Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/baf67ca6-4645-3e8c-b1f1-8b1cc93cfc8b.roa
File: baf67ca6-4645-3e8c-b1f1-8b1cc93cfc8b.roa (raw, json)
Hash identifier: NDNobb1YabCfb/+FIqbtOr1PU1VxsNYSDp2H3mxrmLs=
Subject key identifier: A0:87:51:54:0D:A0:3A:D0:A0:B5:BC:D9:5A:1D:51:D3:0C:CD:F6:97
Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Certificate serial: 010D0C9F43285848F65BEA3732CD98815AC67E58
Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/baf67ca6-4645-3e8c-b1f1-8b1cc93cfc8b.roa
Signing time: Sat 22 Feb 2025 02:00:38 +0000
ROA not before: Sat 22 Feb 2025 02:00:38 +0000
ROA not after: Fri 23 May 2025 01:00:38 +0000
asID: 394380
IP address blocks: 2607:f5b5:2::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f6:5b:ea:37:32:cd:98:81:5a:c6:7e:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Validity
Not Before: Feb 22 02:00:38 2025 GMT
Not After : May 23 01:00:38 2025 GMT
Subject: CN=4086dd76-5360-4905-b7bb-3607d2627ac8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:72:d1:e3:05:c2:e6:a7:b6:5f:4f:04:41:31:
27:52:43:e8:b1:ac:c6:2b:dc:d8:fb:dc:fe:f4:7b:
c3:24:bb:6a:fd:f0:ec:63:22:9e:0c:61:ae:9e:2b:
ba:72:da:e4:49:2e:90:80:ad:6c:90:88:ce:c9:57:
3c:66:90:18:4c:7c:b3:b2:62:d0:fe:e0:88:f6:c1:
52:b2:c2:eb:36:cc:ef:21:6e:7f:ca:29:3a:62:ed:
2b:ff:d1:31:8e:ca:a8:8a:8f:7d:de:e8:9a:8a:24:
5c:a0:79:13:bb:0e:e4:12:22:31:7c:41:dc:1a:38:
d3:2c:b5:0c:3d:40:03:96:23:9f:b0:36:8e:a0:1f:
5f:33:07:e1:2a:5a:6b:21:d9:59:1b:46:3a:5e:4c:
70:cf:79:b1:62:b8:3d:48:27:f3:ea:f0:d5:bc:4b:
ba:bd:32:eb:01:f1:1f:00:19:b7:90:d3:cb:56:0c:
c0:c0:ed:f7:dc:7f:8b:f9:97:83:e6:91:16:79:46:
f1:b3:b0:5b:6d:fe:46:78:82:71:47:43:f7:67:66:
5c:15:c2:82:42:f3:af:24:d4:26:4f:de:81:5f:b4:
97:ed:94:27:03:bb:b9:d7:0d:2a:d4:3a:c3:93:a1:
05:98:e8:25:a5:8f:a6:86:1e:f1:5a:4a:fe:f4:88:
09:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:87:51:54:0D:A0:3A:D0:A0:B5:BC:D9:5A:1D:51:D3:0C:CD:F6:97
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/baf67ca6-4645-3e8c-b1f1-8b1cc93cfc8b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl
X509v3 Authority Key Identifier:
keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:f5b5:2::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1b:4b:26:86:a8:40:41:53:0a:41:ac:11:08:c6:57:5f:9a:77:
73:f1:ca:55:52:06:c1:31:bf:f6:a2:1b:af:4a:1a:89:da:57:
d7:a7:e3:d1:67:b3:0f:05:a1:dc:bc:1d:1f:be:4f:4a:40:aa:
52:30:95:07:a3:74:0f:8a:0b:55:93:3e:df:ca:5f:31:70:f7:
58:c5:cb:56:58:70:b1:d3:71:33:90:b3:b4:fb:dd:b0:6b:64:
3b:9f:70:c4:5a:f3:4b:8e:e6:88:68:ec:b9:a8:31:7e:fb:ad:
8a:f5:c9:67:34:7c:c1:62:f6:08:3d:be:94:17:b0:47:29:d8:
43:25:39:4f:e4:57:54:a0:ff:b5:25:d1:17:13:09:f9:6d:14:
07:85:7d:e5:5a:26:60:1c:9f:73:12:4c:2c:c6:73:18:0b:65:
13:8b:56:8e:fb:08:7e:16:7d:8b:5f:47:3f:f6:ce:c6:fd:ad:
80:f0:16:f5:c6:53:f6:61:9f:6a:fd:85:b1:8f:46:4b:97:85:
fc:16:5c:30:1e:68:f7:eb:91:13:a6:f3:b0:12:17:26:29:34:
96:e6:9b:e9:58:ec:95:82:c7:5a:7b:c7:a6:69:7f:39:ff:40:
de:d7:ed:c7:f3:4b:7d:9b:e9:d6:c2:f6:bf:59:1a:c3:f2:be:
b9:4e:f0:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:58:21 2025 by rpki-client