Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1ced6a8a-e5be-3420-aa03-a929c8f6a116.roa
File: 1ced6a8a-e5be-3420-aa03-a929c8f6a116.roa (raw, json)
Hash identifier: WA9F5TdczZF9JDi0ifi4YE3SrGgzFf2xqCx7EnIUI5k=
Subject key identifier: BC:AC:93:BC:7B:65:C5:10:E8:03:9E:E5:A1:CB:0F:DA:41:27:E9:9A
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F43285848387D4BFBB2BEBBB4662E0180
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1ced6a8a-e5be-3420-aa03-a929c8f6a116.roa
Signing time: Mon 16 Dec 2024 01:44:37 +0000
ROA not before: Mon 16 Dec 2024 01:44:37 +0000
ROA not after: Sun 16 Mar 2025 00:44:37 +0000
asID: 394536
IP address blocks: 2606:4700:ff01::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:38:7d:4b:fb:b2:be:bb:b4:66:2e:01:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 16 01:44:37 2024 GMT
Not After : Mar 16 00:44:37 2025 GMT
Subject: CN=72caf5a9-15b1-4360-9ea5-e84a08ade08e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:22:1d:d1:19:42:86:2c:87:0f:75:52:44:e0:
3d:36:2c:7e:66:8c:d7:a7:6f:36:4d:d5:fd:21:31:
c0:bb:18:7a:80:38:5c:0d:f4:79:ec:e4:29:3b:55:
8f:81:68:58:02:bb:9b:dd:25:e1:0d:6c:fe:b1:17:
33:33:64:68:d1:55:17:59:cd:b7:a0:4c:3e:70:46:
0a:de:fd:70:2d:d2:85:46:b8:ce:b8:e8:cf:17:b5:
31:10:0b:54:95:6d:6b:8f:4b:1a:df:36:0e:7e:78:
25:4f:ed:1d:8d:76:39:15:4e:bb:51:93:d6:09:86:
dd:fe:59:3e:49:ec:16:2a:b0:0d:93:63:8b:ba:06:
68:a4:fd:98:5f:53:31:b9:1b:83:75:b8:77:a0:73:
4f:38:ca:ba:49:f8:24:0b:04:d9:8f:9a:1c:57:5d:
d2:98:be:e7:c4:86:f6:3f:4f:60:f7:b6:1f:41:90:
29:32:36:8e:10:ed:86:00:33:2d:0a:ad:d8:85:71:
c4:de:7c:60:5b:32:9d:b2:77:1f:7a:94:3c:57:2e:
d2:48:73:0f:a1:ce:7b:6c:67:50:86:47:8e:50:9c:
97:ce:9d:2d:8b:2a:67:11:31:1c:e6:52:75:4b:9d:
db:f6:98:8d:3f:bd:96:60:a7:0d:22:e9:c9:75:98:
2b:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:AC:93:BC:7B:65:C5:10:E8:03:9E:E5:A1:CB:0F:DA:41:27:E9:9A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1ced6a8a-e5be-3420-aa03-a929c8f6a116.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv6:
2606:4700:ff01::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b0:d4:fc:a8:f0:37:11:ed:86:f5:49:96:fe:fc:42:32:69:ec:
a8:57:0d:7a:4d:46:6d:31:9d:3d:51:d4:33:e1:9f:6d:88:0f:
27:e6:06:ee:87:da:74:72:60:c2:74:04:e1:91:03:3d:25:82:
ca:7f:91:e3:70:8f:cc:c0:f1:b4:80:24:f3:53:29:22:a9:0e:
c2:c6:93:98:2f:d2:cd:40:ca:d0:83:8a:c7:34:12:ad:00:8d:
4a:b2:dc:3d:a8:6b:e0:a1:89:1a:14:2c:f0:94:bf:3b:f6:47:
3c:18:43:76:d9:31:23:25:16:a8:e1:87:06:b1:a8:10:d0:71:
1e:aa:c1:3b:bd:46:82:e5:50:b6:d4:2e:09:18:39:c4:e0:26:
ff:b1:3a:8c:54:82:de:ea:94:49:32:25:79:b3:46:3d:2e:a7:
48:98:cd:9e:a2:be:5c:67:2d:57:04:d2:c3:f5:cc:24:82:8d:
d6:09:47:f2:e7:54:40:48:55:7d:5d:6d:75:b5:86:90:9f:f6:
8e:f5:df:f6:95:3b:5a:d8:5f:c1:99:c6:03:e7:a1:10:fa:5d:
44:8c:24:81:c7:35:af:34:dd:8c:ce:27:9a:7a:92:1b:99:d5:
40:07:26:bf:2a:18:08:7e:23:da:8a:52:92:40:8d:c5:fa:7d:
8e:84:24:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 05:05:17 2025 by rpki-client