Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/92947f5b-ca21-31da-9737-f97946d49c34.roa
File: 92947f5b-ca21-31da-9737-f97946d49c34.roa (raw, json)
Hash identifier: d/br7hMX7pGyA6w7frVln94T8KXMzxzGkGl+oUYtuGU=
Subject key identifier: 42:78:41:B8:DF:01:54:83:A3:F8:5C:EF:BB:6E:69:79:F2:40:3A:01
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F43285848305E1C458BDA737E4AF13760
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/92947f5b-ca21-31da-9737-f97946d49c34.roa
Signing time: Fri 13 Dec 2024 03:55:19 +0000
ROA not before: Fri 13 Dec 2024 03:55:19 +0000
ROA not after: Thu 13 Mar 2025 02:55:19 +0000
asID: 13335
IP address blocks: 2606:4700:43::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:30:5e:1c:45:8b:da:73:7e:4a:f1:37:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 13 03:55:19 2024 GMT
Not After : Mar 13 02:55:19 2025 GMT
Subject: CN=f9e16de3-fa50-4617-85fc-623606fbd169
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:f3:70:c4:c2:33:81:cc:56:80:75:8e:65:30:
68:8b:d9:8e:5e:9c:af:2e:ff:f4:4c:6a:31:16:25:
f9:07:b8:34:7a:2e:39:5b:dc:9f:27:a8:5b:7b:6e:
58:ad:f1:41:cd:f8:7d:59:fa:f8:c2:6f:73:da:2f:
f9:ae:b1:92:e5:c6:b5:65:f9:b2:ff:c5:fc:9b:9a:
65:90:c8:d4:c4:80:3b:69:6f:da:5e:c4:29:06:a5:
74:3e:77:82:0a:72:1f:45:eb:21:3a:f8:44:5f:14:
72:7d:34:80:0b:3b:1f:f9:a6:50:b6:ff:ec:8f:4e:
b1:d4:d2:69:3b:cc:01:bc:12:e8:36:5d:4b:ef:88:
f4:3b:66:4d:07:66:d4:c1:fc:d7:92:67:02:0a:b1:
61:68:03:e7:42:a2:58:94:9e:be:68:fd:8d:97:89:
28:c2:d7:19:f7:5e:b6:c4:dc:32:74:d0:88:b0:10:
10:40:87:ac:77:a1:5d:07:c0:3b:75:b6:ae:db:2a:
b6:0e:5c:4f:63:bb:c7:fe:2e:ab:33:54:03:43:69:
2c:2e:46:bd:60:52:d7:6c:5d:b1:11:d4:7a:79:ae:
12:67:1b:c4:06:67:3f:f1:ce:08:21:71:de:9a:16:
2c:c2:8a:d2:fc:ca:67:7e:95:5a:a8:3a:b3:f5:71:
af:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:78:41:B8:DF:01:54:83:A3:F8:5C:EF:BB:6E:69:79:F2:40:3A:01
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/92947f5b-ca21-31da-9737-f97946d49c34.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv6:
2606:4700:43::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
69:93:ff:3e:5c:2c:81:4b:d5:a3:99:f3:8b:fd:4e:64:94:d0:
80:69:f7:a2:34:eb:43:a6:ea:ab:5d:d7:3b:71:a2:eb:b3:9e:
c2:77:4b:7c:01:ca:15:e0:87:f5:0e:3f:e9:db:ca:5f:03:25:
5d:af:93:47:d7:11:06:37:02:ee:8c:21:7b:ca:a8:ad:62:86:
3b:70:7f:1f:a2:5e:12:51:32:72:d3:ba:55:b7:40:36:f6:65:
65:ad:e2:8e:c4:9f:60:2c:9d:0d:ae:d6:e8:59:64:67:25:71:
26:b0:51:9a:1d:80:c3:3f:33:ea:ed:d7:e9:3c:d7:eb:e9:f2:
7a:03:1c:d7:be:4f:10:0e:9a:17:0d:3a:68:ba:bf:46:c6:95:
fb:73:c7:e7:4a:27:94:f4:24:6b:ca:43:e5:bf:08:92:f6:ab:
ea:e1:2c:46:18:9b:6f:82:e0:c7:25:94:c9:03:9d:db:3f:d3:
ee:bf:9e:6b:a4:1b:ab:f1:9a:7e:96:b7:f2:72:d3:05:03:9a:
8e:ce:cf:41:9f:60:71:df:42:af:ae:58:72:a2:8d:a0:68:99:
9e:9b:eb:30:10:84:f1:40:9e:9e:ff:ef:7a:17:8c:0b:24:38:
11:a2:34:8f:f6:f0:67:b8:3a:db:ab:36:2e:bd:2d:fa:b7:2e:
fc:d0:38:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 16:33:41 2025 by rpki-client