Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/8df79e80-7df4-3262-a053-5aa89ec5cb94.roa
File: 8df79e80-7df4-3262-a053-5aa89ec5cb94.roa (raw, json)
Hash identifier: Sv+FsydYB0YM6IqpWUk2CFpCykcppM4Fof/IgV9+wUE=
Subject key identifier: C4:F0:C0:22:0F:55:E9:69:2F:92:36:75:DD:B3:02:53:04:A0:5D:AD
Certificate issuer: /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
Certificate serial: 010D0C9F43285848467AB189C5FD6CB1A70454A0
Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/8df79e80-7df4-3262-a053-5aa89ec5cb94.roa
Signing time: Sat 21 Dec 2024 02:00:39 +0000
ROA not before: Sat 21 Dec 2024 02:00:39 +0000
ROA not after: Fri 21 Mar 2025 01:00:39 +0000
asID: 397651
IP address blocks: 2601:2008::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:46:7a:b1:89:c5:fd:6c:b1:a7:04:54:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
Validity
Not Before: Dec 21 02:00:39 2024 GMT
Not After : Mar 21 01:00:39 2025 GMT
Subject: CN=02b85fc1-4d72-492c-ac09-5233957142c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:d0:30:04:2d:d7:ad:24:e7:bf:77:f2:2a:2e:
42:58:ad:3e:d3:c3:ce:59:e0:fc:1f:3c:f9:a7:02:
aa:64:31:d3:df:3e:b2:2f:fd:16:ac:74:ca:77:ed:
79:14:f6:b7:11:0f:d2:ee:03:d3:9d:3c:59:cc:9a:
ee:20:fe:e7:67:38:71:27:96:61:d1:48:b9:12:1c:
24:be:88:9b:fd:ef:c9:e1:71:a4:df:f9:b8:2e:7f:
b6:1e:e7:86:e9:b4:4a:3f:3d:09:11:46:ca:87:59:
f6:05:0d:8c:26:26:b7:8e:47:82:09:60:55:61:d1:
7d:85:31:da:10:91:0b:13:5d:4b:2b:cb:e8:10:56:
99:0d:11:c9:21:f8:e6:b3:2c:1a:31:9f:a7:87:57:
f6:5f:1f:aa:11:ae:eb:db:6e:d3:0d:c0:78:a5:17:
f5:0e:d3:4b:02:67:6d:b7:18:1b:f8:dd:4c:78:d4:
fb:ff:6f:59:50:d7:75:b3:ad:89:54:8b:a5:7d:e2:
a9:7f:30:e9:cd:70:8a:97:44:10:7b:31:c5:e7:f8:
0c:3a:97:26:bc:74:15:c7:81:97:96:76:0f:0f:41:
65:c6:f4:c1:6d:00:ff:a1:58:0a:fd:45:be:a4:fa:
b1:cc:bf:ac:97:ed:f1:24:e1:7b:96:49:26:11:e2:
da:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:F0:C0:22:0F:55:E9:69:2F:92:36:75:DD:B3:02:53:04:A0:5D:AD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/8df79e80-7df4-3262-a053-5aa89ec5cb94.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl
X509v3 Authority Key Identifier:
keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
sbgp-ipAddrBlock: critical
IPv6:
2601:2008::/29
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a9:41:56:2b:3a:3e:97:17:e0:87:ee:e2:16:88:0f:73:08:b4:
d8:f2:b6:b1:62:d6:62:19:de:37:00:23:53:4f:37:87:3b:ed:
2f:bf:ad:70:bc:11:c0:99:66:f9:e1:80:75:76:de:2e:d4:f0:
b1:db:ff:b8:eb:31:fa:f5:b7:45:33:5b:ed:8f:52:37:dd:28:
15:42:fc:7a:ab:65:68:81:47:7a:55:ff:dc:9e:be:04:02:44:
5a:da:43:ff:01:e9:a7:f5:33:82:52:64:44:9b:86:91:c3:ce:
ab:d9:37:af:5e:72:28:2c:26:c9:86:63:30:56:4f:99:c4:d7:
5f:a6:35:b2:ad:34:ad:bb:12:17:20:37:99:c9:9a:d7:93:87:
d2:ce:73:9a:12:0d:a0:16:04:78:69:d6:9b:8f:50:90:bd:cf:
ac:af:df:9a:61:d4:aa:ac:64:57:6f:7f:ad:0e:fe:ed:e9:fe:
e7:f4:b5:e9:57:f2:5b:1f:31:a9:50:fe:f3:32:15:24:de:a9:
c8:8f:06:c3:cb:6a:34:56:f8:0b:2d:2b:6a:db:ee:fd:09:01:
2c:10:b3:ff:61:d5:73:75:1c:0c:a4:6f:45:fa:43:63:fb:2d:
dd:52:cc:a7:8c:12:e4:2c:a6:fb:ae:94:7b:b2:5f:55:7d:62:
0f:ec:e3:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:39:55 2025 by rpki-client