Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d4919c1e-24c8-430e-8811-91383c31b96a/8a0ce720-b8a5-3d5a-8ffe-340a813b05be.roa
File: 8a0ce720-b8a5-3d5a-8ffe-340a813b05be.roa (raw, json)
Hash identifier: EpYQnj3R0i8t+B8X6ZcHS2jP0xqluDwPkO+fCF0LSEw=
Subject key identifier: 37:23:FB:68:AA:A2:F0:8A:5B:0A:F2:79:B3:08:CE:80:15:2F:7F:BA
Certificate issuer: /CN=d4919c1e-24c8-430e-8811-91383c31b96a
Certificate serial: 010D0C9F4328584802150611FEE0981BAFBF23C0
Authority key identifier: DF:24:14:6D:BE:CF:7B:A7:A3:79:0C:17:46:95:44:80:14:78:29:3C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d4919c1e-24c8-430e-8811-91383c31b96a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d4919c1e-24c8-430e-8811-91383c31b96a/8a0ce720-b8a5-3d5a-8ffe-340a813b05be.roa
Signing time: Tue 26 Nov 2024 14:00:39 +0000
ROA not before: Tue 26 Nov 2024 14:00:39 +0000
ROA not after: Mon 24 Feb 2025 14:00:39 +0000
asID: 3856
IP address blocks: 2620:0:870::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:02:15:06:11:fe:e0:98:1b:af:bf:23:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4919c1e-24c8-430e-8811-91383c31b96a
Validity
Not Before: Nov 26 14:00:39 2024 GMT
Not After : Feb 24 14:00:39 2025 GMT
Subject: CN=268102fc-9c21-4c6e-998e-a190676bd9b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:a1:e9:20:78:57:ab:11:11:f9:42:b9:72:3a:
b0:f2:32:a5:6f:55:3c:92:be:8d:bd:74:af:ba:d8:
a4:f9:44:eb:43:ec:2e:ba:ed:fd:38:cb:05:58:e1:
db:5c:1c:46:28:35:5b:54:85:49:2d:b4:f3:04:ba:
e5:b8:c4:2d:a7:d4:fd:f0:03:36:a7:28:57:08:4d:
51:3b:4c:fe:3a:be:d7:95:5f:f0:5c:13:01:e3:ad:
6a:22:fb:8b:5e:6e:bb:5f:0b:ea:ec:d8:44:2f:ac:
59:d5:c6:52:13:10:61:df:66:1a:57:ec:14:0c:3c:
a1:db:a4:2d:76:92:0a:c7:1e:e7:31:88:ca:1e:0c:
bf:bd:91:87:ee:ff:f0:62:31:60:0c:85:7f:d1:75:
0f:60:bf:8b:73:e4:a0:eb:9c:c5:cc:a3:3b:c7:5c:
08:06:97:0b:ba:d6:ab:d0:30:2d:5c:aa:2e:6a:bf:
cf:1c:ad:65:c1:80:c8:d7:a5:50:1d:70:9e:8d:28:
01:17:4a:9f:94:59:96:db:e2:bf:6c:d7:ec:08:a1:
72:26:66:5d:20:d9:0f:d5:e2:f3:09:6f:50:24:0b:
06:15:66:f7:77:c9:38:0f:81:ea:2e:73:7f:9c:24:
5a:10:83:32:f9:32:0f:2e:65:4c:e3:10:a5:ed:d0:
90:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:23:FB:68:AA:A2:F0:8A:5B:0A:F2:79:B3:08:CE:80:15:2F:7F:BA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d4919c1e-24c8-430e-8811-91383c31b96a/8a0ce720-b8a5-3d5a-8ffe-340a813b05be.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d4919c1e-24c8-430e-8811-91383c31b96a/d4919c1e-24c8-430e-8811-91383c31b96a.crl
X509v3 Authority Key Identifier:
keyid:DF:24:14:6D:BE:CF:7B:A7:A3:79:0C:17:46:95:44:80:14:78:29:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d4919c1e-24c8-430e-8811-91383c31b96a.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:0:870::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bc:94:89:d6:be:7e:20:e2:5c:b0:d6:c5:f4:fb:af:d9:4b:27:
be:32:c0:73:f5:8f:30:e0:cb:f6:e4:a0:b1:76:3b:b7:c3:9d:
be:0c:e6:59:2d:aa:eb:3b:34:9f:37:82:d5:c0:92:f2:8d:49:
a7:00:c6:ca:fb:bf:d6:4c:b5:71:2a:96:e8:10:a2:da:28:04:
d4:9f:43:61:eb:eb:85:8c:8b:37:9e:d8:57:5b:7b:04:5c:5b:
bc:de:fc:cb:51:8b:5d:62:c9:db:09:42:63:57:d5:f4:32:2f:
22:a8:9a:1c:9b:2b:f9:bc:c0:42:42:a4:9d:13:08:1f:ce:8f:
19:f9:9e:a5:79:d6:69:89:af:0b:68:62:38:47:2b:a8:2a:6d:
88:d3:22:81:52:8f:30:12:35:4c:20:70:3d:3b:9f:8c:5b:dc:
cf:9b:c9:b0:6c:45:c3:f8:c8:7a:f0:94:02:23:15:2b:e3:7d:
ca:c7:d1:04:16:62:b7:fc:4d:47:0e:48:df:cf:99:32:ba:19:
bd:95:c2:96:79:af:44:e4:73:5f:eb:39:d1:75:a1:ac:9c:a8:
a2:25:b3:06:1b:7a:46:9e:c2:97:f4:97:0c:3d:bc:2b:83:dc:
68:05:d2:a2:b2:bc:d4:3d:94:2a:ce:bc:da:ce:b6:7a:72:fe:
de:1d:46:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:57:22 2025 by rpki-client