Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3c5328f7-89de-3e4e-b266-6c7f4e7668e8.roa
File: 3c5328f7-89de-3e4e-b266-6c7f4e7668e8.roa (raw, json)
Hash identifier: XmSkxSCxe9A7hfFEPZfsjYKrqz6F6pZ4NWOQ2o8/k0Y=
Subject key identifier: FA:51:A1:ED:76:69:5C:A6:C6:90:68:BC:E3:86:65:98:E7:94:45:64
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F43285848385E709BEE5AA2EE59678A00
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3c5328f7-89de-3e4e-b266-6c7f4e7668e8.roa
Signing time: Mon 16 Dec 2024 00:42:26 +0000
ROA not before: Mon 16 Dec 2024 00:42:26 +0000
ROA not after: Sat 15 Mar 2025 23:42:26 +0000
asID: 13335
IP address blocks: 2606:4700:f4::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:38:5e:70:9b:ee:5a:a2:ee:59:67:8a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 16 00:42:26 2024 GMT
Not After : Mar 15 23:42:26 2025 GMT
Subject: CN=0c5e3624-ac27-4034-8009-533ded97ca54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:d3:e9:5c:7d:a2:01:4e:1e:90:18:57:90:af:
a6:e9:98:64:99:60:91:7b:87:00:51:ca:bb:b9:7c:
96:9a:32:35:5b:19:c8:23:4b:c4:81:d3:e9:45:18:
61:61:25:58:7f:e7:ea:e8:0c:34:0c:3f:b3:88:d2:
9f:8f:ab:3b:b1:2d:11:bb:a6:95:fa:bf:b0:9f:62:
7f:61:c1:4f:83:fd:cf:ba:23:4d:51:ad:34:f6:8c:
d9:ea:de:0c:e3:76:40:96:54:d8:af:02:ab:e5:b1:
da:79:21:2b:24:21:00:ac:26:e9:94:db:2f:c3:a7:
e6:f0:e2:82:f1:48:32:15:0d:e1:be:69:15:86:34:
cc:e4:91:94:b2:3f:6c:68:d3:c0:37:5b:2b:1f:6e:
77:81:74:f8:23:15:12:3c:ce:af:d0:9a:ea:a2:1f:
dd:37:12:c6:f4:2d:48:22:e1:a7:b0:79:4f:4f:1f:
28:3a:87:de:7c:bf:ef:23:82:fb:be:54:d9:a6:35:
6b:c0:d2:84:f9:ea:4e:e2:96:c6:10:01:b9:81:01:
18:5c:ba:64:10:f0:0d:be:00:99:89:6d:78:a2:5f:
0d:4f:4e:d2:0a:7c:81:7f:bc:50:40:34:bf:45:a4:
62:af:ed:68:59:0e:8d:f6:8b:19:e8:3a:d2:f9:34:
d6:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:51:A1:ED:76:69:5C:A6:C6:90:68:BC:E3:86:65:98:E7:94:45:64
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3c5328f7-89de-3e4e-b266-6c7f4e7668e8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv6:
2606:4700:f4::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b4:64:97:9b:3a:45:41:be:bc:e7:2c:a4:b4:5e:3c:31:df:9d:
58:ec:e6:ce:85:b4:81:2f:a4:e8:73:a0:5a:25:6e:2c:51:69:
7d:14:8e:fb:25:6d:b7:72:ed:4e:95:2f:85:af:18:44:0b:a1:
32:39:03:ca:af:63:09:13:a9:84:55:7b:76:65:19:b3:3e:ac:
9d:e4:8d:b9:5e:96:b7:e0:e4:43:57:76:c6:61:5f:20:1b:96:
3d:b1:7c:b9:57:ee:4e:f8:8a:6b:18:72:56:0d:15:57:03:74:
87:5e:e5:63:7b:04:6b:4d:04:a1:b7:0b:a9:40:0e:52:66:87:
e3:94:26:72:9c:90:14:cc:56:12:98:da:4c:7d:41:4e:e3:29:
83:b7:ea:ce:f7:1d:18:db:d1:0d:93:da:35:1a:4f:aa:6a:37:
e4:34:9d:0f:78:e8:d8:74:f9:5b:dc:85:2f:59:b1:dd:df:69:
85:bb:7a:ca:09:27:39:6d:86:97:04:11:78:96:2b:92:cc:cd:
0a:3c:32:e2:4d:e7:2a:7b:83:f8:56:49:7f:48:ad:51:1c:d8:
99:ba:d1:85:24:f4:f7:d8:4d:38:f0:46:e0:73:71:ad:18:aa:
f9:83:07:6d:72:e4:76:f5:1b:79:e1:2a:13:f0:6b:20:df:70:
80:a3:c9:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:45:52 2025 by rpki-client