Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29cf59bb-49d4-46dc-a312-da9c10dc336e/87ccbfe3-8659-3f36-ad24-7412da6698c2.roa
File: 87ccbfe3-8659-3f36-ad24-7412da6698c2.roa (raw, json)
Hash identifier: 2TlZxwaPCDVW1nVgpb9Z9z8Hv18M4Fa3Jeg2Sg+UBx0=
Subject key identifier: 8A:12:AF:1F:85:11:61:0F:50:15:0D:01:D2:A7:5A:EE:F8:15:36:F0
Certificate issuer: /CN=29cf59bb-49d4-46dc-a312-da9c10dc336e
Certificate serial: 010D0C9F43285848A1360E1519514705A2A11320
Authority key identifier: 75:6D:39:EF:55:71:4A:71:37:2C:93:BC:47:6F:1D:A8:BC:34:23:90
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29cf59bb-49d4-46dc-a312-da9c10dc336e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29cf59bb-49d4-46dc-a312-da9c10dc336e/87ccbfe3-8659-3f36-ad24-7412da6698c2.roa
Signing time: Wed 22 Jan 2025 14:00:52 +0000
ROA not before: Wed 22 Jan 2025 14:00:52 +0000
ROA not after: Tue 22 Apr 2025 13:00:52 +0000
asID: 10866
IP address blocks: 2620:0:5300::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a1:36:0e:15:19:51:47:05:a2:a1:13:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29cf59bb-49d4-46dc-a312-da9c10dc336e
Validity
Not Before: Jan 22 14:00:52 2025 GMT
Not After : Apr 22 13:00:52 2025 GMT
Subject: CN=73e1f52e-48f9-40ab-a964-8e01db1d284b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d7:9d:90:b4:94:0f:6e:b6:a0:07:6c:72:20:
c2:07:41:cd:70:21:27:eb:25:f7:06:b3:f7:6a:5d:
9f:d8:7b:76:ce:4a:1a:d9:14:9a:d5:d4:bb:49:77:
47:0f:9b:bd:bd:77:59:f0:9d:1d:55:95:eb:40:e8:
3c:58:c2:87:e2:03:9f:d6:50:9c:f9:c3:08:9e:52:
8d:9c:14:a2:9b:02:1e:45:36:6a:d9:9a:d6:d4:98:
8b:8c:f2:b8:cb:df:3a:40:bb:7f:85:6b:2c:10:ca:
e8:f5:f8:b4:a2:19:84:f5:40:2a:17:2f:ec:3a:6f:
90:b6:4e:24:e9:9f:23:f0:10:96:ef:aa:7c:cc:8e:
f0:55:dd:83:2c:c1:57:77:bd:dd:1b:8a:72:44:36:
d5:5f:2c:cd:3b:d7:c4:b3:a5:1b:2a:7f:d7:20:29:
76:6f:dc:81:cf:0e:be:86:4b:c5:fa:4d:61:66:b9:
a2:ad:60:d7:4a:c0:7d:75:92:59:e8:02:de:d7:06:
0e:bf:e7:f7:b3:15:c7:1f:7f:ec:b2:8b:8c:57:3a:
58:ef:09:57:44:b8:71:c0:21:3b:10:a3:f3:ce:0c:
f9:ac:82:5c:27:28:b8:47:5d:2f:42:9f:5c:51:48:
3a:2c:95:69:b5:42:75:df:1e:b5:93:39:c7:06:e2:
42:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:12:AF:1F:85:11:61:0F:50:15:0D:01:D2:A7:5A:EE:F8:15:36:F0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29cf59bb-49d4-46dc-a312-da9c10dc336e/87ccbfe3-8659-3f36-ad24-7412da6698c2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29cf59bb-49d4-46dc-a312-da9c10dc336e/29cf59bb-49d4-46dc-a312-da9c10dc336e.crl
X509v3 Authority Key Identifier:
keyid:75:6D:39:EF:55:71:4A:71:37:2C:93:BC:47:6F:1D:A8:BC:34:23:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29cf59bb-49d4-46dc-a312-da9c10dc336e.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:0:5300::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
58:26:52:b0:91:f0:42:89:e9:17:fb:77:43:28:56:2f:99:6f:
0a:0c:85:b3:bf:27:f5:4a:3f:31:6e:8e:57:c1:a1:c7:bd:24:
4c:35:30:83:e2:08:5c:fd:01:68:b5:60:72:2e:75:b6:17:36:
f0:fc:29:01:aa:42:e2:86:90:27:c2:99:23:32:88:84:87:59:
71:0b:d5:3f:5d:d3:1a:64:4c:99:2c:dc:09:de:9b:3f:8d:96:
6a:20:77:8c:32:a2:b4:73:64:62:27:0b:bf:00:b0:f0:4b:5e:
af:00:2c:2c:13:eb:09:f0:bf:e1:b6:0f:de:86:3e:59:ed:40:
9a:1f:47:49:af:7b:e5:c2:da:3f:8a:67:ea:5b:34:3e:f9:85:
90:eb:a6:8d:d9:6c:19:29:9d:b7:2e:80:df:99:4e:7e:35:d1:
14:22:08:a3:07:cc:18:c4:c2:ab:ef:9f:50:24:86:ad:5b:65:
72:d7:85:e3:11:fb:50:dc:f2:62:ed:da:31:6b:54:07:f4:59:
d8:71:7d:b7:c4:dc:0c:80:1d:82:65:62:09:21:37:8a:77:ad:
f0:e8:e6:57:cd:07:69:7c:f4:0b:94:a3:55:af:68:cb:ca:22:
8c:0d:a3:7b:1f:5c:ea:37:92:d9:e6:c0:59:9e:34:f9:ed:dc:
22:2d:9d:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:29:49 2025 by rpki-client