Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/f6fbaf52-cbe4-3d4b-89fc-849f2fae16c0.roa
File: f6fbaf52-cbe4-3d4b-89fc-849f2fae16c0.roa (raw, json)
Hash identifier: WbLo1ZE7NrrDCGLmpMb6SN5In41g8QKv+KLaIKz05nc=
Subject key identifier: A2:95:00:E5:8F:50:4F:B4:58:D1:08:80:6D:2A:89:AD:05:A1:D2:94
Certificate issuer: /CN=6e9c5894-f794-4209-a00d-cf232363d7c6
Certificate serial: 010D0C9F432858482A8FD7BCDFF609FB94853708
Authority key identifier: EB:6D:3E:D4:C8:21:B9:96:11:9E:0C:09:FF:5D:B7:88:80:52:94:85
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/f6fbaf52-cbe4-3d4b-89fc-849f2fae16c0.roa
Signing time: Wed 11 Dec 2024 02:00:38 +0000
ROA not before: Wed 11 Dec 2024 02:00:38 +0000
ROA not after: Tue 11 Mar 2025 01:00:38 +0000
asID: 13916
IP address blocks: 2620:100:9000::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2a:8f:d7:bc:df:f6:09:fb:94:85:37:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e9c5894-f794-4209-a00d-cf232363d7c6
Validity
Not Before: Dec 11 02:00:38 2024 GMT
Not After : Mar 11 01:00:38 2025 GMT
Subject: CN=42d29714-18c3-482a-90c6-01f375885754
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:ce:bc:46:6a:b3:14:d6:bb:6b:02:a1:a3:7c:
fe:55:72:4f:a4:f8:61:ac:44:32:a0:6a:c0:43:a1:
a3:2d:9b:0f:a2:f2:ca:33:46:bf:a8:05:6c:c2:7d:
2c:03:81:a8:4e:ed:7d:11:87:7b:cd:d7:bc:74:4b:
f4:d3:2b:6d:37:15:b3:6e:2b:b6:6e:26:f4:e8:c4:
8a:22:da:c4:23:f4:2a:e9:c0:3f:94:5c:14:81:ad:
df:6e:87:10:a4:38:c4:0a:eb:8a:9d:24:c9:83:b3:
6c:91:82:92:71:6b:0b:ca:5d:4e:21:22:96:31:81:
25:86:1f:ca:a5:b6:72:b7:6e:55:4a:88:4e:1b:0c:
68:24:ab:46:f8:d4:18:11:31:5e:75:da:2c:b8:e7:
f3:3a:e8:de:8d:29:0e:bb:68:21:cf:b8:91:cf:d4:
85:a4:76:43:4b:81:0f:af:bd:b7:77:5d:9f:d3:58:
bf:f6:aa:de:b9:11:b1:ca:69:6e:57:23:a2:6a:75:
35:a5:d4:a4:60:d1:96:04:20:92:c2:46:96:90:39:
d2:6d:68:35:27:6e:e0:4c:06:77:45:99:cf:28:16:
83:17:72:cf:28:34:95:58:0b:a1:d7:69:ed:47:31:
a9:72:71:87:08:48:77:bd:16:8e:62:80:10:e4:49:
25:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:95:00:E5:8F:50:4F:B4:58:D1:08:80:6D:2A:89:AD:05:A1:D2:94
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/f6fbaf52-cbe4-3d4b-89fc-849f2fae16c0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.crl
X509v3 Authority Key Identifier:
keyid:EB:6D:3E:D4:C8:21:B9:96:11:9E:0C:09:FF:5D:B7:88:80:52:94:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:100:9000::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
64:d6:9b:8f:66:d2:a2:0c:13:90:4a:06:1e:0f:d0:77:e4:f7:
d8:e2:9e:85:cf:aa:0a:79:e7:50:39:bc:23:a9:4f:df:c4:72:
94:58:2e:b9:68:0d:49:c7:6a:3e:e3:02:b7:1d:89:e6:5c:9e:
8d:2d:0b:da:15:66:ff:0e:9c:93:a2:05:ef:da:e3:5b:37:a4:
2b:58:bb:53:63:f3:91:43:a1:06:bc:17:ea:76:66:8c:74:06:
6a:96:58:4e:8b:25:9a:9a:62:d3:b2:31:5d:c8:3f:9e:97:f0:
5d:86:ee:83:79:9a:f5:17:75:0f:86:a2:f7:9a:dd:76:68:16:
ad:1e:ff:99:3a:fe:ac:4f:72:da:b2:4b:4a:69:fd:58:e4:00:
3c:23:64:b1:f9:fa:cb:48:29:ea:24:64:a8:fe:d3:72:f0:e3:
e6:a1:39:68:e4:d5:d4:11:a5:9b:ea:ea:8a:15:19:4b:38:86:
e3:a7:90:d6:13:93:c0:15:83:13:6e:77:f5:c4:b4:e5:52:f7:
7b:3b:cd:23:4b:7d:a4:2a:59:e3:8d:03:44:5d:08:53:e1:e1:
c5:84:79:e2:ad:ba:96:b5:c3:fa:f1:c3:1b:5f:fa:82:47:24:
da:06:d7:19:f7:83:b9:b9:a1:df:c7:0f:e1:78:ce:9b:9f:0c:
91:90:f0:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 18:59:22 2025 by rpki-client