Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9cf7850d-5a61-3ceb-86f8-0be244f76344.roa
File: 9cf7850d-5a61-3ceb-86f8-0be244f76344.roa (raw, json)
Hash identifier: 4YnaEjpPZaJ4MNEptyoVDIoQ56b/yuFW05Vh02KAm+A=
Subject key identifier: CC:B9:BD:A8:C5:79:3A:12:68:21:0F:1A:5A:01:62:9A:00:F8:82:CD
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285848C582350E24C919864DC063C0
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9cf7850d-5a61-3ceb-86f8-0be244f76344.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 15169
IP address blocks: 2607:f8b0:400b::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:82:35:0e:24:c9:19:86:4d:c0:63:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=5dfc0d69-98ff-4bec-8d74-960db0facd5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:25:ee:dd:6c:2d:83:c1:38:9f:87:f5:cf:f7:
82:61:dc:6c:ef:6b:b9:7a:80:bc:81:9c:a0:e9:45:
7a:0e:6d:2a:c4:24:13:ee:db:84:33:6e:71:fa:74:
ee:c6:b0:ab:26:b8:f2:6c:d2:59:5f:14:23:cb:00:
c4:59:d9:86:e6:21:9a:e5:af:5a:a5:1f:56:ac:ab:
3c:33:81:75:37:d9:30:25:51:7c:44:5a:ac:56:6c:
62:e4:8e:c7:30:49:58:71:ad:2d:56:c7:4e:3b:85:
5e:ed:78:60:ac:99:4d:da:70:7a:3b:bc:a5:b7:a3:
b5:dd:2e:b5:03:de:23:f7:e8:15:93:df:d3:4e:7f:
a1:7f:c6:69:34:ed:d2:78:01:0c:64:fe:ec:82:10:
55:eb:a2:59:6c:85:21:c2:a5:16:d7:69:d9:d5:9e:
97:92:43:28:e7:cf:1a:b3:ca:f2:0f:d6:e6:2e:15:
4b:7c:b8:83:e3:fc:92:06:b3:62:a9:b8:70:51:79:
85:56:cb:ee:62:6d:c4:4d:62:b3:c2:b4:55:20:6d:
44:5a:c8:44:14:2a:02:a2:5c:11:7f:f6:11:43:fc:
61:bb:03:9f:ba:5b:c1:e3:f5:39:1e:10:ec:63:46:
b6:bf:86:1d:58:8c:be:17:e2:cf:51:41:21:a7:d9:
88:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:B9:BD:A8:C5:79:3A:12:68:21:0F:1A:5A:01:62:9A:00:F8:82:CD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9cf7850d-5a61-3ceb-86f8-0be244f76344.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:f8b0:400b::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
10:af:e3:63:be:66:8d:76:62:67:3c:6d:51:c3:ba:df:fa:62:
8d:b1:5f:56:ed:94:c2:50:27:04:c7:4b:ac:d7:d7:15:43:0d:
d8:81:cf:e9:f1:25:ff:f3:37:41:06:8e:16:cb:19:48:6f:d0:
df:0a:cd:fe:26:5a:d0:8f:ea:59:be:eb:72:1f:51:d8:af:fe:
e0:95:f5:ae:45:d8:4c:1c:e8:77:f8:66:8f:13:0f:04:b5:bc:
c8:c0:83:90:2b:ac:a9:97:ca:c8:7a:1d:24:6d:ea:e8:5c:8b:
40:5a:3d:a9:69:06:3b:e5:74:dd:67:f0:ad:fe:4b:26:5a:33:
4f:5b:f7:a0:bc:63:ca:36:69:86:3a:eb:76:a1:54:55:bc:e1:
c2:61:76:c1:11:b8:73:5c:2c:a2:8f:32:8a:7e:4a:f0:3b:70:
db:42:ff:f9:4b:35:26:2c:5d:87:2d:a8:11:93:9d:b5:bc:14:
3d:89:8e:e6:7f:82:30:84:49:e9:0f:e6:a8:b5:1e:66:12:15:
e2:da:ee:99:81:09:66:37:7b:02:97:1c:0b:e7:ee:b3:48:30:
ee:4a:1f:e4:43:01:71:60:0e:6a:b6:2c:c9:74:d8:14:43:be:
b3:de:d3:fc:78:d1:85:8a:3f:0b:a9:4c:76:f0:0b:e1:b5:e4:
59:09:44:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 08:43:53 2025 by rpki-client