Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4/a1982a37-b8eb-384b-8db0-0f83fdef21f9.roa
File: a1982a37-b8eb-384b-8db0-0f83fdef21f9.roa (raw, json)
Hash identifier: SdBYazwsuYC49TpkSgiO14Zp1kvX579q9YrKFHJSRxA=
Subject key identifier: 10:39:86:69:7C:B6:92:C2:E0:5D:7D:6A:B8:1B:F9:F3:E6:29:7B:FE
Certificate issuer: /CN=48f8534f-57cd-45ba-bfa4-ce60842463a4
Certificate serial: 010D0C9F43285848ADC6163D8379CD4739CBA400
Authority key identifier: E8:53:DD:09:72:55:3A:20:6A:9B:7D:EE:50:46:52:6A:5F:62:66:08
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4/a1982a37-b8eb-384b-8db0-0f83fdef21f9.roa
Signing time: Mon 27 Jan 2025 02:00:39 +0000
ROA not before: Mon 27 Jan 2025 02:00:39 +0000
ROA not after: Sun 27 Apr 2025 01:00:39 +0000
asID: 3280
IP address blocks: 2607:64c0::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ad:c6:16:3d:83:79:cd:47:39:cb:a4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48f8534f-57cd-45ba-bfa4-ce60842463a4
Validity
Not Before: Jan 27 02:00:39 2025 GMT
Not After : Apr 27 01:00:39 2025 GMT
Subject: CN=30fe0f9b-142f-4412-bf7c-f0e2b6a722bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ad:e2:bd:16:30:f0:69:b6:35:32:98:62:b7:
44:11:e3:8b:9f:fa:59:0b:87:86:72:4d:77:2a:0c:
a4:bb:29:00:9f:45:5c:40:4f:bf:b0:f8:0c:99:28:
b0:7c:38:62:82:cc:8e:05:f6:38:c5:e0:84:04:44:
99:a1:51:dc:15:af:35:d1:4d:93:6d:12:84:02:1d:
e2:26:20:f5:f7:58:4e:e8:fb:de:e7:13:3c:09:74:
1e:9d:3c:48:df:71:79:ed:99:87:23:be:71:58:3e:
bf:49:1f:a3:d6:26:fa:9e:3e:26:34:06:ad:e1:c7:
04:26:15:9b:26:31:af:80:bd:bd:ac:25:1a:26:b6:
ce:13:4c:19:2e:c8:3a:d9:b2:7e:40:33:d2:37:0e:
05:14:86:54:02:36:95:ff:3e:8a:f9:ac:c4:fc:8c:
91:24:da:24:13:0d:7e:19:c0:3a:41:12:30:1c:72:
d6:f2:6c:ec:c1:38:71:ff:a4:f4:b4:24:74:72:3e:
21:88:85:1d:78:90:fa:d4:02:67:06:2e:53:8d:b7:
68:db:99:83:62:11:11:fc:50:a4:1d:7d:6f:56:4e:
6d:e0:a7:18:00:dc:c4:88:3c:65:e4:01:76:9a:f2:
0c:05:d5:10:6b:fb:ff:0f:8a:db:e3:cb:cd:cb:aa:
65:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:39:86:69:7C:B6:92:C2:E0:5D:7D:6A:B8:1B:F9:F3:E6:29:7B:FE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4/a1982a37-b8eb-384b-8db0-0f83fdef21f9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4/48f8534f-57cd-45ba-bfa4-ce60842463a4.crl
X509v3 Authority Key Identifier:
keyid:E8:53:DD:09:72:55:3A:20:6A:9B:7D:EE:50:46:52:6A:5F:62:66:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:64c0::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6b:3b:df:a7:19:43:66:59:95:79:74:a1:66:86:f0:3e:f3:60:
ca:b4:42:fb:45:2a:b8:90:4c:fb:4b:d6:06:31:df:ca:62:4f:
fa:6b:87:36:8f:36:7a:3c:7b:58:5f:41:59:0c:3f:6c:35:38:
4f:bf:9c:d0:84:8a:d7:02:93:8e:44:63:50:fe:98:ec:3b:8b:
53:7d:45:98:c5:0a:c7:67:db:c6:5f:8d:05:1d:30:f5:a4:9b:
82:37:3e:fd:45:ef:4f:f8:48:78:b3:02:e1:4b:f0:b3:e9:1f:
e6:ec:19:d7:fc:64:99:24:56:86:c8:42:29:d0:f1:c6:c5:ef:
8c:87:4e:66:58:61:b1:c9:bb:61:0a:ea:91:62:87:99:27:bd:
b2:c6:38:1d:09:40:9b:bf:d6:cd:9d:2b:ee:30:b7:46:6c:2c:
98:fb:ce:44:9f:ff:e1:b8:04:e8:f1:08:23:c2:7c:d2:c2:e9:
f4:27:b5:0a:6b:15:ce:ae:ac:19:c2:a3:d8:dc:8e:f3:12:fd:
25:b4:de:f0:18:8d:a0:ec:50:43:26:7a:bc:e9:96:15:a8:e6:
f4:43:78:13:c6:21:78:01:8e:cd:3a:72:0b:04:16:83:6c:12:
d1:e5:28:18:f3:db:3c:3f:0e:ed:d8:83:ea:d7:68:3c:64:40:
20:39:cd:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:49:14 2025 by rpki-client