Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8cb29b44-8f5c-4462-bb13-d72b4e15e20d/c173112d-6d57-32b2-bb71-b30e11554b91.roa
File: c173112d-6d57-32b2-bb71-b30e11554b91.roa (raw, json)
Hash identifier: qZ0eFjGgiHjRbblJsrORe/Ip4YPH5i5EyD5+kDv/GFE=
Subject key identifier: 7E:26:42:4B:47:7E:3F:89:06:DE:21:76:11:75:8A:CF:74:7D:60:6C
Certificate issuer: /CN=8cb29b44-8f5c-4462-bb13-d72b4e15e20d
Certificate serial: 010D0C9F43285848D21139668AB624E24130C6C0
Authority key identifier: 92:DD:F4:0B:DD:98:98:64:EC:5A:DC:E0:F4:C0:20:1B:B0:64:7B:75
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8cb29b44-8f5c-4462-bb13-d72b4e15e20d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8cb29b44-8f5c-4462-bb13-d72b4e15e20d/c173112d-6d57-32b2-bb71-b30e11554b91.roa
Signing time: Sun 09 Feb 2025 02:00:39 +0000
ROA not before: Sun 09 Feb 2025 02:00:39 +0000
ROA not after: Sat 10 May 2025 01:00:39 +0000
asID: 1299
IP address blocks: 2607:41c0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d2:11:39:66:8a:b6:24:e2:41:30:c6:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cb29b44-8f5c-4462-bb13-d72b4e15e20d
Validity
Not Before: Feb 9 02:00:39 2025 GMT
Not After : May 10 01:00:39 2025 GMT
Subject: CN=0746a20d-2190-4239-86ed-d1a93d5e6175
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:3b:7e:bc:cb:b0:ef:14:8b:68:46:5b:d1:b0:
9d:2b:6e:99:ab:83:71:12:3b:2b:60:1c:03:30:01:
fd:a7:c3:be:3b:f4:e8:ea:06:e2:cc:8f:2f:e8:3f:
9a:e5:aa:15:1c:89:d9:54:d2:40:8e:3d:03:61:0e:
f1:ce:aa:95:ab:b6:00:a2:9e:05:54:92:3e:d3:89:
0f:79:af:5d:79:6e:7f:76:07:56:2a:27:f4:5d:33:
27:74:c0:7e:81:3a:6f:27:7a:e4:6b:e5:b8:6b:c7:
81:56:bf:ec:a3:06:14:24:02:74:70:f1:62:b5:02:
78:aa:9a:c9:94:14:73:de:63:b6:ec:78:25:87:4f:
c6:39:0a:a8:aa:6e:b6:19:35:36:9c:14:04:7a:02:
75:85:6f:36:e2:17:90:36:04:51:b6:c4:bf:58:8e:
89:52:bd:97:46:58:95:f0:d0:1a:b3:2e:d7:60:7e:
85:12:b9:5a:75:94:20:09:66:f7:1e:27:f7:fb:45:
29:ac:7a:ef:92:a1:93:0f:5c:d8:e0:b9:3e:b5:71:
d3:53:c9:20:14:a9:cd:84:52:b3:09:ca:08:a4:e4:
78:5a:d9:fb:97:0a:3d:6f:6a:a8:a3:71:48:db:b8:
19:1d:89:27:d0:1e:2e:5c:b3:29:40:3e:31:da:f2:
b3:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:26:42:4B:47:7E:3F:89:06:DE:21:76:11:75:8A:CF:74:7D:60:6C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8cb29b44-8f5c-4462-bb13-d72b4e15e20d/c173112d-6d57-32b2-bb71-b30e11554b91.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8cb29b44-8f5c-4462-bb13-d72b4e15e20d/8cb29b44-8f5c-4462-bb13-d72b4e15e20d.crl
X509v3 Authority Key Identifier:
keyid:92:DD:F4:0B:DD:98:98:64:EC:5A:DC:E0:F4:C0:20:1B:B0:64:7B:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8cb29b44-8f5c-4462-bb13-d72b4e15e20d.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:41c0::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
90:fe:e5:e9:9a:12:62:43:6e:2a:3c:6b:9b:a7:56:68:e3:2d:
23:6b:7e:60:b8:74:af:63:6c:ff:5c:62:d8:be:78:73:9a:7f:
f3:50:5f:41:76:5e:82:76:7f:4c:b9:df:ce:2f:90:cc:cd:61:
98:7e:b5:cf:c3:9e:c5:fc:29:50:ac:ad:e7:f6:28:aa:cc:50:
5a:64:b5:37:ef:f4:1d:59:c7:3d:4b:c6:34:d8:e9:d8:b6:cb:
19:07:d2:9b:86:57:e9:b7:fc:47:54:23:fb:6b:af:e0:ad:a1:
89:08:a4:0d:cd:b4:89:d0:ba:31:d2:e5:64:57:c3:16:2d:4a:
23:79:57:b2:fb:4a:f4:27:a9:5c:a9:39:01:c7:a9:02:52:9e:
d2:b7:cd:6f:04:77:ab:e0:4d:e4:48:56:49:e8:38:bb:27:40:
14:8c:33:f3:4e:36:54:ab:36:02:89:66:19:47:20:7c:62:fc:
40:fa:d5:3f:10:9a:fa:df:99:92:c4:1c:b1:65:1a:22:a6:b6:
b3:a6:d5:67:9c:11:c2:15:87:18:38:bd:fd:20:0a:d3:99:ac:
cd:65:4f:23:8c:d9:b3:7c:95:cb:c8:16:2b:0b:33:56:20:ca:
81:d1:d7:ed:5e:ec:d7:97:1e:ac:21:bb:1f:21:8b:16:fe:fa:
a0:dd:68:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:26:44 2025 by rpki-client