Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/68b39235-773a-4108-9528-465304a966b3/c062b811-5af4-3d93-883f-cd801dbdc422.roa
File: c062b811-5af4-3d93-883f-cd801dbdc422.roa (raw, json)
Hash identifier: QlVl0kCMJeig5Fdax19tLNC+phhT9HYvh5N0raYZeD4=
Subject key identifier: 1D:C9:28:B8:5B:7C:2E:A2:C1:64:85:80:C9:81:C1:31:4D:D8:D4:A9
Certificate issuer: /CN=68b39235-773a-4108-9528-465304a966b3
Certificate serial: 010D0C9F432858491246B7099384218E6BB325C0
Authority key identifier: BE:B7:8E:0F:E3:65:3F:5A:C9:05:7A:62:4C:DC:7B:71:AE:FE:45:01
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/68b39235-773a-4108-9528-465304a966b3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/68b39235-773a-4108-9528-465304a966b3/c062b811-5af4-3d93-883f-cd801dbdc422.roa
Signing time: Tue 04 Mar 2025 02:00:40 +0000
ROA not before: Tue 04 Mar 2025 02:00:40 +0000
ROA not after: Mon 02 Jun 2025 01:00:40 +0000
asID: 63296
IP address blocks: 2605:fa40::/32 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:12:46:b7:09:93:84:21:8e:6b:b3:25:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b39235-773a-4108-9528-465304a966b3
Validity
Not Before: Mar 4 02:00:40 2025 GMT
Not After : Jun 2 01:00:40 2025 GMT
Subject: CN=43cf2cd3-86a6-4a60-958d-dfc1a003433c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ce:f6:37:7a:f5:be:c6:21:fd:9a:8a:ed:3b:
1d:92:a0:d7:f1:6b:c9:9a:1f:4b:bb:10:c1:df:a3:
ea:5b:9f:a2:27:55:56:bf:45:97:cf:06:eb:ef:03:
f4:e7:41:ec:d4:03:88:a5:a0:94:cb:1a:e7:2c:52:
12:45:a3:28:17:37:50:59:6e:10:3f:19:e3:8e:d9:
05:01:81:e2:26:7e:a9:4f:73:50:cd:26:27:5d:2a:
c5:73:b4:b8:df:03:d3:7a:c3:9f:da:8b:f7:14:1d:
f2:74:2d:39:19:03:76:dd:e6:e2:ce:83:40:4f:b2:
62:cf:53:27:23:c3:e3:d0:a5:45:0f:d1:e0:f8:8e:
e7:61:ef:7c:de:76:75:aa:e1:a4:06:b9:7d:ee:ec:
62:8b:5b:08:d3:e9:5c:da:75:85:01:79:a6:cb:e3:
be:a6:0a:51:4b:8f:93:8a:74:b4:3a:1a:de:94:34:
9d:ea:05:e5:be:37:2b:08:6e:24:0a:b6:65:dc:b3:
7e:5c:5b:a1:e4:79:6b:1e:4e:35:69:f1:3c:f1:30:
09:92:35:59:0a:ff:c0:11:c4:32:d0:7d:0e:d0:03:
f6:d0:ad:ef:5c:c9:db:33:70:9d:ca:83:78:a1:98:
06:71:e3:aa:a6:a4:80:e3:23:93:cc:ca:48:ba:4f:
ed:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:C9:28:B8:5B:7C:2E:A2:C1:64:85:80:C9:81:C1:31:4D:D8:D4:A9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/68b39235-773a-4108-9528-465304a966b3/c062b811-5af4-3d93-883f-cd801dbdc422.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/68b39235-773a-4108-9528-465304a966b3/68b39235-773a-4108-9528-465304a966b3.crl
X509v3 Authority Key Identifier:
keyid:BE:B7:8E:0F:E3:65:3F:5A:C9:05:7A:62:4C:DC:7B:71:AE:FE:45:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/68b39235-773a-4108-9528-465304a966b3.cer
sbgp-ipAddrBlock: critical
IPv6:
2605:fa40::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3b:ef:bb:a1:00:8b:b6:e0:c6:54:0d:e0:7f:32:92:37:55:db:
01:6f:4c:44:60:44:03:8b:42:22:fc:a6:0a:72:ca:e7:ca:dd:
c5:0a:4a:d8:a5:e6:4a:f9:45:a6:cc:3e:a6:08:d1:df:d6:63:
a5:63:94:7b:a9:22:3a:0d:76:e7:51:5e:59:ca:2a:3a:08:cb:
d8:55:25:b3:5f:9f:59:bc:6d:5c:f5:af:34:57:e2:ff:9d:f3:
3a:2d:68:c3:1f:68:a6:1d:01:c9:17:cd:91:ee:0b:4a:81:d3:
d7:fa:06:d0:d0:69:60:ef:68:27:17:3b:70:65:4c:61:02:f6:
85:e7:61:10:96:da:83:75:a4:34:4a:bf:a0:b2:70:a6:20:2b:
16:71:bc:b2:ff:ad:90:00:a4:10:26:38:8e:e5:55:c4:1c:1a:
23:3c:08:89:cd:7a:f7:35:ad:80:f0:02:b7:03:20:68:34:ef:
38:f2:52:14:e2:1e:22:84:dd:87:07:9f:63:ac:b3:9e:93:45:
35:2e:ff:21:19:0b:92:de:44:ab:49:68:88:f0:58:c1:59:1c:
5c:95:7b:fe:b2:b7:b8:8d:12:c1:78:dd:be:f4:e6:bd:c1:e9:
fd:dc:6b:46:8f:6f:82:36:c3:a8:bc:05:1c:42:4d:49:29:d2:
e1:b7:2d:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 09:32:07 2025 by rpki-client