Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/b3b3910d-a610-3b46-a9cb-c5249e265700.roa
File: b3b3910d-a610-3b46-a9cb-c5249e265700.roa (raw, json)
Hash identifier: FYK7cjOneCBj/Ez28rt6qkkjshoLXQ8UuQ2Owzq5vX4=
Subject key identifier: 9D:FA:D3:B7:16:D8:34:A6:B1:9A:9E:FF:A5:87:45:AC:7A:99:FE:FB
Certificate issuer: /CN=d6d708e8-5964-4587-8db1-e22545ec38a3
Certificate serial: 010D0C9F432858494BD7E970FFA13F81F96AAE40
Authority key identifier: 96:4F:71:53:38:88:DA:C6:95:AE:5A:82:6F:EC:AF:3A:1A:5F:2C:74
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/b3b3910d-a610-3b46-a9cb-c5249e265700.roa
Signing time: Mon 24 Mar 2025 16:54:29 +0000
ROA not before: Mon 24 Mar 2025 16:54:29 +0000
ROA not after: Sun 22 Jun 2025 16:54:29 +0000
asID: 21947
IP address blocks: 2607:f8e0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:4b:d7:e9:70:ff:a1:3f:81:f9:6a:ae:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6d708e8-5964-4587-8db1-e22545ec38a3
Validity
Not Before: Mar 24 16:54:29 2025 GMT
Not After : Jun 22 16:54:29 2025 GMT
Subject: CN=2e4dee5c-b119-4cd1-b447-0b55393ae688
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:21:31:a6:d4:50:54:77:1d:b9:e2:bb:0b:2f:
87:18:a7:b5:93:4d:98:9d:05:e6:0b:08:7e:0a:5c:
88:fd:1e:f4:74:75:8a:ef:44:4d:98:c3:51:51:a0:
3d:27:84:19:7f:b4:a4:d8:1a:cc:18:27:32:98:4e:
ab:3c:a4:80:e1:f3:f3:9b:12:60:54:a0:de:78:d7:
c7:36:27:d0:b8:bb:4d:47:a4:93:e5:2d:05:85:74:
b2:78:bc:c5:05:8e:ba:83:f0:a2:c3:1b:a7:15:5c:
7a:96:26:64:7d:a1:ef:55:6b:05:ab:1f:e9:1a:fa:
73:db:e5:72:96:2d:b0:a8:0b:dd:f4:af:38:17:62:
8e:e6:c1:2a:26:52:d5:79:82:54:c4:42:db:40:d8:
ef:46:a1:cb:df:c6:64:44:92:b8:83:69:00:eb:5b:
f7:a6:55:4a:7c:7f:33:ad:6d:bc:1c:79:d8:12:17:
1e:91:d4:95:fd:f4:b5:7b:10:7a:33:f6:e7:a2:e2:
ac:c4:88:de:55:6f:6b:e2:0a:fb:85:00:49:a4:de:
20:be:2f:4c:dd:6d:68:bb:9d:b3:f6:21:a7:dd:c1:
ff:fd:14:df:89:3c:aa:dd:37:9b:68:b7:12:64:74:
42:0d:ce:82:c6:e1:a5:8e:55:93:d1:c3:f6:25:ad:
96:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:FA:D3:B7:16:D8:34:A6:B1:9A:9E:FF:A5:87:45:AC:7A:99:FE:FB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/b3b3910d-a610-3b46-a9cb-c5249e265700.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.crl
X509v3 Authority Key Identifier:
keyid:96:4F:71:53:38:88:DA:C6:95:AE:5A:82:6F:EC:AF:3A:1A:5F:2C:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:f8e0::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
41:e3:03:57:1a:2d:29:fc:d9:44:f4:ec:18:84:d3:c0:2c:ce:
02:8a:f1:37:90:7b:2d:36:20:64:f7:e1:cb:4b:b3:98:e0:c9:
9b:b5:2d:78:2c:07:2f:c5:1e:27:42:08:94:85:e1:69:f6:4b:
1c:18:81:35:e8:5c:d8:0f:0a:ce:7d:ab:00:1b:d1:60:5e:96:
10:20:6f:82:b7:f0:2f:a1:1a:6a:79:56:8e:d4:bc:f6:9f:16:
e1:ff:6a:b8:c7:88:4e:87:36:1b:52:b8:72:f6:5a:c8:5a:4c:
bd:20:1f:18:a6:49:f8:85:63:ce:43:be:80:b8:8a:96:50:c8:
38:7e:11:91:d4:c3:00:a6:a8:50:e7:fd:7e:fd:ab:e0:12:56:
d1:dd:4e:2d:68:73:94:d3:ee:27:ac:8d:d8:35:23:35:b9:4a:
37:52:c5:4d:0e:f7:ea:c6:e8:09:6a:5f:7e:77:5c:5b:bc:60:
13:eb:4d:56:ea:4c:66:79:db:dc:be:a1:f0:3b:e2:0d:74:ed:
01:53:3e:8b:d1:29:83:24:3c:6b:dc:e8:72:f2:c5:82:9d:7b:
21:b9:e6:4b:d2:43:bc:90:93:32:71:02:90:26:7c:1d:1a:fb:
57:b1:c7:12:5e:bb:03:02:eb:a6:08:c9:23:27:cd:ac:83:94:
76:c9:82:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:17:45 2025 by rpki-client