Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d169cca5-b6c2-41f4-a92f-e74d5713d2c1/d5daf9f5-1db5-37fb-be60-626d8a02b645.roa
File: d5daf9f5-1db5-37fb-be60-626d8a02b645.roa (raw, json)
Hash identifier: n2GsB4SkdwtGC1JMblRq6825DJNWBiYSy/HXDOz1rhI=
Subject key identifier: F6:A6:72:89:20:8F:88:A3:27:34:FE:B0:F5:44:3D:E0:33:E5:94:37
Certificate issuer: /CN=d169cca5-b6c2-41f4-a92f-e74d5713d2c1
Certificate serial: 010D0C9F432858489A3B4C5879D8649B7548AC40
Authority key identifier: BD:39:CD:79:F4:8B:24:EF:8F:69:8D:DC:3F:98:CD:0C:AB:81:F8:9A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d169cca5-b6c2-41f4-a92f-e74d5713d2c1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d169cca5-b6c2-41f4-a92f-e74d5713d2c1/d5daf9f5-1db5-37fb-be60-626d8a02b645.roa
Signing time: Mon 20 Jan 2025 02:00:40 +0000
ROA not before: Mon 20 Jan 2025 02:00:40 +0000
ROA not after: Sun 20 Apr 2025 01:00:40 +0000
asID: 395660
IP address blocks: 2620:133:b000::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9a:3b:4c:58:79:d8:64:9b:75:48:ac:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d169cca5-b6c2-41f4-a92f-e74d5713d2c1
Validity
Not Before: Jan 20 02:00:40 2025 GMT
Not After : Apr 20 01:00:40 2025 GMT
Subject: CN=18142a86-b4de-4d80-a594-1616488628fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:26:71:a8:8c:b4:b5:6a:76:d6:72:3f:59:5b:
b9:7c:84:e8:6a:23:99:66:e0:94:72:2e:fe:99:e9:
b2:64:89:1d:fa:ab:69:bd:cf:08:23:2d:5d:8c:b1:
eb:b5:06:4f:cc:71:8e:3c:db:ba:d7:68:08:e8:16:
cd:f5:50:d2:46:41:f5:da:12:85:49:f7:12:08:84:
47:b0:b8:c9:81:08:62:2c:04:db:f8:07:b7:b6:00:
20:5d:29:17:bb:c0:88:9a:a4:fd:09:9a:95:2c:0c:
0a:66:cc:74:e0:bc:36:81:1e:17:9d:d2:bb:37:35:
c0:55:0b:32:4b:48:e9:86:1d:dd:6d:f9:d8:c4:f0:
7b:20:e2:48:5c:e3:d8:2f:79:a9:7d:c8:d5:97:a8:
e5:ed:dd:ec:91:ae:4a:15:5c:c5:88:55:58:76:6e:
b8:f3:ac:3b:7f:eb:c0:d6:bd:d2:b8:f1:82:8f:de:
af:50:59:1e:9f:b2:94:97:c6:99:cf:65:b2:1a:bc:
35:b8:c6:69:0c:90:9a:b5:30:75:0c:90:d3:eb:f5:
39:99:74:0a:ca:da:f4:cd:6a:03:09:ea:f2:66:d0:
43:02:d7:da:ed:f7:48:f1:93:04:a9:1b:11:c4:b2:
1f:d4:ac:87:43:99:9e:d3:cb:24:9c:ce:59:88:14:
4a:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:A6:72:89:20:8F:88:A3:27:34:FE:B0:F5:44:3D:E0:33:E5:94:37
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d169cca5-b6c2-41f4-a92f-e74d5713d2c1/d5daf9f5-1db5-37fb-be60-626d8a02b645.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d169cca5-b6c2-41f4-a92f-e74d5713d2c1/d169cca5-b6c2-41f4-a92f-e74d5713d2c1.crl
X509v3 Authority Key Identifier:
keyid:BD:39:CD:79:F4:8B:24:EF:8F:69:8D:DC:3F:98:CD:0C:AB:81:F8:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d169cca5-b6c2-41f4-a92f-e74d5713d2c1.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:133:b000::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
96:10:f2:a4:c3:1b:04:bd:78:8e:df:11:2a:d2:86:6d:57:13:
3d:86:67:eb:8d:62:35:d4:76:8d:83:9f:52:6c:00:d7:78:ab:
17:ee:52:37:60:47:8c:db:12:24:aa:a3:f9:bc:1d:90:3c:4e:
04:5f:64:98:93:19:30:97:37:33:21:20:c8:93:43:9a:73:02:
c2:d8:ea:1d:d2:e0:31:34:8b:cc:7c:47:aa:61:58:8f:ae:bf:
87:60:0a:62:b6:69:57:68:20:cd:f8:40:8c:e4:6c:4a:9b:2b:
b8:62:09:e0:08:df:2a:c3:da:e7:32:c1:ff:68:44:1e:d5:12:
bc:ee:80:99:c7:ab:07:18:61:91:ba:d1:52:dd:4c:c6:d0:c9:
e3:87:a0:69:1a:b7:5a:31:24:2b:a7:3c:7d:46:83:b2:4a:42:
ba:d4:f9:a7:fd:63:d7:75:6b:b7:17:8a:63:49:ff:6b:8b:07:
fd:80:e9:73:bb:53:bf:ce:7a:4f:a0:58:0f:d9:26:20:48:b4:
62:68:bc:91:2e:ce:85:0b:11:8d:63:54:24:4a:36:5f:03:9d:
26:54:c6:74:96:87:0e:67:c6:ea:92:8f:a7:3e:98:1e:47:a3:
e9:fc:bb:7e:a3:62:25:2f:c3:bd:39:95:5c:85:69:53:b2:5d:
df:7e:30:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 15:56:21 2025 by rpki-client