Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7/f49f0aa4-5b58-30cb-a1f3-d5e172e75f7c.roa
File: f49f0aa4-5b58-30cb-a1f3-d5e172e75f7c.roa (raw, json)
Hash identifier: okZPyJe7Z3DeMQ+r5wYJYHCk5OtSKCSAhVvuiwQ+TQI=
Subject key identifier: 01:15:F6:89:74:2C:5F:73:E1:9E:45:90:8E:6A:70:D6:27:12:0E:7B
Certificate issuer: /CN=0fe7804f-f16a-4f78-9979-6a8d5099e5e7
Certificate serial: 010D0C9F432858489E6B6958A1ED23D6B824A980
Authority key identifier: F9:55:C0:43:84:51:2F:06:CF:3A:B4:BA:91:F2:6A:C3:4D:A4:E4:68
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7/f49f0aa4-5b58-30cb-a1f3-d5e172e75f7c.roa
Signing time: Tue 21 Jan 2025 14:00:53 +0000
ROA not before: Tue 21 Jan 2025 14:00:53 +0000
ROA not after: Mon 21 Apr 2025 13:00:53 +0000
asID: 6315
IP address blocks: 2607:24c0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:6b:69:58:a1:ed:23:d6:b8:24:a9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fe7804f-f16a-4f78-9979-6a8d5099e5e7
Validity
Not Before: Jan 21 14:00:53 2025 GMT
Not After : Apr 21 13:00:53 2025 GMT
Subject: CN=91346906-920c-4f79-9bc5-44e7e487a028
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:65:0c:13:92:0f:05:97:ce:4d:c9:59:bc:3a:
3f:2f:26:d2:d8:1d:a6:ca:c1:bf:d9:5c:0c:b3:87:
2b:c8:a3:92:71:d8:8f:c7:01:6d:6f:e2:20:31:60:
80:5c:8b:9a:e0:6b:9b:76:61:fe:07:52:fd:c5:fe:
59:28:5f:b4:b4:8b:51:1d:c6:ea:20:83:50:56:ad:
26:68:36:10:26:1e:e7:8c:7c:2f:ca:0d:b0:3d:91:
60:f3:fb:c1:e8:d3:4b:59:7e:95:42:b4:a7:30:a7:
8b:17:41:b9:66:c7:57:1c:d9:1d:02:8d:da:4e:c0:
b5:30:5d:5b:5f:f9:be:ea:ff:fe:ea:0b:df:5b:5e:
89:8e:9e:fc:03:29:37:30:be:1d:32:c5:df:f6:b5:
59:5a:6f:b1:a4:fd:d3:b9:83:c2:e4:18:dc:44:87:
4a:d2:6a:40:d4:aa:2f:1c:09:28:cf:5e:77:98:8d:
b3:e4:2d:d3:0a:fd:bb:93:90:03:ce:08:5e:84:a9:
a9:55:45:c1:10:68:17:3d:ab:f7:5c:5c:f4:0a:b5:
c3:5d:32:8f:ea:4f:5b:1e:4f:5a:9c:1c:85:a7:1f:
af:d4:87:c9:9c:c3:12:e8:d5:c2:9b:f4:a6:96:a3:
c4:ed:e7:da:73:c7:07:d7:cf:ce:54:fd:6c:bf:2c:
ab:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:15:F6:89:74:2C:5F:73:E1:9E:45:90:8E:6A:70:D6:27:12:0E:7B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7/f49f0aa4-5b58-30cb-a1f3-d5e172e75f7c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7/0fe7804f-f16a-4f78-9979-6a8d5099e5e7.crl
X509v3 Authority Key Identifier:
keyid:F9:55:C0:43:84:51:2F:06:CF:3A:B4:BA:91:F2:6A:C3:4D:A4:E4:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:24c0::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
58:47:da:ac:50:37:9f:75:1d:58:3f:9c:ec:d5:e2:21:10:d3:
59:fb:55:b5:03:09:01:8b:16:a8:ea:3c:fd:a5:ef:82:2a:86:
fa:0e:c9:3a:99:ab:29:31:de:35:c7:c3:8d:f8:a8:81:71:d4:
83:68:c5:0f:f8:45:2a:2c:e9:db:e7:17:d9:f1:46:40:bf:8e:
68:90:dd:cd:75:e3:3a:34:47:1e:38:a9:e2:2d:6e:38:49:cd:
4c:e9:88:26:00:4f:84:b6:70:e7:0c:c4:38:24:71:1e:39:59:
53:48:33:bf:fa:44:bd:c1:e4:d5:bc:fa:76:17:e4:af:b4:54:
f3:5b:88:1b:3a:a2:36:6e:83:d7:4d:ec:a3:3a:d1:02:05:a0:
20:b4:76:ee:c6:ba:0a:6c:cc:b2:c0:34:ba:81:87:73:66:1e:
5f:9a:f3:6f:b6:4a:b4:5c:3a:47:d6:31:8e:4b:77:f1:60:b6:
c3:14:b7:43:cf:63:22:6e:1d:e1:b3:bb:bc:f4:4a:d8:cb:04:
3b:52:37:64:a0:27:a4:b4:93:91:ef:b0:c1:01:9e:cb:74:fc:
d8:f9:0a:25:9c:40:54:4b:ee:8a:39:34:48:25:fb:39:ac:b4:
30:37:b8:a9:fe:1c:cf:1d:c9:6e:97:0b:b4:9c:2c:fd:ab:2d:
ac:98:5a:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:02:08 2025 by rpki-client