Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3e09673-5c6e-4340-ad11-4da8dfb8c777/9ba8a82c-11fe-34cb-aeff-099c28bd5098.roa
File: 9ba8a82c-11fe-34cb-aeff-099c28bd5098.roa (raw, json)
Hash identifier: hK47DTZrR/vARdpSEBLT2/XgE9TQDGkeZUZtVu5pyAw=
Subject key identifier: D0:91:E4:C9:2B:83:55:52:23:3A:F2:03:4E:DA:F8:4F:5D:44:71:CD
Certificate issuer: /CN=f3e09673-5c6e-4340-ad11-4da8dfb8c777
Certificate serial: 010D0C9F43285848BBBB798B27CAB6136E4DD080
Authority key identifier: 6B:3F:AD:C6:78:35:65:4F:18:4F:BB:AA:8E:7B:24:08:DE:32:DA:BB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3e09673-5c6e-4340-ad11-4da8dfb8c777.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3e09673-5c6e-4340-ad11-4da8dfb8c777/9ba8a82c-11fe-34cb-aeff-099c28bd5098.roa
Signing time: Sat 01 Feb 2025 02:00:39 +0000
ROA not before: Sat 01 Feb 2025 02:00:39 +0000
ROA not after: Fri 02 May 2025 01:00:39 +0000
asID: 14464
IP address blocks: 2604:a700::/32 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bb:bb:79:8b:27:ca:b6:13:6e:4d:d0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3e09673-5c6e-4340-ad11-4da8dfb8c777
Validity
Not Before: Feb 1 02:00:39 2025 GMT
Not After : May 2 01:00:39 2025 GMT
Subject: CN=b3a6f78a-098c-4f7c-afe7-17c1c1e2eaf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:db:4a:e4:e4:b2:cd:3b:fd:7b:d6:8e:18:29:
4a:46:b9:95:4e:8f:a8:87:f7:41:83:0d:e3:4f:80:
ca:1d:ca:a6:07:6e:35:42:90:d7:b5:ec:c2:cb:50:
76:6e:96:2b:2d:df:49:0e:b5:2c:21:43:64:d9:60:
59:06:ba:18:8c:04:47:cb:23:a6:1d:7d:93:79:67:
7e:ff:be:24:b8:95:ad:dc:59:02:90:10:87:57:d5:
df:36:3a:b3:06:ee:24:3e:94:8d:19:74:e9:44:da:
59:8b:78:b2:21:e9:0a:42:71:e4:5d:8a:0e:4b:7c:
67:d9:12:0a:48:c0:48:89:7b:18:e3:39:c1:74:99:
a0:71:92:0d:30:fb:5a:7a:e9:43:cb:27:55:ef:eb:
69:13:12:01:5d:ef:2c:a8:42:f3:a6:55:f7:3f:82:
e3:3c:df:d1:dd:25:e5:71:3b:8a:1f:05:81:58:0b:
e9:48:66:a6:12:a6:8b:dc:a8:fd:65:d5:ed:ef:2b:
75:15:42:e4:ba:d1:0b:8f:50:6d:f6:37:91:ee:35:
54:49:80:12:01:44:d7:ae:e1:96:98:c9:2c:59:78:
a5:e9:ca:ba:aa:0a:de:12:0d:6b:26:55:35:4c:70:
51:60:fe:9d:08:ed:0e:9f:18:19:33:f7:2c:aa:05:
3f:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:91:E4:C9:2B:83:55:52:23:3A:F2:03:4E:DA:F8:4F:5D:44:71:CD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3e09673-5c6e-4340-ad11-4da8dfb8c777/9ba8a82c-11fe-34cb-aeff-099c28bd5098.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3e09673-5c6e-4340-ad11-4da8dfb8c777/f3e09673-5c6e-4340-ad11-4da8dfb8c777.crl
X509v3 Authority Key Identifier:
keyid:6B:3F:AD:C6:78:35:65:4F:18:4F:BB:AA:8E:7B:24:08:DE:32:DA:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3e09673-5c6e-4340-ad11-4da8dfb8c777.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:a700::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
00:d3:ca:36:b5:ba:c0:c8:0b:34:6f:4e:05:95:98:0a:03:e2:
2f:91:26:34:47:df:25:0d:64:d5:3b:67:06:ba:99:8b:4c:98:
4f:06:5e:11:50:c2:9c:69:03:48:b4:a1:c5:02:6b:33:84:bb:
e4:1e:f9:e5:1e:c4:a1:26:c4:3f:4d:63:ca:da:ce:b0:7b:7d:
7d:de:9c:85:26:4c:4d:24:0c:1c:9b:32:a6:f1:d1:0b:64:81:
c3:db:b8:64:76:fe:03:9c:65:29:db:bc:a0:c7:4a:90:3d:8a:
d4:8f:fe:38:82:80:77:ad:ef:1b:8f:e8:5e:1d:63:92:de:3b:
9e:65:5b:cf:52:ac:22:df:4a:31:58:b8:bc:00:84:8d:f2:a5:
e2:3b:fd:66:44:ae:eb:82:fc:92:2a:f8:6c:f6:0b:b4:d4:21:
a7:b9:be:ba:34:5b:b4:62:10:66:83:be:87:cb:a8:b3:54:32:
6a:95:d8:7a:46:eb:55:ba:9d:8d:0e:53:34:77:57:8a:67:c3:
b3:7f:0b:aa:52:d9:7d:d8:f4:ac:e3:f8:66:79:53:14:76:43:
10:ea:98:04:2e:1c:fa:bf:e0:84:34:d0:e9:74:bf:05:b5:ff:
2b:d4:90:e8:40:e2:3d:83:3f:cf:8c:ed:aa:86:bd:79:54:5e:
64:06:e8:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:18:14 2025 by rpki-client