Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/65ca9aba-8a6e-3376-826b-5bbfbe047ce2.roa
File: 65ca9aba-8a6e-3376-826b-5bbfbe047ce2.roa (raw, json)
Hash identifier: MYAlAg9vKkSxV24ufD4Cymo7WEY0TSezdWCL5E3pSaU=
Subject key identifier: 83:79:57:AE:62:C3:F3:77:89:EF:10:AC:5C:F0:28:C1:8D:96:EC:56
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285848C5818BDE75737F1321E448C0
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/65ca9aba-8a6e-3376-826b-5bbfbe047ce2.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 15169
IP address blocks: 2001:4860:482e::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:81:8b:de:75:73:7f:13:21:e4:48:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=b1f8ba0f-a5f7-4292-9990-7bbb39aa90ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:53:cd:88:d1:75:7b:b3:51:25:62:d9:ac:8b:
5b:98:36:a7:c2:3f:30:aa:84:70:0c:85:ba:b4:1d:
f4:af:0a:45:69:21:61:89:ac:14:ac:6d:f5:2d:1a:
7e:bb:c3:58:75:91:85:fc:52:fc:4e:87:47:bd:09:
43:c2:2f:e3:f0:0c:ba:13:7a:0f:2b:bb:56:85:10:
d0:3b:17:b3:3d:11:50:8d:e2:2d:cc:36:42:e7:59:
83:15:a2:cc:23:39:cc:f7:71:53:19:b4:00:44:0a:
de:6c:bf:5d:38:07:5c:62:b4:c2:27:e8:7f:80:92:
4b:60:6b:39:ed:7f:7e:44:dc:a6:ca:2a:9d:a3:bb:
0c:e9:f0:31:89:8e:4d:41:3f:ee:86:a9:85:a2:0b:
39:b2:6d:8f:5d:94:50:f4:62:9d:ca:79:e3:4d:9c:
0f:3e:79:0d:cb:d8:c2:54:b6:e6:1c:a5:db:85:a4:
a9:2c:bc:cf:28:94:63:f6:41:1a:4a:f6:f1:8b:c1:
f8:b5:fc:44:18:53:7c:a1:6c:53:84:80:12:c4:6b:
08:01:64:2e:08:85:fd:66:8a:c8:91:46:9a:a7:7e:
e9:fa:55:c7:99:b7:bc:7d:09:29:64:60:38:ff:1b:
de:00:19:ee:fc:12:a0:d3:7e:d3:ef:d9:74:91:c0:
60:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:79:57:AE:62:C3:F3:77:89:EF:10:AC:5C:F0:28:C1:8D:96:EC:56
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/65ca9aba-8a6e-3376-826b-5bbfbe047ce2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:4860:482e::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
19:1c:77:38:0a:0b:f6:22:10:c9:e0:f8:9d:d9:22:e1:67:d1:
d0:c4:aa:f0:3e:64:a2:20:43:f6:99:21:33:7e:38:5d:f9:5c:
60:97:0f:b2:a6:16:46:05:97:68:eb:b4:61:d9:6b:72:e2:cd:
69:52:da:0e:21:20:d1:23:ee:12:f4:30:9c:de:16:b9:83:47:
6d:74:22:67:c5:2d:a3:22:3b:1d:b3:e0:38:4d:a6:26:c5:87:
22:38:a0:89:b4:e1:0f:ee:83:51:36:9f:da:1c:87:b8:41:fc:
46:19:ee:df:7e:1d:49:0c:94:41:b3:f4:7a:2c:4e:7a:90:df:
9d:d3:ae:fe:44:26:aa:3f:69:bf:76:b8:f1:d1:53:6a:75:24:
11:8d:07:b0:fc:ca:0f:61:7d:68:a9:bb:aa:33:98:63:07:a6:
38:69:47:ac:00:d3:e1:db:bb:fc:d3:ec:bc:60:67:00:43:06:
9b:73:46:5b:7a:ca:90:cd:bf:d9:b2:20:77:eb:40:72:1e:34:
70:c1:c2:89:69:c2:d6:2f:ec:0f:c3:14:c7:4b:12:9f:83:45:
48:26:38:b3:9a:ee:5f:f1:35:c8:92:9f:6e:1a:8b:61:60:da:
03:1a:21:b0:88:64:1a:3c:e0:19:0e:5c:c3:d2:5e:9c:57:a4:
b2:59:86:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 08:50:05 2025 by rpki-client