Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8f78a1e2-1d0b-37d9-9fe5-8ed913fac3f5.roa
File: 8f78a1e2-1d0b-37d9-9fe5-8ed913fac3f5.roa (raw, json)
Hash identifier: /mvt/BHe9PXxvFuv/ZKGxox0Vu/KR4Di0LcC8XKJslE=
Subject key identifier: 41:7B:78:03:36:C6:CA:66:F3:CB:F4:D5:82:29:42:E8:39:5C:AC:2B
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F43285848386E989B80C8AA3F5AC0C680
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8f78a1e2-1d0b-37d9-9fe5-8ed913fac3f5.roa
Signing time: Mon 16 Dec 2024 01:15:00 +0000
ROA not before: Mon 16 Dec 2024 01:15:00 +0000
ROA not after: Sun 16 Mar 2025 00:15:00 +0000
asID: 13335
IP address blocks: 2606:4700:4021::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:38:6e:98:9b:80:c8:aa:3f:5a:c0:c6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 16 01:15:00 2024 GMT
Not After : Mar 16 00:15:00 2025 GMT
Subject: CN=99d71a59-bf41-407a-b95a-5bbe344c70cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:80:74:bd:1e:27:3c:f9:bb:4c:22:2a:1d:e6:
a2:4a:89:1c:21:bc:2b:58:cd:03:0d:c6:5a:8c:eb:
56:75:6d:b1:b4:98:cd:1b:f1:b9:22:57:10:50:e9:
85:9e:eb:1d:0d:22:06:4a:df:96:52:60:ed:bc:4c:
ec:0c:85:52:2d:ec:c6:9c:cc:4f:b5:73:96:36:52:
c2:13:1e:d7:c5:1c:8f:fc:45:df:4f:92:35:90:98:
fe:3c:67:b9:5d:4f:65:c6:36:ef:51:c2:3c:31:df:
a1:36:8f:cd:8d:9f:0e:ed:bb:39:a7:ff:e3:46:db:
fe:a8:de:04:96:64:7f:8a:9a:d4:67:f7:f8:47:60:
cf:ec:4e:ba:1e:f7:dc:b2:56:2c:b3:b6:e8:cd:2f:
a8:fa:e8:7d:11:64:04:54:8b:f9:a9:f1:31:35:66:
bc:ec:1f:36:36:42:68:00:2a:87:5b:99:54:95:43:
79:bd:bf:35:ae:c7:c9:2d:cc:4c:da:15:33:e5:f9:
9d:b9:b4:ad:1b:26:4a:33:f3:76:f6:50:b8:c2:9d:
3c:b7:4d:6f:2a:69:26:44:b1:51:ed:8e:76:2d:45:
6f:cc:65:7c:2e:d6:e6:64:a6:86:5b:7e:cb:c2:f4:
e8:87:a1:95:a9:35:5d:54:c9:49:35:bb:06:4a:9f:
4a:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:7B:78:03:36:C6:CA:66:F3:CB:F4:D5:82:29:42:E8:39:5C:AC:2B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8f78a1e2-1d0b-37d9-9fe5-8ed913fac3f5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv6:
2606:4700:4021::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8d:35:ff:27:8e:81:00:47:14:ff:4c:99:af:d7:5f:05:b4:46:
a7:70:61:92:f8:ae:13:f3:4b:67:c3:be:bc:8d:30:b8:78:5c:
36:b8:15:98:af:80:3f:33:63:dd:a7:37:77:02:5c:c4:3d:06:
ab:a1:1c:50:e1:17:64:5f:00:24:45:7a:81:32:a0:c5:b0:bc:
63:3f:db:1f:c5:bf:a6:3a:c0:7c:ce:a9:93:77:ab:e9:0e:c8:
b2:70:ed:7f:c1:7d:e7:1d:50:46:04:95:7c:35:5f:6c:02:8e:
d6:e5:58:18:db:2b:d1:3f:f1:8b:d6:cd:fe:31:e4:3e:39:c1:
8a:95:01:81:5d:ef:bb:1c:77:bd:f7:16:30:34:17:16:d1:1c:
96:34:bc:0d:3c:9b:dd:e2:9c:f2:b1:98:10:6c:18:a5:93:a4:
51:a4:4e:b4:51:ec:df:c5:7d:d8:b3:0f:68:04:0e:d0:5a:91:
55:1a:51:81:30:f8:e1:61:e6:f3:5c:27:75:5a:9e:1a:17:3e:
e8:7a:d9:60:d9:9d:4d:e6:75:79:79:1b:7f:77:59:8d:ba:31:
93:83:3b:0b:0d:90:88:d6:ed:0f:d0:b7:6e:17:0e:ea:e0:0d:
30:92:63:f6:89:24:f5:9b:d7:85:a0:1f:ee:46:79:5b:eb:af:
7e:a2:2d:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:53:15 2025 by rpki-client