Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c28b7c13-301c-47fc-b39b-2201e763c4dd/06a378f5-3b42-3d66-bdd7-278251c6fa98.roa
File: 06a378f5-3b42-3d66-bdd7-278251c6fa98.roa (raw, json)
Hash identifier: mXN3Ey9FZZMMH2sUFekBQyo818fO9P0D4z3DvfWUe6g=
Subject key identifier: 66:AC:E4:1B:52:A2:2E:37:06:08:A7:D7:99:BA:74:68:AF:56:C9:BD
Certificate issuer: /CN=c28b7c13-301c-47fc-b39b-2201e763c4dd
Certificate serial: 010D0C9F43285849088173BB2529A29720A27F00
Authority key identifier: E4:00:44:49:6A:F4:E0:C2:47:22:B9:1B:EC:F8:50:C2:2B:7B:AC:8A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c28b7c13-301c-47fc-b39b-2201e763c4dd.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c28b7c13-301c-47fc-b39b-2201e763c4dd/06a378f5-3b42-3d66-bdd7-278251c6fa98.roa
Signing time: Fri 28 Feb 2025 14:00:52 +0000
ROA not before: Fri 28 Feb 2025 14:00:52 +0000
ROA not after: Thu 29 May 2025 13:00:52 +0000
asID: 8111
IP address blocks: 2620:21:c000::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:08:81:73:bb:25:29:a2:97:20:a2:7f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c28b7c13-301c-47fc-b39b-2201e763c4dd
Validity
Not Before: Feb 28 14:00:52 2025 GMT
Not After : May 29 13:00:52 2025 GMT
Subject: CN=8e246e89-1431-43fc-83e6-bd06c83d8468
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:01:44:0d:23:3b:80:8d:10:d6:60:cf:e1:4e:
72:95:3b:39:46:cc:a6:3a:5b:24:7e:95:f7:05:86:
6c:a6:cd:15:87:9f:0e:63:b5:b5:00:1c:fa:60:5a:
5e:46:21:24:64:38:d4:45:c6:b2:70:e6:61:21:35:
89:ba:ee:58:6b:0d:0a:56:ce:f6:90:0a:b6:9f:29:
58:f6:19:17:27:08:e1:7f:26:fa:28:12:0b:83:66:
8c:1a:18:36:af:6c:37:bf:8a:ff:a1:b0:08:83:16:
02:c0:32:60:5d:e6:23:bb:88:63:bf:65:62:3e:9c:
9c:3c:ac:df:91:2f:81:48:15:99:7b:fc:b2:83:14:
45:78:df:f6:9e:e1:29:54:fc:77:9f:69:df:f4:c9:
21:15:2b:4e:e5:63:79:04:b0:28:25:63:34:1b:91:
25:16:93:a0:70:fb:36:c7:42:09:b4:d0:12:da:20:
39:77:f6:90:9f:40:50:8c:c1:16:d8:37:ae:aa:8e:
4a:e5:b5:5d:b9:1b:d6:2d:6c:56:b4:34:85:52:86:
d9:29:aa:ad:e8:49:29:4d:40:dd:91:fd:2b:5c:81:
ce:c4:8b:03:7d:78:23:27:a2:ba:04:e4:ba:71:7c:
b0:46:2b:3b:90:90:43:04:bb:a8:da:af:27:15:d0:
cd:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:AC:E4:1B:52:A2:2E:37:06:08:A7:D7:99:BA:74:68:AF:56:C9:BD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c28b7c13-301c-47fc-b39b-2201e763c4dd/06a378f5-3b42-3d66-bdd7-278251c6fa98.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c28b7c13-301c-47fc-b39b-2201e763c4dd/c28b7c13-301c-47fc-b39b-2201e763c4dd.crl
X509v3 Authority Key Identifier:
keyid:E4:00:44:49:6A:F4:E0:C2:47:22:B9:1B:EC:F8:50:C2:2B:7B:AC:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c28b7c13-301c-47fc-b39b-2201e763c4dd.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:21:c000::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
08:a0:72:ab:d0:93:31:54:2b:1d:c2:91:db:a6:b9:78:da:60:
b6:1e:42:45:f7:0c:11:4d:ec:0d:3f:e2:d5:a7:c1:5b:ae:4f:
5f:3d:a2:65:28:80:e1:94:e8:5a:9c:ba:c5:dc:1f:91:6f:1e:
6f:68:96:de:4b:6c:8d:03:36:d2:20:ba:8f:55:d0:5a:35:fd:
56:5b:68:eb:d7:78:dc:ee:48:29:18:61:93:7e:72:d7:55:63:
21:66:ea:94:47:5b:30:e9:fd:74:85:e6:cb:97:a0:5b:44:bc:
bf:f1:e7:24:b2:53:a3:8d:22:01:3e:fa:5c:a8:63:cc:40:1c:
b3:40:7a:08:de:37:8a:7a:75:b6:0e:ff:88:68:eb:fa:aa:80:
c0:ee:93:20:8c:7e:7b:dc:a5:bd:d4:88:71:ee:48:4c:4c:b5:
ed:04:90:d1:d3:8f:ff:39:c1:27:e8:86:34:2e:c5:fd:2a:c7:
32:52:1e:50:0d:41:28:17:80:d9:c5:d8:02:cf:fc:23:2d:a0:
00:3a:e9:a5:32:cb:ab:36:16:d6:e8:05:1c:ab:a2:d8:4a:91:
dc:09:06:3b:df:82:2f:c9:77:ba:a0:a8:0a:63:33:72:66:08:
df:ec:3b:19:36:ed:e6:cf:0b:38:d3:4b:45:bf:dd:9d:40:e4:
67:9f:c6:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 10:14:43 2025 by rpki-client