Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7/3f9b2a02-9015-3eca-b6bb-ce876bc6abaa.roa
File: 3f9b2a02-9015-3eca-b6bb-ce876bc6abaa.roa (raw, json)
Hash identifier: SQn09zum+sh53KmBHlS8yXj47bFmouCkLDPn4LGWw7Y=
Subject key identifier: C3:6D:37:31:27:7A:9B:EC:40:B5:10:29:10:F3:A5:E8:3D:10:76:5D
Certificate issuer: /CN=4ee5141e-a069-4955-8c55-4da5dfd36fa7
Certificate serial: 010D0C9F432858485E35B303F569B1583BDBA280
Authority key identifier: 65:C9:42:6B:A0:76:47:52:56:27:29:98:79:48:05:81:BE:B5:AE:BB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7/3f9b2a02-9015-3eca-b6bb-ce876bc6abaa.roa
Signing time: Sun 29 Dec 2024 14:00:53 +0000
ROA not before: Sun 29 Dec 2024 14:00:53 +0000
ROA not after: Sat 29 Mar 2025 13:00:53 +0000
asID: 0
IP address blocks: 2001:504:44::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:5e:35:b3:03:f5:69:b1:58:3b:db:a2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ee5141e-a069-4955-8c55-4da5dfd36fa7
Validity
Not Before: Dec 29 14:00:53 2024 GMT
Not After : Mar 29 13:00:53 2025 GMT
Subject: CN=127fac1e-bc31-431c-a428-3f55fbb7fcfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:9d:74:06:c9:fb:c5:08:b9:d7:17:4b:b8:80:
84:be:59:f2:14:f6:a5:e0:f1:d0:53:01:7a:ae:1a:
5f:ea:8d:d9:35:a5:d2:a7:30:62:e3:73:54:61:3a:
80:7d:2a:0e:5e:3e:a2:ee:ef:f1:f1:1c:db:04:20:
83:43:f0:75:94:18:d0:81:b8:c8:87:63:b4:3c:45:
a7:10:82:3f:c4:e4:21:01:2c:4c:d3:34:04:73:05:
6b:da:88:b6:dd:c9:9b:54:82:a1:b0:9e:67:68:4f:
9a:a8:4e:58:7f:70:ca:ca:de:db:82:da:64:17:3a:
f2:cc:9d:23:50:31:cd:d1:fd:fa:de:bc:79:07:f3:
81:0a:d1:34:4a:5b:11:3a:89:0c:f6:03:a2:27:78:
8d:72:57:7b:bb:8c:8a:3f:0a:42:1b:17:fa:16:73:
1f:ba:9d:bc:de:31:b4:a0:8e:b8:50:86:a6:4e:29:
46:88:00:01:1e:91:00:1b:94:c6:fb:00:47:67:f6:
48:8a:53:8f:c7:9d:59:9c:03:fa:09:78:72:66:8d:
4a:e1:95:5e:9e:c5:a9:96:da:e3:dc:04:c3:61:0b:
72:7b:af:e6:68:f9:32:4c:c0:b2:d9:74:d7:22:2f:
4a:ec:a4:fe:70:2d:34:c6:04:55:62:3b:11:01:c3:
73:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:6D:37:31:27:7A:9B:EC:40:B5:10:29:10:F3:A5:E8:3D:10:76:5D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7/3f9b2a02-9015-3eca-b6bb-ce876bc6abaa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7/4ee5141e-a069-4955-8c55-4da5dfd36fa7.crl
X509v3 Authority Key Identifier:
keyid:65:C9:42:6B:A0:76:47:52:56:27:29:98:79:48:05:81:BE:B5:AE:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:504:44::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1b:df:84:26:21:6c:97:c0:68:61:b2:73:56:51:33:1b:38:73:
21:e6:4e:20:72:e8:42:0b:76:4b:db:84:9b:88:d1:60:9d:cd:
d2:43:da:da:7d:a9:2b:1f:c9:05:08:f6:0e:81:cf:37:95:f6:
d3:39:34:33:14:6b:a4:b9:96:5a:ac:96:a8:0d:19:c8:4a:0a:
c6:c5:6c:37:22:34:02:59:e2:5f:95:97:bc:11:f0:0c:48:89:
d1:ca:ee:2d:20:b2:f8:35:e2:52:57:f8:72:b4:95:fa:4a:b8:
e6:df:bf:90:0c:bb:d6:a8:1e:ae:af:3c:0e:70:8f:9d:81:d4:
ab:70:e6:6f:e6:50:e2:f8:f1:8f:52:4a:01:e6:ea:c4:0b:e5:
0f:4b:c9:04:ab:80:0f:b1:2e:e7:13:06:85:1c:96:90:24:69:
b0:1d:33:03:9e:2c:b3:46:00:b8:55:49:21:86:5b:5c:c6:f6:
74:ee:45:7e:1f:1a:dc:45:44:7d:c1:dd:56:f0:90:4c:9a:84:
3b:da:59:24:0a:18:ae:e4:b3:d4:44:ce:c6:ec:c9:5a:fa:1d:
81:c0:1f:c3:ff:d2:4e:f2:43:b6:f6:96:fc:ee:3f:1d:60:a7:
58:20:cd:c6:85:09:f5:09:6c:fc:98:ab:79:69:37:7e:59:7d:
cf:0a:47:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:30:13 2025 by rpki-client