Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6b21bd62-7b5a-3488-a805-790ba20e6ba5.roa
File: 6b21bd62-7b5a-3488-a805-790ba20e6ba5.roa (raw, json)
Hash identifier: H/RtwHwNuwHEqnBWHopt4C5ZQ/tkbGNgoo+dEAS7SQY=
Subject key identifier: 7F:FC:03:53:89:C8:40:AA:31:3F:96:45:6F:02:59:C0:70:BB:DD:A9
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F43285848386014E8AE4B042E13067880
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6b21bd62-7b5a-3488-a805-790ba20e6ba5.roa
Signing time: Mon 16 Dec 2024 00:45:45 +0000
ROA not before: Mon 16 Dec 2024 00:45:45 +0000
ROA not after: Sat 15 Mar 2025 23:45:45 +0000
asID: 13335
IP address blocks: 2606:4700:301c::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:38:60:14:e8:ae:4b:04:2e:13:06:78:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 16 00:45:45 2024 GMT
Not After : Mar 15 23:45:45 2025 GMT
Subject: CN=d964d20d-b90f-4c5f-8578-7b3f4abf4dc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:91:f0:86:7a:74:60:1e:16:f5:d9:cf:46:fa:
2c:bb:d7:a7:7a:a4:85:5a:2b:e8:67:65:1b:b3:f7:
f1:be:81:12:b5:d2:fc:2a:ed:6d:f0:28:d2:87:3d:
1d:26:0f:bd:ea:3a:fa:12:31:13:1f:b4:2c:cf:92:
73:8f:16:37:ab:93:87:23:f1:06:ee:01:9f:7b:33:
77:44:52:f6:83:4c:9d:74:09:f4:58:30:53:13:26:
35:c4:4a:68:e8:64:81:06:f8:d9:af:04:e4:48:bf:
19:b1:f4:bb:20:09:3a:d0:cf:02:80:fc:5f:7c:aa:
17:82:32:bf:9c:41:b6:7d:c0:c4:92:12:39:63:f4:
d0:6d:98:b1:f7:c1:24:8e:a1:05:46:62:04:21:03:
6f:82:f6:df:03:f7:6b:28:3d:21:f1:52:ba:46:c3:
f9:ed:1a:ee:5d:99:c8:8d:a6:21:1c:95:b1:0e:a7:
95:44:5b:5a:9f:7d:51:a4:37:a0:e4:00:87:55:a1:
bc:14:1c:e7:96:e0:44:bc:75:f9:42:8a:68:70:ad:
59:02:f3:ae:c9:de:e4:00:4d:09:f0:c6:94:ac:46:
df:d0:a1:80:96:53:69:41:5b:94:41:b3:ac:84:2a:
ab:40:67:c1:87:56:71:f8:80:4e:59:35:0d:8e:63:
f3:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:FC:03:53:89:C8:40:AA:31:3F:96:45:6F:02:59:C0:70:BB:DD:A9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6b21bd62-7b5a-3488-a805-790ba20e6ba5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv6:
2606:4700:301c::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
71:ba:d7:b8:10:9f:7c:8f:d3:63:de:b0:5c:99:c4:1a:81:d2:
6e:2c:86:f8:17:3d:63:9a:51:3f:69:43:6c:67:8b:c0:15:ad:
a9:b6:b7:7c:e2:bc:1b:ee:2a:d9:b9:e4:f7:fb:66:3a:0e:d6:
09:4b:e4:a7:94:f6:57:61:df:7a:c7:a4:76:c0:37:10:b2:a0:
d9:21:97:9f:69:5b:6e:ce:a0:3f:f8:d0:c3:76:f3:59:b5:79:
76:af:b4:41:87:91:ed:81:ad:c1:0c:68:86:f5:70:58:bf:99:
1e:16:cf:59:01:8d:f7:64:94:80:cd:82:10:9f:84:e1:07:1b:
ec:56:cd:f2:52:76:29:e8:72:21:f8:03:5c:49:00:c2:d8:95:
fe:a5:fa:d6:4f:12:54:b4:70:30:60:9c:b9:b5:b5:86:36:53:
7d:8d:76:d8:97:3c:bf:80:34:d8:cb:82:ae:06:52:17:48:21:
68:f9:92:d5:8f:7f:17:2f:03:a4:64:6e:91:6c:05:17:6b:7d:
ea:ff:6f:0d:14:12:fa:ca:45:64:2b:b4:e3:83:0f:3a:d1:fb:
da:ac:94:e4:fb:59:5e:cb:cb:d9:95:21:b4:ce:de:35:02:41:
40:b3:8c:79:10:af:d8:5b:3a:73:6b:f8:0b:9d:b0:98:08:4b:
d9:a2:4b:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:47:44 2025 by rpki-client