Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9b044dce-dc34-33b7-beaa-1f08a8e9834a.roa
File: 9b044dce-dc34-33b7-beaa-1f08a8e9834a.roa (raw, json)
Hash identifier: iQ9OUTEcdRRE8bOnzEml/m8Al46dwF84BDFO66C0+EM=
Subject key identifier: E8:A8:34:6E:F7:19:39:29:D6:55:BB:A1:70:CE:53:FC:35:DA:40:C6
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584825332EEBC8A6DE0039E9EF80
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9b044dce-dc34-33b7-beaa-1f08a8e9834a.roa
Signing time: Mon 09 Dec 2024 03:54:55 +0000
ROA not before: Mon 09 Dec 2024 03:54:55 +0000
ROA not after: Sun 09 Mar 2025 03:54:55 +0000
asID: 13335
IP address blocks: 2606:4700:4409::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:25:33:2e:eb:c8:a6:de:00:39:e9:ef:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 9 03:54:55 2024 GMT
Not After : Mar 9 03:54:55 2025 GMT
Subject: CN=56843d0d-7c38-4e61-a93e-46fe85f0179e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:1d:db:bd:8c:91:e2:c4:c5:2e:fe:c5:46:7c:
2c:89:d7:9b:d6:87:f0:9f:aa:89:22:17:de:c4:bd:
ad:bf:43:6c:62:ab:31:d8:ef:01:c4:1e:6f:b2:a8:
77:12:94:a9:92:cb:d8:73:f3:fe:eb:99:5d:94:0c:
c3:00:52:04:b9:b2:ac:90:2e:f4:00:00:49:56:07:
45:8c:f8:ab:5c:a1:5b:6d:8c:bf:24:c1:73:83:d1:
22:a9:b0:fa:87:ec:e5:ac:64:25:7c:7e:d0:9d:46:
c9:c5:05:3f:bb:36:02:34:ba:b9:f2:f1:11:58:ee:
69:81:64:c0:34:58:b1:3c:99:bc:90:a0:80:70:bf:
c3:e8:b8:11:c9:26:eb:1d:d7:e3:53:10:02:b3:54:
0d:ae:b3:b7:e5:10:c9:2a:a4:26:76:ef:74:e6:01:
ef:ad:73:b8:90:b4:aa:a3:26:31:ae:e1:c6:dc:56:
c4:15:3c:1b:61:fd:e6:ed:87:1d:8f:de:59:a7:d7:
ee:80:ce:8d:23:1b:7c:05:3a:11:0d:da:25:e2:1e:
77:34:98:d0:e4:4b:06:73:7b:1f:fe:b8:61:e9:82:
28:b9:8a:20:93:9a:f1:11:bc:34:ff:fa:31:a8:c9:
c3:2f:b8:8d:1a:e0:7c:e5:73:ff:1d:90:ea:c7:33:
6f:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:A8:34:6E:F7:19:39:29:D6:55:BB:A1:70:CE:53:FC:35:DA:40:C6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9b044dce-dc34-33b7-beaa-1f08a8e9834a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv6:
2606:4700:4409::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7b:22:b1:c6:71:55:65:7e:8e:cf:46:d5:31:b6:13:2f:90:71:
4d:f4:25:c1:16:39:85:1e:a4:e8:8f:38:e5:f4:a0:5a:59:48:
3d:f5:83:c1:1c:0e:a0:25:86:4c:55:15:32:5a:56:1a:d5:25:
a3:5a:8d:d6:7c:ac:8b:08:eb:1c:60:31:6e:e0:2c:53:48:f9:
82:4e:4e:60:0d:c1:0c:a4:03:30:09:e9:94:7f:ad:b7:fc:d2:
44:25:54:e0:0b:67:f7:57:f5:56:be:60:cf:04:72:24:20:a0:
90:af:78:dd:ea:f7:9e:0e:97:4a:b2:7b:b0:4b:ee:1c:6c:40:
ca:3d:73:da:3a:79:ad:ed:93:48:4a:17:35:3e:5a:54:12:75:
5f:df:db:57:27:fb:6e:f4:9c:67:08:1a:ec:92:83:a3:4f:8c:
15:1b:63:0d:03:fd:59:54:fa:6b:af:03:b6:a0:ab:0f:0b:59:
02:58:e2:16:28:84:b2:0a:0b:2a:54:d0:a2:cf:c1:3c:53:20:
a4:85:1f:7e:75:8b:e2:cd:f3:12:3d:a6:7a:43:8f:95:bb:fd:
ef:cf:e5:27:bf:79:02:da:4e:32:3c:21:e6:3c:4a:c9:b6:58:
f5:b7:46:5f:26:88:53:f4:64:3e:05:6d:e8:66:08:65:69:7a:
60:4b:00:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 16:18:36 2025 by rpki-client