Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/ad2336b0-b476-3593-a1a4-d7d8831af0b5.roa
File: ad2336b0-b476-3593-a1a4-d7d8831af0b5.roa (raw, json)
Hash identifier: 2QF+aXyxbMBGxrui68obbgfBuf1WyB61Bbz48yPEQ5M=
Subject key identifier: BF:2E:52:64:85:BC:E1:04:09:AF:A1:C5:1B:21:6E:DE:EA:C2:BD:D8
Certificate issuer: /CN=824dfb5f-8580-48ff-b32e-fd393fa7dcc4
Certificate serial: 010D0C9F43285849203C0C857358D2F7F3596B60
Authority key identifier: D9:84:FC:01:25:1A:F5:E5:ED:9B:B3:69:50:58:31:B7:12:47:29:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/ad2336b0-b476-3593-a1a4-d7d8831af0b5.roa
Signing time: Sun 09 Mar 2025 02:00:39 +0000
ROA not before: Sun 09 Mar 2025 02:00:39 +0000
ROA not after: Sat 07 Jun 2025 01:00:39 +0000
asID: 13335
IP address blocks: 2620:12c:90af::/48 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:20:3c:0c:85:73:58:d2:f7:f3:59:6b:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=824dfb5f-8580-48ff-b32e-fd393fa7dcc4
Validity
Not Before: Mar 9 02:00:39 2025 GMT
Not After : Jun 7 01:00:39 2025 GMT
Subject: CN=301428ac-9f8e-412d-b90e-b68d47aaee4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:e7:7d:8c:bd:ed:d8:3e:b7:22:2f:fe:ab:27:
b5:64:9b:d2:8b:2c:3d:02:f8:af:39:76:6d:8d:9a:
96:d7:e2:cf:bd:c3:05:b3:e6:39:49:7b:2d:0c:55:
a6:be:89:66:5e:dd:39:e1:29:78:52:27:10:26:0e:
7b:6f:8d:81:29:f7:ac:c9:e3:cf:17:83:d1:1f:dd:
d7:75:58:12:27:d4:17:e0:8e:8f:ae:6e:3a:2d:a9:
50:d3:c1:f4:57:cb:2d:b8:fa:2f:33:75:55:c7:e2:
5c:5d:9b:b2:e5:8b:89:a5:39:80:ce:82:6c:16:35:
69:06:0c:61:c0:11:86:e9:c0:b6:52:a3:c3:fd:c5:
71:8f:d5:bf:76:34:9e:03:c7:30:ca:16:dd:ce:8c:
83:62:56:f9:d1:10:7d:b2:b0:09:69:e0:dd:03:5b:
16:96:41:50:d4:88:1e:d1:fe:93:32:2c:4e:22:7c:
44:56:72:ee:9e:c5:f3:4d:dd:ff:54:db:94:38:ff:
6b:52:e8:40:f4:9b:91:28:59:6c:b5:b1:8e:05:15:
01:9c:60:be:ea:28:f3:38:b7:33:ab:75:db:f1:b2:
4a:d8:61:8e:8c:fd:2e:5e:1f:ce:8a:f1:8f:e5:35:
73:2a:0c:0b:64:64:06:04:a4:e3:91:33:83:09:4d:
7d:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:2E:52:64:85:BC:E1:04:09:AF:A1:C5:1B:21:6E:DE:EA:C2:BD:D8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/ad2336b0-b476-3593-a1a4-d7d8831af0b5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.crl
X509v3 Authority Key Identifier:
keyid:D9:84:FC:01:25:1A:F5:E5:ED:9B:B3:69:50:58:31:B7:12:47:29:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:12c:90af::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a4:69:49:b2:84:b6:e3:ef:d7:a3:f4:7b:62:0f:3b:3f:db:83:
48:66:e8:8e:28:14:b0:09:81:82:b7:5f:f4:e2:6b:ba:ea:75:
a1:ac:a9:ae:a0:fb:ef:ce:88:d7:2b:89:dd:be:21:81:d6:54:
77:52:7a:c9:4a:fc:41:ee:c4:91:58:c8:f2:b8:c1:46:9a:9a:
41:3c:29:cb:f5:58:5c:c7:21:18:ba:d4:e5:cc:ae:13:4b:46:
1e:9d:fe:9b:f3:dd:41:75:38:48:ac:96:b1:72:da:c1:a7:a6:
96:0a:f8:59:ff:43:e9:c5:96:a7:1a:e5:00:19:46:bd:3c:3b:
1e:8a:4f:da:f1:32:94:d2:d8:85:18:21:ce:5b:f7:a7:ea:7f:
ae:c7:0e:18:36:7a:78:e2:77:c4:52:45:25:b5:c8:95:55:1a:
ab:37:f2:10:2a:27:d3:8b:b7:e6:ae:23:6e:40:a9:d1:d0:94:
55:89:50:01:18:91:4c:43:ce:1e:53:6e:a7:91:34:be:f8:96:
e1:6c:5a:df:4b:76:7b:67:c1:3e:1c:a3:ab:96:fe:d1:e8:be:
8d:06:65:35:80:c1:cf:ec:1c:b6:4d:0a:4a:2e:14:8c:5a:7d:
5a:a7:90:59:44:29:9c:09:73:5f:7f:5d:2c:8a:89:c5:67:f9:
33:09:3e:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:57:11 2025 by rpki-client