Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/15d81619-7dda-31a8-a0ce-5b5ababa717e.roa
File: 15d81619-7dda-31a8-a0ce-5b5ababa717e.roa (raw, json)
Hash identifier: qIcmy+0wLUzmw+kipFZ0MzhC8zxo9h3W+N609OPDF/I=
Subject key identifier: 37:D0:FD:2C:32:99:E6:C3:3A:CF:43:E4:DA:83:14:30:5F:7C:54:C9
Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Certificate serial: 010D0C9F432858494E2EB2CBBE7B0C60CF581EF0
Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/15d81619-7dda-31a8-a0ce-5b5ababa717e.roa
Signing time: Tue 25 Mar 2025 13:00:51 +0000
ROA not before: Tue 25 Mar 2025 13:00:51 +0000
ROA not after: Mon 23 Jun 2025 13:00:51 +0000
asID: 30215
IP address blocks: 2620:101:200d::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:4e:2e:b2:cb:be:7b:0c:60:cf:58:1e:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Validity
Not Before: Mar 25 13:00:51 2025 GMT
Not After : Jun 23 13:00:51 2025 GMT
Subject: CN=b60a0e29-84f6-4ccc-9f60-aff437cef8ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:90:1f:a2:e8:eb:53:be:5b:ad:08:fc:31:01:
70:73:15:fa:31:52:87:d2:eb:37:4f:37:2d:42:af:
18:a5:30:83:f3:a0:74:98:23:d9:e6:51:1d:b6:5e:
e6:cf:38:7b:3b:8f:f1:d2:85:75:42:fc:c1:fe:30:
ca:a3:c2:10:87:dc:9e:a7:ed:d3:a0:7b:3a:d9:85:
7f:e9:af:3c:78:10:8d:87:a6:78:31:17:1e:27:51:
e1:de:49:9f:f0:dc:dc:9c:ae:e0:e7:cd:1d:47:4f:
49:11:df:a8:74:6c:e5:1a:1a:7f:dd:8f:34:9e:5a:
6b:0a:81:0c:74:4a:af:fc:86:14:e9:a4:f4:57:ee:
6b:8a:05:1c:f9:48:9e:8b:0d:00:af:65:ba:d7:aa:
35:19:8a:aa:38:ea:23:db:df:38:11:ee:56:b0:f3:
b4:0a:e3:13:9f:0b:19:0f:52:c1:66:39:b5:a4:7d:
d2:eb:36:4a:d9:c5:cc:e6:47:5a:9c:47:2b:40:87:
6b:50:ee:45:6e:36:a8:ea:e6:c1:63:a1:08:3e:e8:
56:e3:b7:d0:04:39:ed:5b:04:ee:4b:17:25:e4:63:
66:99:9c:c0:f7:20:b8:df:31:56:d3:4b:8c:6a:c8:
6e:42:f6:d1:eb:f7:2c:8d:6b:85:2d:c0:44:1f:77:
ed:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:D0:FD:2C:32:99:E6:C3:3A:CF:43:E4:DA:83:14:30:5F:7C:54:C9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/15d81619-7dda-31a8-a0ce-5b5ababa717e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl
X509v3 Authority Key Identifier:
keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:101:200d::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
40:d0:3a:a5:7f:68:3f:c9:58:d6:84:d5:b9:98:f0:89:56:65:
f5:f3:c6:c1:81:48:2d:98:dd:76:af:f2:76:89:1e:db:76:40:
9f:33:bf:d3:58:4f:41:82:d7:6c:de:43:bf:a2:bb:5a:4e:71:
99:31:58:ce:f8:3b:a0:01:3d:f3:2b:7f:2d:c3:1d:fa:b9:92:
16:20:67:26:9a:5a:9f:ab:64:e8:2a:df:de:71:a7:17:1b:ff:
b8:b4:6a:97:40:a5:54:2e:a4:7e:84:50:b7:5c:7c:95:f9:80:
ad:d3:9e:0f:12:cc:95:1e:1c:d6:54:97:ca:42:2f:31:92:95:
96:05:37:97:55:e8:09:00:8c:ec:64:2f:a7:82:b4:87:4c:1c:
1e:32:0d:83:09:d1:c5:4b:c4:a4:3e:03:b2:a7:b2:d5:cb:63:
5f:88:ab:54:3a:9b:9f:81:8c:5a:8c:23:9c:2a:71:0e:50:bd:
25:38:fb:19:44:f3:a2:d5:76:d8:c8:e3:2c:7f:64:e9:9d:72:
54:31:1a:f5:d4:4a:6c:8c:fa:34:20:6e:16:b4:6f:fd:54:12:
54:95:e7:10:87:d7:31:b0:c1:d5:6f:44:ef:47:fd:61:f0:20:
a7:11:fc:b2:f0:f0:28:62:96:df:39:fc:ab:a1:96:96:48:1c:
c3:10:25:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:38:07 2025 by rpki-client