Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d28ae3a1-b2e8-38ce-9a01-d2fb0de3ef95.roa
File: d28ae3a1-b2e8-38ce-9a01-d2fb0de3ef95.roa (raw, json)
Hash identifier: HYZcoIycTiUNCV78Mf6KCzeIsMnabxzzPevBtu4R1LQ=
Subject key identifier: CF:D6:ED:A3:47:36:E7:E0:39:D3:94:6B:1C:18:89:35:51:67:12:30
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F432858483860E1E5AE5D2A1A317EAA80
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d28ae3a1-b2e8-38ce-9a01-d2fb0de3ef95.roa
Signing time: Mon 16 Dec 2024 00:47:22 +0000
ROA not before: Mon 16 Dec 2024 00:47:22 +0000
ROA not after: Sat 15 Mar 2025 23:47:22 +0000
asID: 13335
IP address blocks: 2606:4700:3017::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:38:60:e1:e5:ae:5d:2a:1a:31:7e:aa:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 16 00:47:22 2024 GMT
Not After : Mar 15 23:47:22 2025 GMT
Subject: CN=a4282721-ec1d-4ef4-b16b-37f465a43258
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:4f:55:6f:e8:7b:a4:2a:2a:c7:91:58:af:58:
c9:58:54:c7:8f:52:d3:0d:8a:35:23:d2:15:f3:0a:
e3:ab:28:f7:50:84:d9:93:95:9b:4c:cf:8b:81:2d:
9a:b8:53:b0:d4:81:1e:5e:28:8b:a3:45:99:72:2d:
84:c4:13:26:af:4e:15:39:24:16:63:dc:ed:ea:cd:
2f:e6:5b:bd:ff:c4:73:13:36:c4:02:4c:5e:65:a8:
8a:eb:9f:7a:db:7b:ad:cf:82:45:f6:5f:76:4e:6c:
db:d4:06:f8:f1:42:94:0d:85:e1:02:94:9c:84:04:
13:83:d8:ce:55:97:78:51:35:c5:41:be:14:59:c6:
20:37:2b:46:c0:93:3b:7f:88:df:41:ee:8e:7d:f8:
9b:d1:fa:f7:6b:de:bd:be:2c:cf:5b:56:8f:99:47:
c3:0b:cd:f2:32:0b:03:b3:2b:94:30:f9:97:45:84:
a9:41:22:72:7f:11:f0:8c:8f:3c:ca:cb:92:4a:7a:
76:f0:ff:d8:7b:d7:5d:e3:9e:fb:d3:6f:9c:ed:ea:
9a:86:f0:95:ff:11:14:48:e3:f8:f0:b0:38:ce:67:
22:e0:fd:1a:c5:c8:be:12:39:49:b0:e7:e3:73:4d:
6d:95:db:16:91:d7:d9:6e:06:d8:ec:33:88:9c:69:
f5:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:D6:ED:A3:47:36:E7:E0:39:D3:94:6B:1C:18:89:35:51:67:12:30
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d28ae3a1-b2e8-38ce-9a01-d2fb0de3ef95.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv6:
2606:4700:3017::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a1:54:44:76:b9:68:64:3a:d6:25:46:84:11:7e:dd:1e:34:a0:
f3:b0:4c:b3:8e:bd:3e:54:2f:c1:e0:d8:3b:fd:43:05:50:3f:
6c:6a:20:ae:10:08:fd:ab:c5:25:29:7b:81:c5:dc:f6:7a:1e:
54:20:22:d8:f7:15:7e:49:82:01:e6:97:56:83:82:ca:f7:8a:
13:0c:f7:df:84:90:46:5b:a6:e1:37:f9:cc:15:0b:5f:64:33:
57:40:f0:dd:b7:a6:1c:d2:0f:2a:41:2d:cc:77:48:5a:7f:38:
9f:d5:19:24:87:ff:bd:f7:74:f3:73:dd:f9:03:dc:9a:78:06:
70:7a:f7:11:49:00:fa:f6:3a:3e:ee:3d:6b:5d:2d:b6:04:94:
c4:56:b5:87:10:a0:53:27:cc:f2:11:2d:b7:64:ad:c4:05:9c:
4c:d2:0c:f3:85:ac:41:b0:d1:f3:18:d8:d1:bc:6f:f7:43:02:
c1:27:a3:06:d4:ca:03:ee:c1:9f:cc:ea:cc:5d:51:56:a1:f1:
ac:b5:01:09:c2:55:f1:9f:b0:fd:f6:64:1b:90:a7:fe:1d:f3:
ef:e3:1d:7a:c7:53:d0:b6:bc:f8:55:ac:bd:bc:f6:74:50:1f:
f6:b3:fd:a4:58:51:37:ac:8f:fd:2a:71:44:a6:66:ad:bf:a6:
54:df:d7:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 21:54:11 2025 by rpki-client