Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a250beff-0df5-3a60-afe1-77574f30a281.roa
File: a250beff-0df5-3a60-afe1-77574f30a281.roa (raw, json)
Hash identifier: k2ufTjvYAD3He5n1Q4fCY98aKoBSqeIAoqr4wAOB4Gc=
Subject key identifier: CC:3E:EB:75:A6:81:A2:11:7B:E9:55:96:6D:31:5F:03:2C:F3:6A:F8
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285848C5818F5D7A656BD0C2025800
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a250beff-0df5-3a60-afe1-77574f30a281.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 15169
IP address blocks: 2607:f8b0:4009::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:81:8f:5d:7a:65:6b:d0:c2:02:58:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=836fda0c-313b-4b5d-95f4-dde8cc77b9a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:55:e4:38:d3:5a:5d:b3:61:ca:23:c3:c7:45:
19:2e:7b:54:fa:53:f8:df:95:46:4a:6a:dc:13:97:
ae:73:d3:42:0c:21:e5:ab:8d:30:3d:7d:c1:6e:4c:
59:0b:3d:8d:ee:01:d8:f4:92:48:36:ee:4a:0e:54:
28:8c:f5:26:aa:f5:be:c1:30:92:ac:67:30:a5:41:
5a:07:df:b1:f9:e9:55:2a:81:57:de:fc:ac:31:40:
2b:25:b7:f2:22:2d:48:52:0b:9c:8e:61:65:b6:32:
ba:b2:c8:67:4b:1e:71:62:a6:5f:0f:66:f3:05:a1:
f2:2d:83:e5:3b:1c:32:30:55:26:f4:42:dd:25:c8:
ca:9a:b2:a4:af:ff:b1:d9:88:bc:dd:14:06:fb:fb:
6c:af:8d:1b:d8:23:75:c0:1e:8b:bc:32:3b:89:ef:
13:c1:95:21:5f:1d:bd:a9:c7:b2:53:47:83:58:4b:
36:80:9f:36:a8:6b:ae:32:8f:6c:32:70:1d:87:a9:
a4:53:61:a5:f1:b6:92:15:e4:0f:21:37:a1:ea:8d:
02:98:f9:39:4f:15:95:f5:05:32:59:07:16:07:18:
57:92:d1:15:18:e7:6c:ed:f9:dd:63:eb:96:ea:f7:
e8:90:d4:86:aa:42:b6:69:9a:de:fc:11:38:87:c4:
da:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:3E:EB:75:A6:81:A2:11:7B:E9:55:96:6D:31:5F:03:2C:F3:6A:F8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a250beff-0df5-3a60-afe1-77574f30a281.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:f8b0:4009::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
96:57:22:89:c3:ca:d2:5c:47:59:2f:5b:7f:1f:f6:c3:2f:c6:
7f:ca:ea:e6:f1:36:69:a8:4e:f0:59:9f:1f:3f:96:c6:4a:96:
e8:f8:a2:2a:29:04:6a:8c:87:bf:3f:8d:04:61:a1:13:7c:32:
56:aa:78:b9:c8:26:b9:3e:fc:c7:43:a6:f9:87:52:7d:7b:a7:
1a:22:97:d4:d7:49:b9:59:d1:41:9c:51:61:8a:8a:ee:9d:19:
8f:37:af:5b:63:b8:1f:0e:a0:9e:66:88:ca:c7:75:09:b2:be:
ab:a4:bc:f2:54:92:ba:c3:13:72:55:1a:d2:d7:65:68:a3:e1:
02:7a:8e:c7:37:45:bc:01:46:51:d0:51:58:d7:14:ae:a6:7a:
31:25:e8:51:93:e9:32:15:5a:b7:9f:f5:a7:f1:da:17:50:f0:
f3:0f:47:5a:bb:c5:f8:21:d9:84:45:f7:ab:31:4e:9f:42:17:
bf:6a:c7:26:ee:78:a6:f2:ca:68:94:ab:f7:6b:1f:c9:dc:7b:
a9:25:2b:b8:b1:2d:ee:88:5b:83:37:26:5a:ec:4d:2e:7d:d6:
71:8d:6c:71:82:54:48:84:1c:d0:ba:7d:50:4c:0a:f6:3c:b7:
7c:26:d3:ce:26:1b:5a:23:83:aa:a9:00:cd:81:a0:b5:e7:c3:
ba:9c:7e:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 08:40:39 2025 by rpki-client