Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a0fadc8f-fa55-393a-914b-982efe2962e3.roa
File: a0fadc8f-fa55-393a-914b-982efe2962e3.roa (raw, json)
Hash identifier: J8xMFRWRocJt97iJnJeDxB6Dtozfsox2k004qQ+c0Z4=
Subject key identifier: 3A:87:B2:67:1B:18:8B:6F:65:80:33:81:5E:9F:14:B4:35:E4:82:9B
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F432858483890DEA5076DA9CC69657218
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a0fadc8f-fa55-393a-914b-982efe2962e3.roa
Signing time: Mon 16 Dec 2024 02:24:03 +0000
ROA not before: Mon 16 Dec 2024 02:24:03 +0000
ROA not after: Sun 16 Mar 2025 01:24:03 +0000
asID: 13335
IP address blocks: 2606:4700:3113::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:38:90:de:a5:07:6d:a9:cc:69:65:72:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 16 02:24:03 2024 GMT
Not After : Mar 16 01:24:03 2025 GMT
Subject: CN=2fca996f-9bb7-46bf-b162-6067acb482b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:6a:14:a1:a3:02:16:4f:a6:e8:1c:f1:7a:a2:
7c:9b:1b:05:ec:8d:e0:80:43:bf:bd:ed:88:24:20:
47:07:38:6f:ee:f6:c9:e5:97:e6:d2:35:59:14:22:
ae:f0:4f:3b:1a:ae:d7:05:27:6d:25:87:74:1e:f4:
e8:77:23:4e:8e:7c:7e:a1:9c:86:8b:46:3f:6b:6d:
b6:b8:a4:c4:5b:41:dd:89:82:3a:2a:56:65:2d:7c:
43:7d:88:97:e0:71:6c:af:43:bc:39:43:cc:d1:1f:
7b:98:da:67:cf:18:c2:34:61:54:cf:bc:e0:b4:59:
8c:2a:bd:51:a1:4b:e9:04:e1:60:5f:ca:31:79:17:
6a:72:27:1f:9e:9b:ad:9c:75:9d:1a:b8:32:a2:6d:
f5:a5:97:79:26:5d:00:7b:01:b5:7e:5d:39:31:ca:
70:3f:e5:44:1c:91:80:d0:23:08:2b:3b:c5:d0:00:
f8:41:c7:2c:80:83:42:10:6a:c0:41:f5:ef:79:21:
41:f2:be:4d:85:08:c3:3c:ad:43:a7:f6:25:6e:51:
c6:da:b0:89:76:aa:7b:16:4a:eb:4d:ca:96:93:c9:
c9:c5:79:33:be:b3:a1:65:02:8e:78:76:6d:0c:4d:
ba:81:e9:63:9f:79:81:62:c0:69:df:ba:1f:15:36:
3a:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:87:B2:67:1B:18:8B:6F:65:80:33:81:5E:9F:14:B4:35:E4:82:9B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a0fadc8f-fa55-393a-914b-982efe2962e3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv6:
2606:4700:3113::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9f:66:00:b7:e5:7d:d6:0c:60:8d:5a:7b:b6:14:e6:89:e2:94:
9f:93:99:07:47:79:5b:19:5b:83:f6:57:fc:df:46:da:fe:84:
12:18:66:af:06:4a:f9:48:36:8a:24:a4:bd:55:5d:73:96:43:
8d:6b:af:c6:6c:1d:4e:5c:c2:cd:57:98:f7:fa:99:30:59:fc:
cc:1e:f3:cc:51:eb:5b:75:8d:74:7f:f0:7b:40:00:86:28:e1:
57:69:3b:a2:22:70:9e:4b:fe:05:fb:be:1b:95:08:41:d8:e5:
18:f0:5b:61:80:68:22:96:9b:a9:17:e2:49:22:1d:35:25:56:
6c:44:6f:f1:13:9c:e2:cb:fa:56:08:0f:67:97:18:39:5d:49:
e0:b8:9a:b9:aa:57:1a:f2:65:09:bc:bf:ab:75:ba:31:36:ca:
9f:8b:b5:26:47:12:1f:4b:15:04:d1:b4:1f:0c:67:83:62:f2:
b4:a2:f5:9b:35:ba:45:6a:64:23:03:10:fb:c4:27:ea:2d:51:
32:4f:0a:23:fc:25:c3:06:09:44:d2:3d:f2:b1:cc:9e:d8:d9:
e3:a6:cf:65:51:85:c1:32:e1:d5:7c:00:64:35:cf:89:8f:f1:
6f:37:92:1b:fb:43:78:1d:5f:2c:6e:c8:be:55:c9:45:10:ee:
f5:8b:24:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:00:50 2025 by rpki-client