Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/9aea7e75-54d9-315f-9691-1f25d6d35f7b.roa
File: 9aea7e75-54d9-315f-9691-1f25d6d35f7b.roa (raw, json)
Hash identifier: Gjk9wt5I147SW+cD72o93cEWukJqE461feLgjk6gceM=
Subject key identifier: 43:37:9A:62:8B:F9:54:8E:74:9D:89:CA:3D:AB:34:3C:37:ED:97:00
Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Certificate serial: 010D0C9F432858487FB5E3C330E113F930F35800
Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/9aea7e75-54d9-315f-9691-1f25d6d35f7b.roa
Signing time: Fri 10 Jan 2025 14:00:51 +0000
ROA not before: Fri 10 Jan 2025 14:00:51 +0000
ROA not after: Thu 10 Apr 2025 13:00:51 +0000
asID: 16417
IP address blocks: 2620:101:200b::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7f:b5:e3:c3:30:e1:13:f9:30:f3:58:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Validity
Not Before: Jan 10 14:00:51 2025 GMT
Not After : Apr 10 13:00:51 2025 GMT
Subject: CN=0ec6f9ca-9d51-4106-8df5-11fe09c00ad9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:71:d6:87:1c:3b:5c:32:fc:e1:bd:1d:f8:36:
a9:10:e8:1f:da:63:85:1f:62:da:27:94:28:21:3b:
34:70:10:92:3f:5a:33:bf:ba:ce:91:ec:7d:13:87:
2c:af:58:70:3a:00:85:e3:70:c0:71:2f:a7:fa:13:
15:a4:25:b5:9a:8d:c4:0d:fc:04:5f:59:5b:5f:f5:
f3:cd:7a:5b:63:95:7b:91:9a:37:d6:27:d9:58:d7:
15:ea:f7:52:d9:a6:58:ca:57:f8:6a:d1:03:0c:d4:
c9:19:eb:02:6e:47:37:91:55:59:4c:98:b0:0a:d0:
f7:25:a6:8b:a1:59:e7:ac:ea:c9:b5:6b:0b:9d:6f:
68:c2:0f:f7:bc:e0:b2:e5:d8:1a:d5:c7:22:d4:1d:
4d:4e:6c:9e:b8:1d:5a:24:8c:49:fc:10:33:2f:51:
90:d1:14:4b:f9:ce:e4:e5:3d:86:0e:04:c3:90:97:
2b:f4:59:d7:c0:db:92:97:18:73:d0:52:e8:77:7b:
be:9c:8f:d3:6e:22:30:53:5f:f4:58:fb:96:83:bc:
8b:cf:4b:c3:fe:1d:22:9c:3f:85:a1:bb:c6:30:04:
78:0b:95:06:21:19:08:03:af:d2:0c:ae:21:fc:c0:
9a:ac:08:d9:3e:8b:6e:5a:4f:2c:6c:c1:76:06:0d:
c6:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:37:9A:62:8B:F9:54:8E:74:9D:89:CA:3D:AB:34:3C:37:ED:97:00
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/9aea7e75-54d9-315f-9691-1f25d6d35f7b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl
X509v3 Authority Key Identifier:
keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:101:200b::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2a:18:f8:12:f1:49:ae:f3:ea:34:4d:f4:f4:1e:31:c9:61:06:
fe:53:ca:4d:1e:ea:7c:0d:4f:ec:c3:26:af:34:bb:0a:2d:0c:
6d:73:32:f6:ef:71:80:a5:d7:da:e2:b1:11:63:27:a0:d7:6c:
21:de:c7:28:29:61:e2:6d:81:c5:23:09:ab:92:6a:3b:db:c1:
f4:cd:e5:e6:26:a5:d5:5f:37:59:d3:81:15:79:42:1f:1b:62:
15:70:d0:cd:af:1c:f5:ed:3f:7d:99:18:19:64:4d:67:7e:65:
f1:98:84:d5:73:84:00:7c:ea:d3:88:02:49:10:45:56:2b:f0:
32:af:98:e3:93:4e:5a:24:a9:b1:e4:d3:60:fa:f0:38:78:e1:
2e:72:98:be:74:40:07:f5:91:aa:bb:da:ff:b0:62:c3:c5:ce:
85:6b:dc:ae:e3:56:d2:3c:be:b1:de:c8:87:18:b6:d3:36:40:
b7:29:66:60:ae:5c:91:3c:ba:35:66:f0:b0:ca:76:55:79:9c:
20:1d:c8:85:12:7c:bb:3e:e3:b2:cf:e3:11:a4:5b:d4:a8:d4:
c8:f7:5d:59:6c:d9:ea:a2:e7:1a:e0:d0:59:8a:99:41:47:d0:
ae:eb:05:04:28:c8:f6:7b:e1:f6:54:de:2e:1c:5c:50:92:45:
47:2a:c3:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:39:34 2025 by rpki-client