Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/aa45ee55-420d-375e-acab-502fb74065d3.roa
File: aa45ee55-420d-375e-acab-502fb74065d3.roa (raw, json)
Hash identifier: BZQrfr1YW9jjhs8gMgS2i0MMkp9/WySiWINbRp5YhfU=
Subject key identifier: 62:31:6D:E4:DC:58:16:E4:69:F8:E7:4A:49:B5:4C:F6:D6:10:AB:F3
Certificate issuer: /CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
Certificate serial: 010D0C9F4328584943F7EC69B6DE92DA02716580
Authority key identifier: AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/aa45ee55-420d-375e-acab-502fb74065d3.roa
Signing time: Fri 21 Mar 2025 21:12:31 +0000
ROA not before: Fri 21 Mar 2025 21:12:31 +0000
ROA not after: Thu 19 Jun 2025 21:12:31 +0000
asID: 13445
IP address blocks: 2607:fcf0:100::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:43:f7:ec:69:b6:de:92:da:02:71:65:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
Validity
Not Before: Mar 21 21:12:31 2025 GMT
Not After : Jun 19 21:12:31 2025 GMT
Subject: CN=f0dcdcc4-f8b4-4ed3-8b6e-29f3dbacd6a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:33:2e:67:1c:d3:85:84:6d:ed:15:db:00:e5:
d0:03:c0:1f:87:37:4a:2c:8b:94:09:51:6c:7e:1e:
62:23:83:54:98:c2:d4:e0:e9:16:41:44:83:52:44:
5f:93:f5:ed:4d:19:7c:77:3f:eb:78:5d:f4:91:9d:
db:4b:be:48:92:98:b9:91:52:ec:75:47:50:83:00:
cb:53:75:e0:7a:53:c1:03:a3:65:a3:77:bd:62:1d:
18:1d:bd:2c:15:e3:ef:86:1f:d2:3a:c0:11:5b:14:
c8:3c:84:77:4b:7e:d6:94:f0:bf:d4:d6:d7:4c:01:
d2:2c:47:a6:e2:f9:b2:ba:4f:36:8a:ab:34:07:29:
29:c0:6e:28:91:c4:28:24:f2:1d:3a:c3:e4:e2:16:
2f:ba:a9:fd:33:99:4a:51:80:0b:5e:db:33:03:f2:
d8:39:b6:c5:e2:1c:3e:1d:06:9f:f4:d1:be:de:cf:
c6:f5:7a:fa:7b:d9:5b:bf:4a:1c:47:1b:33:5c:cc:
8c:09:39:85:1d:fe:b5:7c:96:cc:6d:52:10:be:27:
c2:de:db:36:a6:a6:d9:1a:e7:96:4a:84:c6:e4:f3:
c1:d1:89:95:31:21:77:7f:8b:7e:13:26:e1:8b:62:
69:b4:c8:08:88:4c:6f:14:c5:99:0e:ca:60:b8:90:
5a:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:31:6D:E4:DC:58:16:E4:69:F8:E7:4A:49:B5:4C:F6:D6:10:AB:F3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/aa45ee55-420d-375e-acab-502fb74065d3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl
X509v3 Authority Key Identifier:
keyid:AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:fcf0:100::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5f:ef:fa:ab:70:5e:13:58:8e:b2:11:23:35:85:ba:89:5f:79:
34:81:8b:a9:f9:b2:f2:e7:fa:3b:42:2a:14:f7:e2:36:3d:fc:
9d:4a:ab:43:2f:8f:e0:d3:04:9a:5d:23:40:ba:46:97:ea:dc:
d8:4b:43:cc:f8:9f:2c:7d:fe:04:5d:63:90:2c:bd:9c:ca:6e:
f6:eb:ab:78:64:17:d7:e4:10:eb:4f:c3:94:2f:4c:8f:55:3e:
fa:ad:67:d1:2c:d8:61:f6:83:bf:76:89:39:da:3b:8a:59:75:
f2:e4:9b:52:ce:53:b2:6f:27:1e:7e:a7:0d:40:db:11:8a:42:
2f:6c:0b:48:ab:98:5d:0a:17:56:e0:63:13:58:6c:46:f2:23:
ea:60:17:52:70:3e:16:d1:09:e7:14:85:ee:b8:5a:8a:69:c2:
f1:74:d7:ec:9c:96:33:e9:62:c6:cb:57:a4:7c:ab:9b:0b:c2:
e7:25:81:52:92:78:2b:85:d0:c4:a1:a7:1c:f5:2e:d4:59:42:
f0:d5:18:dd:65:a2:ec:90:c3:fd:75:af:82:55:d2:c2:6e:20:
b5:c2:43:fc:83:6e:48:33:24:a0:4c:9b:56:b7:62:a2:f1:dc:
b2:14:18:7c:ee:77:fd:f5:6b:b6:54:15:39:74:a2:fe:dc:49:
ca:38:a5:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:11:03 2025 by rpki-client