Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e9e45e6b-55e8-483f-8afb-10fedd49d809/17556c0a-f699-393f-934b-8c8b0db969e9.roa
File: 17556c0a-f699-393f-934b-8c8b0db969e9.roa (raw, json)
Hash identifier: Kdjdf0DnIxUPMBXYKQn1oWuNI8icoqLYp9/b1Lo2Ccc=
Subject key identifier: F5:33:FA:7E:B3:7A:D0:2D:CC:33:04:D2:26:F0:F1:A6:27:D0:E5:1A
Certificate issuer: /CN=e9e45e6b-55e8-483f-8afb-10fedd49d809
Certificate serial: 010D0C9F43285848DADDD6F31B3262674BC812C0
Authority key identifier: E5:C4:0A:0A:17:E9:AC:96:7F:BA:29:F5:72:5A:71:54:9E:04:0D:1A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e9e45e6b-55e8-483f-8afb-10fedd49d809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e9e45e6b-55e8-483f-8afb-10fedd49d809/17556c0a-f699-393f-934b-8c8b0db969e9.roa
Signing time: Wed 12 Feb 2025 05:40:05 +0000
ROA not before: Wed 12 Feb 2025 05:40:05 +0000
ROA not after: Tue 13 May 2025 04:40:05 +0000
asID: 18683
IP address blocks: 2604:b680::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:da:dd:d6:f3:1b:32:62:67:4b:c8:12:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9e45e6b-55e8-483f-8afb-10fedd49d809
Validity
Not Before: Feb 12 05:40:05 2025 GMT
Not After : May 13 04:40:05 2025 GMT
Subject: CN=2e22507a-55e8-4bf8-bcf5-0325bf3f47e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:13:2f:e5:6c:7f:6c:ab:b7:c0:87:78:b0:61:
ad:eb:e8:c4:5a:21:92:06:3d:c8:11:7a:44:f2:32:
f0:66:49:c7:fe:a4:fc:fa:bd:c4:60:80:3a:62:31:
02:03:02:a3:0e:8c:f5:43:6a:b5:09:97:c6:46:a0:
df:a9:05:13:d8:98:b7:03:58:08:66:4e:4d:8b:2b:
42:12:ed:f1:23:ab:dd:45:b4:a5:04:84:65:43:8d:
a3:49:a3:c8:4a:33:a4:fc:e2:c3:06:e1:45:29:ab:
44:a2:5b:98:26:62:2c:9a:0a:ce:5a:92:56:9b:c6:
60:c1:bf:c0:b7:9b:0f:c0:c8:47:54:86:7f:cf:ab:
0f:af:b6:b9:4d:57:29:45:b1:c8:3e:43:7b:5e:08:
84:22:51:34:e4:3a:ef:47:5e:9f:df:78:3d:ae:f2:
fd:68:6f:a1:6b:ae:8c:79:41:f3:c2:8d:1f:d9:c0:
33:72:0b:13:6d:82:20:6b:07:42:92:c0:b9:9b:77:
1c:12:28:c8:8d:9d:7c:88:b9:92:65:40:30:84:4c:
a2:1d:43:82:13:09:5c:b5:8d:98:01:28:31:08:31:
88:36:81:a5:e3:82:5c:32:68:56:9c:35:21:7e:5b:
18:df:5a:94:84:0b:af:ed:5e:a7:db:ee:75:70:35:
de:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:33:FA:7E:B3:7A:D0:2D:CC:33:04:D2:26:F0:F1:A6:27:D0:E5:1A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e9e45e6b-55e8-483f-8afb-10fedd49d809/17556c0a-f699-393f-934b-8c8b0db969e9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e9e45e6b-55e8-483f-8afb-10fedd49d809/e9e45e6b-55e8-483f-8afb-10fedd49d809.crl
X509v3 Authority Key Identifier:
keyid:E5:C4:0A:0A:17:E9:AC:96:7F:BA:29:F5:72:5A:71:54:9E:04:0D:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e9e45e6b-55e8-483f-8afb-10fedd49d809.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:b680::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
71:65:1a:11:44:d4:84:54:33:41:68:b1:6c:7b:c4:aa:22:1a:
bd:82:ae:19:5a:0b:ed:27:b4:70:b2:78:b6:2e:ff:d8:bf:e9:
86:53:eb:7d:fb:32:d9:eb:22:4e:4f:af:98:63:bd:ab:8c:8a:
9f:42:6e:e6:44:87:e5:52:5e:56:d5:72:c2:dd:cf:37:a8:e1:
5f:54:e1:b5:c4:3d:f1:ca:9d:8a:83:45:7c:84:d7:ac:55:cc:
f7:4d:d2:e0:78:19:1b:2c:a3:37:c0:d2:49:7e:8d:fa:b3:44:
3b:1b:61:e3:dc:a2:d1:dc:29:69:b2:f6:ea:09:71:ab:6f:a9:
32:f2:17:e8:5c:7a:13:77:a2:8c:a5:ea:90:51:ce:a1:ad:cf:
78:21:37:bf:a9:78:e5:1c:75:2b:cb:28:c3:d3:7a:02:e1:49:
3a:ea:ad:3e:91:12:2c:5a:00:59:c7:32:24:83:0f:be:e6:3d:
75:53:ba:09:7b:6e:41:22:b0:57:b2:19:55:2f:45:04:4f:01:
7d:6e:b1:c9:06:2e:d8:10:fc:ef:20:6c:c4:42:27:b7:38:e5:
51:8b:ad:6e:f6:bd:55:ec:e4:a3:70:6e:90:23:cb:87:90:fe:
c7:c9:2a:f0:96:0b:15:b5:60:5f:c0:4d:00:c4:2e:36:8c:88:
26:ce:cb:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:39:31 2025 by rpki-client