Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5dd53d9e-382d-4f16-b9d4-08067d598d81/3f72cbe7-6e99-37b3-b11d-c8fb21d4bb16.roa
File: 3f72cbe7-6e99-37b3-b11d-c8fb21d4bb16.roa (raw, json)
Hash identifier: l7xIFBoaySV2bFaEi0Kp5NpYaBwqjSYaW6nFU00yd10=
Subject key identifier: 82:B0:4F:5D:4E:EC:EF:16:4E:5A:77:72:4E:EB:9D:F3:20:09:A9:14
Certificate issuer: /CN=5dd53d9e-382d-4f16-b9d4-08067d598d81
Certificate serial: 010D0C9F43285848037B67D58E9D36BD40914000
Authority key identifier: 8C:ED:19:E2:82:DC:31:0D:9D:A6:4F:37:50:BB:03:8D:52:E3:EE:2E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5dd53d9e-382d-4f16-b9d4-08067d598d81.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5dd53d9e-382d-4f16-b9d4-08067d598d81/3f72cbe7-6e99-37b3-b11d-c8fb21d4bb16.roa
Signing time: Wed 27 Nov 2024 02:00:39 +0000
ROA not before: Wed 27 Nov 2024 02:00:39 +0000
ROA not after: Tue 25 Feb 2025 02:00:39 +0000
asID: 2635
IP address blocks: 2620:115:c000::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:03:7b:67:d5:8e:9d:36:bd:40:91:40:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dd53d9e-382d-4f16-b9d4-08067d598d81
Validity
Not Before: Nov 27 02:00:39 2024 GMT
Not After : Feb 25 02:00:39 2025 GMT
Subject: CN=8dfb16a8-d231-4e85-af2a-ce39ef71d512
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:cb:44:69:d0:11:e1:98:5a:77:ef:d9:65:33:
3b:2a:70:a0:19:0c:de:fe:db:39:25:c9:a9:22:de:
1d:a4:bc:a1:ee:74:4c:8f:cc:38:e4:44:b6:56:21:
dc:03:11:b2:a6:d2:85:e4:92:5f:79:7e:91:8a:4a:
a2:63:71:25:ac:fc:ed:ed:a7:22:07:fb:28:a6:9b:
ae:91:e8:f9:cd:38:16:76:0e:94:aa:70:ab:bb:27:
c1:0d:80:fb:19:53:4f:44:a0:fb:14:74:54:c3:17:
ab:09:e0:fd:90:7d:03:66:fe:48:64:3e:aa:dc:de:
58:d8:ec:65:3f:50:4b:df:9d:e3:98:81:a3:0b:db:
73:11:25:60:2e:ea:e7:78:2a:de:0d:78:cc:ab:6a:
c2:9f:37:d6:43:38:57:f4:b8:a7:bc:cb:86:12:f8:
a4:ad:b7:95:ac:24:14:34:06:9b:6e:ef:0e:47:8d:
0e:1d:a3:08:07:cb:07:f5:4d:d8:b1:1b:ef:a2:a0:
9f:56:72:d4:93:c8:79:4d:6e:fb:64:53:9a:43:83:
db:9e:f1:4a:10:77:09:36:29:cc:2a:22:8c:b8:ae:
47:ce:ce:54:e0:c7:b7:60:26:41:d5:d5:6b:50:6c:
bc:18:f5:18:4f:9c:69:9a:21:2f:58:39:cf:02:05:
ce:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:B0:4F:5D:4E:EC:EF:16:4E:5A:77:72:4E:EB:9D:F3:20:09:A9:14
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5dd53d9e-382d-4f16-b9d4-08067d598d81/3f72cbe7-6e99-37b3-b11d-c8fb21d4bb16.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5dd53d9e-382d-4f16-b9d4-08067d598d81/5dd53d9e-382d-4f16-b9d4-08067d598d81.crl
X509v3 Authority Key Identifier:
keyid:8C:ED:19:E2:82:DC:31:0D:9D:A6:4F:37:50:BB:03:8D:52:E3:EE:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5dd53d9e-382d-4f16-b9d4-08067d598d81.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:115:c000::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
87:44:cc:f3:35:bb:8d:03:c5:b5:97:76:84:12:be:b8:b0:9e:
c9:7a:01:aa:67:50:71:10:82:3f:7a:b5:42:95:23:d5:f7:2e:
21:18:a5:97:7b:17:7c:e8:83:21:70:b6:e1:26:e2:0e:ce:aa:
ed:48:9e:de:a5:e5:6f:16:c9:7e:d1:cd:8c:c5:6a:20:03:58:
9b:96:f2:c1:58:d4:b1:f4:a5:33:1f:67:3f:8c:de:ab:55:29:
3f:1e:f5:54:24:13:65:29:df:4f:6e:ac:b4:c6:9f:42:96:0a:
f7:76:d6:1e:5e:66:ff:89:c6:27:9a:df:49:6d:e7:b6:6b:bd:
cb:0f:e1:74:e8:10:bb:d5:6d:9a:63:71:c6:a5:0e:09:55:26:
55:bc:e1:92:e2:0a:4d:71:53:96:ec:a3:1d:8a:5a:86:f1:d7:
c7:c4:9e:33:9f:79:09:22:b5:5c:3c:e5:21:d0:20:15:b8:ae:
da:7e:cc:09:ab:92:38:82:d4:87:3b:25:00:37:a4:85:94:09:
97:62:6a:56:77:d3:fa:c4:49:d0:c2:4d:5a:c3:1a:f5:cc:ed:
d8:1b:7b:9a:73:08:28:f5:47:30:20:e0:7f:c1:2d:57:c0:3d:
29:0c:d9:b2:7e:8e:46:9c:37:e2:4d:f1:b1:50:32:d0:41:d4:
cd:cf:3d:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:47:44 2025 by rpki-client