Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/14ee329f-6a96-44cb-8cc5-222e0fec8c3a/ebee0977-640d-3d99-96dd-ce85b00ed859.roa
File: ebee0977-640d-3d99-96dd-ce85b00ed859.roa (raw, json)
Hash identifier: 7OTJIStUwEMYZ8aroVUgxXcvjnzacLqpEr2KqaVGb6Q=
Subject key identifier: D6:C3:8C:3A:51:CD:87:7D:26:C2:64:91:3B:63:B7:50:6B:56:16:0C
Certificate issuer: /CN=14ee329f-6a96-44cb-8cc5-222e0fec8c3a
Certificate serial: 010D0C9F432858488AE0942E8DA9E11BCCE1B240
Authority key identifier: AE:48:23:F9:A1:EA:C3:0A:1E:7A:D0:58:AA:D4:EA:78:AF:C1:EC:1A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/14ee329f-6a96-44cb-8cc5-222e0fec8c3a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/14ee329f-6a96-44cb-8cc5-222e0fec8c3a/ebee0977-640d-3d99-96dd-ce85b00ed859.roa
Signing time: Tue 14 Jan 2025 14:00:51 +0000
ROA not before: Tue 14 Jan 2025 14:00:51 +0000
ROA not after: Mon 14 Apr 2025 13:00:51 +0000
asID: 29169
IP address blocks: 2604:3400:ca01::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:8a:e0:94:2e:8d:a9:e1:1b:cc:e1:b2:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14ee329f-6a96-44cb-8cc5-222e0fec8c3a
Validity
Not Before: Jan 14 14:00:51 2025 GMT
Not After : Apr 14 13:00:51 2025 GMT
Subject: CN=c55c3349-44cb-40d0-b880-0ee20b8ba43d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:4e:66:f0:97:e6:da:00:6b:f3:f5:e4:f6:4a:
cf:17:56:9a:fa:38:66:84:92:ee:01:6c:31:2f:4b:
4d:3c:d6:01:a6:29:98:78:77:7c:26:a9:13:67:35:
53:e1:be:51:88:00:00:97:64:fb:81:05:3b:3c:08:
39:5f:22:64:d6:20:17:cc:e8:14:71:52:cb:5b:45:
fa:75:cc:05:bf:4c:21:31:dc:71:c3:07:36:8e:12:
49:24:0b:ad:43:9a:88:22:34:40:11:5f:63:eb:d8:
61:e9:4e:c7:00:f6:26:7c:f3:55:a3:c0:06:61:8b:
d1:e3:f9:53:5d:ad:0d:98:e3:1c:af:44:c5:23:e4:
36:4e:52:21:a8:e1:c9:dd:c9:33:24:f6:bd:70:6e:
b9:e5:21:f8:cb:7e:f4:ce:5c:54:3d:45:dc:7d:6c:
90:9b:57:45:c5:6b:46:fe:7e:c7:f5:8f:f4:57:1a:
47:04:7b:2c:87:c8:a9:43:d3:e8:59:85:3d:a9:7c:
2f:d0:65:f5:d9:71:72:2a:ac:77:f9:2c:4f:e4:18:
79:64:8f:17:69:0d:0e:b5:2c:5e:78:96:d7:12:6f:
e9:48:88:e1:0e:ac:99:6e:aa:ae:03:f0:8e:2e:63:
4d:f2:b0:60:00:17:6c:75:86:66:8e:23:bd:76:d2:
1a:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:C3:8C:3A:51:CD:87:7D:26:C2:64:91:3B:63:B7:50:6B:56:16:0C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/14ee329f-6a96-44cb-8cc5-222e0fec8c3a/ebee0977-640d-3d99-96dd-ce85b00ed859.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/14ee329f-6a96-44cb-8cc5-222e0fec8c3a/14ee329f-6a96-44cb-8cc5-222e0fec8c3a.crl
X509v3 Authority Key Identifier:
keyid:AE:48:23:F9:A1:EA:C3:0A:1E:7A:D0:58:AA:D4:EA:78:AF:C1:EC:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/14ee329f-6a96-44cb-8cc5-222e0fec8c3a.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:3400:ca01::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5e:65:ed:92:f9:22:a4:df:3f:a1:c6:d3:91:71:60:66:0a:2f:
98:cb:02:1d:88:24:b2:b7:c0:2d:7a:01:a1:69:c5:12:4a:a5:
84:46:ed:65:da:cd:f9:8b:1f:71:a9:d2:aa:7f:bd:57:ac:e2:
ba:e3:8a:3b:74:40:64:59:8d:10:db:27:73:e3:e7:7d:c9:d0:
b2:54:8d:fa:40:9e:dc:06:9d:6e:d9:30:f7:3c:21:87:cb:eb:
89:c5:83:05:f5:76:1f:63:b6:e5:52:d8:0c:38:0c:93:91:c6:
60:b9:35:a2:68:0c:90:f6:20:ea:0f:af:3f:97:56:24:90:43:
03:f9:db:55:3d:df:23:90:87:0e:25:dc:31:84:47:ac:4a:3a:
43:a1:d9:22:8c:13:f4:70:5a:94:c8:1c:43:b2:00:31:f4:30:
5e:b9:98:cc:dc:63:49:6b:f6:30:9e:1a:f2:2c:d4:f6:a8:b7:
42:c6:fe:33:9c:0b:ba:89:25:e8:30:47:a2:83:df:fa:da:ed:
a8:66:7a:61:d1:54:7c:b6:e2:12:4f:87:d2:f6:59:8a:31:39:
21:ec:08:4e:94:db:a0:5e:a2:02:18:0a:4f:50:ed:19:b9:46:
1c:c3:e1:0e:a9:39:47:6e:83:cc:8f:a2:9d:44:34:fe:2b:5e:
8d:f8:2a:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:44:53 2025 by rpki-client