Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b44b2b8f-1d34-3a71-a304-97aea63ea638.roa
File: b44b2b8f-1d34-3a71-a304-97aea63ea638.roa (raw, json)
Hash identifier: iccXkYv5cCSd5AmmxPPEktC/N2+zQkCjjMiMSHPeGmE=
Subject key identifier: 36:14:CA:20:F5:3E:94:37:D0:07:96:85:4A:22:90:21:A6:26:FA:CE
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584838918DE6F71DED91940D70C0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b44b2b8f-1d34-3a71-a304-97aea63ea638.roa
Signing time: Mon 16 Dec 2024 02:25:26 +0000
ROA not before: Mon 16 Dec 2024 02:25:26 +0000
ROA not after: Sun 16 Mar 2025 01:25:26 +0000
asID: 13335
IP address blocks: 2606:4700:311d::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:38:91:8d:e6:f7:1d:ed:91:94:0d:70:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 16 02:25:26 2024 GMT
Not After : Mar 16 01:25:26 2025 GMT
Subject: CN=81025b92-043c-4932-8aec-6c23e70263a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:ab:71:6c:b8:bd:90:0a:6a:04:e5:ca:7c:6e:
05:78:dd:b6:e8:66:53:f1:13:9f:a9:37:6f:e3:e2:
6a:c0:9d:85:23:c5:7a:f0:35:25:39:5d:5a:6a:bb:
23:b3:66:fb:19:20:d2:be:fd:bd:d9:a6:da:5b:c2:
f3:10:d7:81:f2:3e:81:46:51:76:ad:e6:2b:b9:4c:
88:bd:ed:24:d6:f1:d8:2f:5d:31:1e:45:dd:b9:c1:
73:2b:b4:1f:6b:f6:72:be:4a:c5:d0:49:42:f8:40:
cc:ed:5c:6c:87:c1:ae:c8:37:51:76:30:eb:54:90:
22:ba:a3:20:10:46:3b:88:26:3a:6f:c7:0a:7f:f6:
37:02:95:f2:a3:5e:31:75:32:f8:57:ab:f3:ff:c5:
a6:cb:e7:30:2d:e5:b6:4e:dd:ba:29:ee:ff:42:b2:
c1:7e:29:3b:e1:eb:df:28:04:00:c2:81:6b:1a:d8:
17:d3:7a:50:2e:66:83:52:48:53:c3:0b:70:05:30:
3e:df:a4:47:dd:84:2c:1a:c3:be:e7:a5:1d:a1:d8:
b8:44:c0:34:4c:ca:32:97:f3:a1:db:b3:85:2e:ac:
35:c4:04:e8:93:18:11:77:5d:93:c0:f3:6f:12:22:
e4:68:37:60:15:fe:1a:5d:53:19:09:e4:3a:77:6c:
f3:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:14:CA:20:F5:3E:94:37:D0:07:96:85:4A:22:90:21:A6:26:FA:CE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b44b2b8f-1d34-3a71-a304-97aea63ea638.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv6:
2606:4700:311d::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
22:e8:3b:52:45:a6:a1:36:0f:2d:68:6a:0b:63:fd:ad:0d:88:
74:85:ae:da:e1:e0:35:d3:d7:82:7e:4c:b9:a5:1f:91:78:04:
f4:4b:5c:13:3d:fd:be:66:05:f6:ca:b4:33:97:de:63:a5:e1:
7d:ca:5d:f4:f6:b9:b5:e6:9e:4e:d2:60:5c:c0:61:34:d3:db:
d8:5b:40:db:a7:f5:66:80:6b:f8:6c:20:ab:bd:3c:c5:f8:94:
54:e3:48:38:74:8a:1e:05:af:60:72:85:ea:b6:c4:11:a1:82:
a0:83:0b:86:13:02:d5:a3:d9:57:76:9d:7e:f3:bd:9a:b6:a8:
9c:b8:e3:d2:34:bb:89:e6:94:6c:44:cf:0b:1c:6d:a6:f7:41:
c7:0d:65:b6:32:fa:55:81:08:c5:93:6e:82:7d:73:21:dc:49:
bd:18:21:a8:78:59:91:8a:3f:a3:8e:a3:52:a1:58:96:e3:a0:
3c:f4:b2:57:26:86:3d:87:34:92:ba:ef:f6:81:32:67:a9:ff:
e6:3d:04:6a:bf:d7:1d:25:e4:1a:4d:67:75:1d:12:dd:7c:f9:
8f:6c:d1:61:0e:ad:fe:f4:bc:ac:29:c7:1f:91:40:af:3a:20:
5b:c3:da:3d:80:85:ce:37:a6:70:e2:49:a8:a8:6c:6a:04:e3:
43:14:d5:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:55:13 2025 by rpki-client