Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5a753a69-3aca-3dbe-926d-cd25401f855f.roa
File: 5a753a69-3aca-3dbe-926d-cd25401f855f.roa (raw, json)
Hash identifier: +NMtvKC5PnabDIHhqdApEqK5lqebqHw/X8kmyfSF+M8=
Subject key identifier: F0:80:48:02:78:E5:AC:66:A0:11:59:48:6B:CE:E7:C3:78:53:3D:AD
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F43285848305DA045C3FADD343577E080
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5a753a69-3aca-3dbe-926d-cd25401f855f.roa
Signing time: Fri 13 Dec 2024 03:54:20 +0000
ROA not before: Fri 13 Dec 2024 03:54:20 +0000
ROA not after: Thu 13 Mar 2025 02:54:20 +0000
asID: 13335
IP address blocks: 2606:4700:20::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:30:5d:a0:45:c3:fa:dd:34:35:77:e0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 13 03:54:20 2024 GMT
Not After : Mar 13 02:54:20 2025 GMT
Subject: CN=b8f51a0f-6f2b-46d3-ba9a-22f81baf9f2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:d9:72:08:41:be:e6:8f:e7:eb:22:cd:de:2a:
f4:eb:2a:50:c7:e7:d8:e9:2c:f9:7c:d9:c6:90:de:
8c:d3:82:d1:70:f6:06:f0:62:73:49:f3:bc:38:ec:
58:9e:99:f3:f7:47:d5:a8:e7:1d:3d:65:74:8f:74:
b8:24:6a:6c:30:ce:fa:73:1d:66:9a:5e:38:a7:04:
61:2b:ca:1c:62:e9:85:d9:a4:1d:3e:ac:a9:1e:44:
79:9b:ee:b8:1e:66:3c:1d:84:49:51:6f:68:9b:37:
b2:13:9b:dc:c5:b3:09:15:0b:43:75:3c:1a:9b:00:
5c:fd:b6:df:a7:cd:90:00:ef:33:8a:7b:4e:4c:48:
d7:a5:71:13:1d:c8:cb:5f:bb:cd:5d:3f:04:93:db:
26:45:06:78:eb:ab:24:5e:e0:12:f1:17:8a:90:7e:
bf:09:cb:41:ca:75:01:5e:45:8c:91:3c:0e:6a:03:
c1:54:38:0b:a8:29:5b:4f:3c:91:38:73:79:23:d0:
57:71:5f:f4:25:c5:60:f4:d0:48:ef:b0:8c:2b:e0:
6a:02:26:56:d6:b9:ec:b1:5b:96:3f:bc:58:1e:17:
3d:fe:77:73:16:83:b6:f9:c9:8d:b7:32:0e:91:23:
dd:d9:a4:6d:98:08:1f:bc:f3:b5:ba:44:7a:28:33:
dd:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:80:48:02:78:E5:AC:66:A0:11:59:48:6B:CE:E7:C3:78:53:3D:AD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5a753a69-3aca-3dbe-926d-cd25401f855f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv6:
2606:4700:20::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3c:b6:3b:27:56:11:ee:bd:83:32:66:28:d5:4d:26:26:06:ed:
42:86:72:cf:ed:ec:39:10:b8:58:f5:95:b9:53:bf:e3:ef:da:
1d:fc:25:e4:31:e8:92:a7:eb:5a:16:95:4f:7e:9c:35:c3:2a:
51:f3:45:12:e7:cf:62:9f:a9:62:a3:e7:7c:48:f4:87:de:31:
bc:45:e9:38:c6:e2:8c:07:57:f8:99:38:01:87:4f:36:70:43:
16:06:c7:1e:0c:c6:59:e9:63:ff:3c:90:c8:36:8e:0d:4a:4e:
4c:73:3a:05:37:27:c6:c4:99:d6:7d:06:f9:0f:b3:ab:82:41:
ea:35:aa:6b:0a:f1:2f:74:76:a0:2f:70:ab:4a:53:b7:a2:4b:
ad:b0:ed:d8:dd:a7:3f:5c:2b:e3:1d:fc:cd:87:81:89:09:51:
89:ee:cf:6b:65:13:d4:21:ca:54:d1:30:a9:ac:9c:25:36:6d:
a9:c1:89:20:7a:1e:41:a6:76:c0:2c:72:54:62:57:ee:96:3b:
67:b2:82:a7:e3:e4:4e:0a:fc:0e:e4:5a:89:62:7d:5c:dc:a9:
b5:c6:b9:ac:c2:80:42:ea:b0:86:00:26:dd:eb:4c:20:6e:31:
38:f9:24:61:2d:0a:08:5b:53:dd:78:e6:c4:5a:f6:49:d8:6a:
36:40:63:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:09:02 2025 by rpki-client