
d8:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:1A:E6:76:D5:F1:7D:AE:1D:C3:00:5D:27:4A:24:6A:B7:A3:19:85
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/0ff47d67-feb6-3e72-bdff-b2b591682033.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl
X509v3 Authority Key Identifier:
keyid:1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:9a::/47
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
38:34:b2:c9:fc:b5:00:eb:94:82:d9:29:c0:c1:26:bc:e0:c6:
81:d4:ea:b4:79:0d:ba:ae:90:f6:07:51:ef:bf:17:57:cf:9a:
a8:e0:90:02:cc:b0:5b:47:ed:4e:05:3b:7f:50:50:fa:8b:f2:
8b:2f:7a:4a:21:3c:42:83:3d:49:1a:ba:c6:8f:1e:05:4f:2f:
a0:19:12:91:11:46:06:e3:96:1e:ea:5f:a2:0a:0b:ae:eb:28:
b4:a8:c7:56:9b:75:e7:a4:d9:ca:17:fc:f6:ee:ed:17:97:04:
68:22:94:3e:04:a6:1b:38:de:6f:21:c7:8c:29:cb:f2:de:98:
31:c3:5a:a6:ba:4d:1b:73:d5:7d:26:a2:c5:3c:e5:71:15:71:
c9:0d:56:ea:ba:0d:c9:43:47:cd:0d:fb:72:a7:70:cd:d6:41:
6e:b5:20:ad:80:28:63:6a:33:65:f5:63:67:bd:45:3f:9b:8a:
9e:2b:16:bb:90:a2:74:78:ea:9d:ea:ad:71:db:ad:44:ed:1b:
35:f7:d3:0e:d9:8f:a5:86:3a:f7:f0:14:12:17:08:25:00:0e:
88:69:cb:62:ce:f9:d6:e0:21:ec:0f:14:fa:42:68:cc:3c:5d:
3e:d4:8f:ba:4e:16:94:8f:e5:8c:7f:d7:d6:8b:4d:1f:6a:89:
93:1b:40:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 03:41:45 2025 by rpki-client