Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2b2880f6-3011-3457-91e9-f1dd0625ae49.roa
File: 2b2880f6-3011-3457-91e9-f1dd0625ae49.roa (raw, json)
Hash identifier: 7rKC5yN7B3uphxA/zjui1Rl5cl5SeqUHu9vNIJnvExM=
Subject key identifier: 68:8B:22:B6:5F:29:FA:39:83:08:A0:C5:8F:D9:D1:4D:41:AD:31:F7
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F43285848305DB20EE1D605711F745080
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2b2880f6-3011-3457-91e9-f1dd0625ae49.roa
Signing time: Fri 13 Dec 2024 03:54:28 +0000
ROA not before: Fri 13 Dec 2024 03:54:28 +0000
ROA not after: Thu 13 Mar 2025 02:54:28 +0000
asID: 13335
IP address blocks: 2606:4700:21::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:30:5d:b2:0e:e1:d6:05:71:1f:74:50:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 13 03:54:28 2024 GMT
Not After : Mar 13 02:54:28 2025 GMT
Subject: CN=375d9880-2fd4-4e3a-8caf-38bbbda356f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:a8:ba:ed:04:7c:f5:7d:d8:61:46:c6:a7:68:
78:ca:75:f7:46:53:ae:e4:df:0a:1c:da:cf:5e:59:
78:ed:f4:7a:2e:c3:3b:d3:1e:17:17:d3:57:91:eb:
93:47:84:a8:16:05:f9:ff:44:2a:ee:21:66:8d:fd:
9b:37:58:e3:4a:f5:aa:30:8e:50:e6:8a:5b:f8:0e:
d6:81:f5:42:87:1b:23:56:7b:58:70:11:a4:a0:94:
5b:bc:32:bb:61:b0:e1:ef:a6:01:df:59:56:bd:7d:
8a:9a:30:eb:f5:76:1e:dd:9e:a0:c8:86:7a:a7:01:
6c:84:8c:26:0a:cd:42:f5:6b:77:33:3e:8c:3d:65:
f6:1c:de:b4:87:50:ef:8a:63:2f:42:f1:08:01:5a:
4b:58:70:e7:8c:5a:99:4c:5d:83:c0:c0:c6:c3:26:
3f:56:08:e0:26:85:71:94:27:18:ce:c2:ff:26:6d:
36:a8:f2:f6:b7:88:e9:97:9f:58:3f:60:21:df:01:
a3:f5:3d:22:69:01:fb:65:e7:dd:31:89:32:bd:98:
74:4a:5c:fc:12:73:07:d7:4a:c1:f3:9b:5e:58:12:
39:de:41:c4:d9:2d:d3:61:54:ab:0f:c3:a6:e5:a8:
32:6e:60:5f:21:86:55:d6:56:43:f3:7d:d2:6f:25:
15:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:8B:22:B6:5F:29:FA:39:83:08:A0:C5:8F:D9:D1:4D:41:AD:31:F7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2b2880f6-3011-3457-91e9-f1dd0625ae49.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv6:
2606:4700:21::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
69:34:c2:29:1b:3b:d6:28:78:ec:88:5f:f1:25:26:4c:76:fe:
88:5a:bf:c6:3c:60:8c:c9:1a:1e:d6:a8:d4:e9:b1:10:fb:d4:
a4:0f:1e:69:6e:90:d0:f7:64:9d:ec:89:61:57:c4:d9:6a:1d:
1e:b5:2a:e9:ca:df:2f:6b:00:ac:84:66:4d:b9:4e:4e:f6:8a:
95:e3:93:ed:72:5a:fb:11:5b:b0:ff:39:0f:37:51:11:d3:ea:
c7:08:6a:ab:04:fc:e9:a5:2d:6e:f0:bb:a9:53:43:72:4b:1a:
75:f2:14:e5:4c:5b:b0:67:0d:3a:53:a0:1c:df:dd:39:9b:fa:
00:f0:c5:78:f3:3e:6b:dd:af:48:19:a6:ce:d6:00:92:c1:b4:
f5:cd:fc:e6:94:31:4d:f5:4d:27:3e:92:35:5f:4f:d8:04:02:
08:0a:dc:48:8e:43:a8:0f:23:cf:aa:ef:b9:c0:93:cc:df:0c:
cb:87:e6:4b:24:b5:a8:1c:ff:6f:bc:60:08:c7:96:47:cf:b7:
6d:b1:a8:31:80:ae:30:ee:c7:e0:d7:73:90:d4:e5:90:d5:02:
6d:2c:98:24:9f:a5:fc:4d:61:a7:00:49:1a:4c:4c:a4:6e:e0:
fb:e2:85:ab:b7:6e:4d:73:b2:f9:ca:57:ed:a4:f4:15:aa:97:
fb:15:e9:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 00:00:32 2025 by rpki-client