Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1d7e1471-9d25-3a62-a434-f22e9e6f4b9a.roa
File: 1d7e1471-9d25-3a62-a434-f22e9e6f4b9a.roa (raw, json)
Hash identifier: ktVo52zBD+Iv9SraeLmTiZKv4bkSeYAitjeA3AC5gbM=
Subject key identifier: 8A:B9:9C:4B:F2:06:64:BB:C4:70:4C:56:3E:47:75:FC:0F:C5:AD:10
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F43285848385F1EE1BA08EC80088FE580
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1d7e1471-9d25-3a62-a434-f22e9e6f4b9a.roa
Signing time: Mon 16 Dec 2024 00:43:49 +0000
ROA not before: Mon 16 Dec 2024 00:43:49 +0000
ROA not after: Sat 15 Mar 2025 23:43:49 +0000
asID: 13335
IP address blocks: 2606:4700:3000::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:38:5f:1e:e1:ba:08:ec:80:08:8f:e5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 16 00:43:49 2024 GMT
Not After : Mar 15 23:43:49 2025 GMT
Subject: CN=eca1bc2a-9676-44af-8ab3-51b5b227bc45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:fe:76:bb:b8:05:6a:66:ff:ad:6e:38:44:13:
7c:dd:06:97:80:df:cb:d1:b5:ac:ba:87:ed:fd:0b:
f8:f5:bc:f1:1a:48:31:4c:92:d8:82:c5:e6:15:72:
e7:9a:b8:5a:85:37:b4:fb:74:58:53:27:7c:e4:15:
0d:69:e2:96:14:d1:78:08:d1:5c:b3:37:a0:ce:3f:
87:87:83:5e:f0:25:38:2e:48:9d:bc:88:b5:33:f0:
8c:fd:8e:46:e0:3a:4a:e5:b2:d9:58:f8:20:32:98:
46:70:75:a0:ce:b7:14:3b:b2:01:4f:a5:27:7f:3a:
0d:0b:62:62:60:57:1c:57:bd:63:95:87:3b:7a:a5:
e8:33:10:4e:f4:b3:d7:60:91:70:3c:1d:8b:24:95:
ec:9b:fb:8d:51:23:53:56:44:73:de:32:7a:23:35:
5a:16:50:0d:74:9f:9a:ed:5e:bf:e8:d6:2e:73:30:
90:4e:50:54:65:29:f1:ad:c9:2d:b5:06:0f:ec:a8:
02:88:cf:32:88:09:4a:df:31:4a:45:f6:b2:77:be:
6c:25:58:26:41:44:5e:fb:aa:f8:0f:76:72:cf:07:
cf:b2:c4:0a:21:9a:ca:87:ef:15:1b:67:81:42:f6:
dd:b7:45:8d:fd:35:87:2e:67:31:e6:00:44:50:2c:
21:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:B9:9C:4B:F2:06:64:BB:C4:70:4C:56:3E:47:75:FC:0F:C5:AD:10
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1d7e1471-9d25-3a62-a434-f22e9e6f4b9a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv6:
2606:4700:3000::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3c:b9:7c:48:85:0e:cc:53:3d:67:df:fc:a7:22:81:23:8d:1a:
9b:e7:12:3e:9f:64:a0:e2:14:da:42:b6:60:b9:f9:12:ba:bb:
61:71:be:d4:3e:89:ac:52:7c:7d:ca:71:53:58:23:5f:70:00:
bf:9c:62:88:ec:b2:78:f4:81:1b:1b:b7:4e:3c:8b:fb:49:74:
2f:e6:e6:6b:87:93:6e:5f:77:07:d9:26:a6:54:70:21:7a:c5:
81:15:85:7d:04:52:6f:19:dd:ac:f7:9c:a0:55:4f:ad:c9:bb:
ab:1d:20:e6:41:7c:93:bd:20:b0:80:99:a6:56:7b:db:7f:14:
c2:1f:52:6c:65:c0:af:76:ee:a9:7c:0e:43:a4:21:00:f0:ca:
e8:80:51:a3:e3:56:98:6b:d3:64:dd:81:e0:09:92:c5:7b:bb:
0c:0e:94:66:4c:ef:db:14:8e:5c:61:fe:aa:c5:c7:85:8c:32:
b6:46:89:4c:3b:cd:67:ef:d8:b4:59:aa:ca:48:68:49:c8:72:
c3:cb:7f:3e:9c:eb:84:2e:1c:60:58:53:b5:77:0e:3a:04:45:
e3:dd:30:26:1a:f1:df:66:f9:28:7c:9c:98:f5:22:f5:56:ed:
56:32:2e:24:4d:8e:4b:1f:53:a8:52:14:cb:e2:ba:26:7a:7c:
ed:2f:ef:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:22:04 2025 by rpki-client