Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/348d3713-8fd7-4568-b353-ff9d07414f1a/fb1a1f02-6277-383b-861c-529b8e6cbcc3.roa
File: fb1a1f02-6277-383b-861c-529b8e6cbcc3.roa (raw, json)
Hash identifier: 6RKfx9ow7hfLlkhPm73eejTYV3y8BjU+g9MwO/0x5sQ=
Subject key identifier: D8:F2:8B:89:6E:8F:EF:92:45:1C:8D:BA:C9:F3:07:5D:AA:9E:DA:39
Certificate issuer: /CN=348d3713-8fd7-4568-b353-ff9d07414f1a
Certificate serial: 010D0C9F43285848A996264EE2EC5926C885D440
Authority key identifier: 83:D0:17:90:7B:6F:EF:76:18:C3:EF:03:EC:E9:A8:34:5E:14:8D:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/348d3713-8fd7-4568-b353-ff9d07414f1a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/348d3713-8fd7-4568-b353-ff9d07414f1a/fb1a1f02-6277-383b-861c-529b8e6cbcc3.roa
Signing time: Sat 25 Jan 2025 14:00:52 +0000
ROA not before: Sat 25 Jan 2025 14:00:52 +0000
ROA not after: Fri 25 Apr 2025 13:00:52 +0000
asID: 400025
IP address blocks: 2620:12b:e000::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a9:96:26:4e:e2:ec:59:26:c8:85:d4:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=348d3713-8fd7-4568-b353-ff9d07414f1a
Validity
Not Before: Jan 25 14:00:52 2025 GMT
Not After : Apr 25 13:00:52 2025 GMT
Subject: CN=07c45f3e-b789-41a8-9059-0b34b2f01ea8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:4a:8b:84:c2:02:08:df:4b:b6:00:16:10:b8:
e9:19:66:73:f4:54:44:ac:4c:e2:c9:d8:ba:7b:ae:
28:93:d0:f8:19:1b:3d:b2:6e:cb:65:c5:19:ac:d0:
24:ef:b5:94:a3:27:ed:8e:71:c8:c6:5c:e8:cb:71:
9e:e2:63:91:2b:f5:ff:56:9e:53:b5:96:8d:ff:91:
f3:69:89:59:75:1c:cb:08:6f:82:78:b9:ad:54:1d:
4d:8a:4c:a0:60:02:9f:6e:ac:65:61:8f:82:60:b3:
c6:35:fa:b4:7a:62:d1:60:c2:d0:58:2f:b6:3f:c6:
8a:3f:fa:60:d8:96:f4:31:cd:cd:be:1f:21:d2:4a:
c1:02:c2:88:c6:80:9b:4d:52:97:16:db:44:d1:2b:
e5:79:16:74:9f:0a:f4:0a:74:f5:45:bb:b5:31:c3:
d9:3d:11:99:d0:0b:ad:ec:f7:c5:26:3d:8b:c6:26:
92:df:c8:62:ee:e1:27:57:d3:44:32:66:a6:35:a0:
74:f9:ff:9f:a5:b8:0e:e7:5a:db:81:da:0d:5b:d1:
2b:ca:55:c7:a4:f0:67:2f:26:44:6f:da:f6:0d:55:
07:1f:41:58:f3:8d:9c:70:f9:a2:64:1d:f7:56:1d:
c5:dd:3a:07:10:34:f8:45:42:83:70:43:9c:b4:12:
ef:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:F2:8B:89:6E:8F:EF:92:45:1C:8D:BA:C9:F3:07:5D:AA:9E:DA:39
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/348d3713-8fd7-4568-b353-ff9d07414f1a/fb1a1f02-6277-383b-861c-529b8e6cbcc3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/348d3713-8fd7-4568-b353-ff9d07414f1a/348d3713-8fd7-4568-b353-ff9d07414f1a.crl
X509v3 Authority Key Identifier:
keyid:83:D0:17:90:7B:6F:EF:76:18:C3:EF:03:EC:E9:A8:34:5E:14:8D:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/348d3713-8fd7-4568-b353-ff9d07414f1a.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:12b:e000::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6e:c6:8a:d3:e5:48:e9:11:97:d4:f5:bd:30:12:88:cc:2f:5b:
c5:dd:d3:2c:1d:d2:66:0a:f0:db:1c:6c:d9:1e:f9:fd:ad:69:
47:f9:06:38:3d:a2:2e:5f:e6:73:17:fc:08:eb:2c:a9:9c:d0:
5f:ae:81:49:d3:4f:17:4c:bc:1d:f4:fa:4d:d8:55:e5:8a:10:
a4:99:e9:92:9c:b3:b8:e3:26:24:ec:12:b9:04:71:5e:31:1d:
c2:6f:db:3f:69:0b:49:a3:77:b6:71:b2:92:f0:1c:f8:11:9d:
e5:f9:62:b6:8d:a9:d1:c6:7a:85:39:83:8c:68:a4:be:75:af:
f8:30:b1:10:08:bc:3c:62:0a:1b:ef:fe:86:a3:39:32:45:4d:
6a:f4:24:20:fb:95:36:c4:21:1a:d0:b9:9b:31:49:20:d2:7b:
46:65:ac:7b:ca:30:2d:6d:2d:ab:7d:07:1e:23:79:84:58:54:
97:75:f2:71:42:99:c5:ef:fa:72:f7:e5:5d:97:40:20:4d:70:
55:cf:58:11:95:94:8a:b7:d1:b0:c3:fc:ee:ea:a7:c4:38:af:
36:d1:e5:76:00:b2:e3:81:92:47:65:92:e4:3c:7e:39:1a:34:
50:b8:35:df:dd:e1:5a:12:22:ab:6a:d7:6a:76:11:b4:78:f1:
0d:ec:cb:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:37:58 2025 by rpki-client