Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/68e273c1-e39f-464b-8c1f-b45c8df2b148/9f0c18cc-5b35-3ce1-94ba-d1df388bff21.roa
File: 9f0c18cc-5b35-3ce1-94ba-d1df388bff21.roa (raw, json)
Hash identifier: vUrdkoRLp9pWEyG+W9qrLvaln2v/6Chm2StgekLXyMU=
Subject key identifier: FE:9A:7E:31:41:74:CC:67:9C:56:42:B3:22:07:26:53:61:7D:3B:A3
Certificate issuer: /CN=68e273c1-e39f-464b-8c1f-b45c8df2b148
Certificate serial: 010D0C9F4328584894A5E99E707BC4A052069F40
Authority key identifier: 4D:2F:8B:7D:51:9D:D1:11:01:55:3B:73:1B:DB:9A:7A:BE:62:BF:A5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/68e273c1-e39f-464b-8c1f-b45c8df2b148.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/68e273c1-e39f-464b-8c1f-b45c8df2b148/9f0c18cc-5b35-3ce1-94ba-d1df388bff21.roa
Signing time: Sat 18 Jan 2025 02:00:38 +0000
ROA not before: Sat 18 Jan 2025 02:00:38 +0000
ROA not after: Fri 18 Apr 2025 01:00:38 +0000
asID: 26886
IP address blocks: 2607:82c0::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:94:a5:e9:9e:70:7b:c4:a0:52:06:9f:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68e273c1-e39f-464b-8c1f-b45c8df2b148
Validity
Not Before: Jan 18 02:00:38 2025 GMT
Not After : Apr 18 01:00:38 2025 GMT
Subject: CN=6390cda0-5b49-48b8-a29f-0c6d12e5c40e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:b3:ea:1b:a5:17:90:e1:a1:98:97:c2:ca:8f:
3c:22:25:28:de:8f:bd:0f:95:53:74:d9:45:23:33:
e6:fe:40:e7:92:25:ea:2a:bc:81:ab:4c:92:53:35:
50:93:d7:5f:bf:6a:2d:ae:de:57:4c:61:3c:51:15:
bd:6e:9a:bd:e4:0b:f3:f4:28:e8:91:eb:c8:4b:d6:
e4:3d:f8:38:59:2e:b4:7b:63:cb:b1:16:d6:c1:b2:
44:a1:b7:ed:cd:66:8d:88:17:40:0c:fb:5f:64:e6:
cb:2a:d1:aa:f7:2d:b7:6c:c9:30:ae:9e:f2:6a:55:
a6:90:ed:25:d5:77:56:0c:eb:8e:79:58:23:b8:ad:
56:29:79:0a:9f:58:b2:f2:19:07:71:07:fd:3c:44:
e5:ee:08:b8:0b:52:47:40:52:a4:9d:fb:8e:ce:13:
9c:6d:d0:62:31:ef:5a:2f:50:e1:48:18:02:2d:ee:
57:00:5c:24:2f:48:19:06:89:c9:b7:cd:6a:20:ed:
43:cb:96:ee:67:0f:7c:66:94:78:a0:64:d2:03:57:
51:41:8d:50:e5:51:c3:42:62:39:50:6a:b4:b3:83:
1b:d4:9d:38:fe:2d:f7:bc:c2:e4:ee:53:50:61:72:
8e:ee:df:f7:50:dd:5f:fc:85:b3:9c:de:a5:9a:4f:
d5:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:9A:7E:31:41:74:CC:67:9C:56:42:B3:22:07:26:53:61:7D:3B:A3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/68e273c1-e39f-464b-8c1f-b45c8df2b148/9f0c18cc-5b35-3ce1-94ba-d1df388bff21.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/68e273c1-e39f-464b-8c1f-b45c8df2b148/68e273c1-e39f-464b-8c1f-b45c8df2b148.crl
X509v3 Authority Key Identifier:
keyid:4D:2F:8B:7D:51:9D:D1:11:01:55:3B:73:1B:DB:9A:7A:BE:62:BF:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/68e273c1-e39f-464b-8c1f-b45c8df2b148.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:82c0::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3a:c7:e7:50:f9:8c:72:c7:d2:51:b2:22:23:ce:30:65:40:27:
dd:b5:24:e0:86:72:72:43:fe:6b:bb:c2:72:c3:ec:b9:11:22:
9e:cb:db:ab:aa:2c:ed:cb:dc:78:2d:cc:36:e0:bb:08:61:4c:
93:65:3d:b5:29:d2:ff:09:ef:89:00:92:04:2a:00:2a:e6:b6:
45:e3:76:a6:6b:cf:4d:48:ff:ed:15:f6:c1:1e:a2:09:ad:0f:
19:ab:f7:66:b2:42:8c:6b:51:be:85:03:c2:d1:b4:68:c2:96:
84:77:a6:36:cd:61:6e:84:3d:ea:a4:b0:47:aa:d1:52:ff:97:
99:20:da:e5:81:52:b8:66:09:5b:f8:2a:03:0e:bc:99:eb:81:
5e:35:0d:f8:b0:a1:66:f7:29:96:fd:16:78:b5:75:83:6a:eb:
44:c4:28:59:e6:73:be:75:03:53:3b:4a:46:26:23:82:78:61:
95:7c:29:68:c3:f0:b0:aa:35:ea:44:40:f3:43:d6:7d:3f:4e:
cf:44:41:bd:a4:02:9c:3d:c5:5d:01:bc:be:ee:3f:a3:e2:0c:
ba:64:87:9b:00:ed:30:91:2d:69:c8:76:21:13:ac:0c:bc:d2:
7d:2c:22:9d:dd:77:ad:90:7f:6a:d3:b9:06:f0:ea:58:22:2e:
41:f2:46:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:11:29 2025 by rpki-client