Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/f5e65c7c-0298-34e7-8190-79fa24c0e960.roa
File: f5e65c7c-0298-34e7-8190-79fa24c0e960.roa (raw, json)
Hash identifier: CHu/4mzqyS5eJMKYqdOinDMl7eLdiaU9fFBhDdZvuuU=
Subject key identifier: AB:DB:50:F9:82:00:CC:1A:CA:FD:FA:2B:BD:B3:33:14:10:B0:74:85
Certificate issuer: /CN=458edb4b-8474-44dc-8841-30a6c66f33d7
Certificate serial: 010D0C9F4328584855D5995CC3E3743C0751AC00
Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/f5e65c7c-0298-34e7-8190-79fa24c0e960.roa
Signing time: Thu 26 Dec 2024 14:00:52 +0000
ROA not before: Thu 26 Dec 2024 14:00:52 +0000
ROA not after: Wed 26 Mar 2025 13:00:52 +0000
asID: 395831
IP address blocks: 2606:7bc0:1060::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:55:d5:99:5c:c3:e3:74:3c:07:51:ac:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7
Validity
Not Before: Dec 26 14:00:52 2024 GMT
Not After : Mar 26 13:00:52 2025 GMT
Subject: CN=5d56d8e7-62bb-4d87-990a-f4ca4ec9d957
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:6d:58:66:69:22:d4:eb:63:fc:19:73:bc:2b:
48:70:81:9c:bd:23:c2:5c:2b:cd:81:dd:50:99:b4:
76:7b:d4:79:95:d9:37:db:c5:29:2f:cd:dd:1f:a1:
18:b4:11:f2:1c:04:04:ed:bf:26:83:11:c2:5b:3b:
41:83:57:24:2c:d1:be:9d:31:03:40:d4:44:a6:9d:
9f:04:15:ed:62:f2:29:24:e4:ae:0c:2d:6e:2f:83:
82:69:93:f6:3a:04:07:e8:06:92:99:cd:54:42:31:
25:87:2c:ac:01:98:01:00:c0:9b:77:13:ce:04:11:
3a:14:32:c9:06:3c:d6:ab:34:e5:79:19:1f:4f:28:
15:32:e9:c0:e2:b5:10:f6:b3:61:bb:e1:ef:72:65:
a4:2c:fc:84:22:96:3c:a7:e2:81:26:4e:33:9c:39:
62:87:50:0b:8a:ca:dc:25:25:eb:65:90:94:bd:34:
0f:b8:a0:39:21:fa:0c:27:99:96:81:02:c7:fc:93:
e8:32:71:b3:cc:7a:41:66:dd:71:18:40:38:31:ed:
cf:e6:6d:93:4e:d4:46:66:9d:02:a5:93:92:4f:1c:
c8:56:37:40:4a:fa:bf:11:07:55:ac:c9:bf:74:ca:
fb:65:7f:ad:f9:45:28:37:68:11:02:17:53:4d:42:
8c:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:DB:50:F9:82:00:CC:1A:CA:FD:FA:2B:BD:B3:33:14:10:B0:74:85
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/f5e65c7c-0298-34e7-8190-79fa24c0e960.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl
X509v3 Authority Key Identifier:
keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
sbgp-ipAddrBlock: critical
IPv6:
2606:7bc0:1060::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1f:36:41:b6:c7:c7:78:9d:62:57:62:81:5d:a1:e5:18:65:e6:
42:d2:2b:ef:ce:f2:77:df:90:1a:b9:88:07:7c:f0:0c:5d:80:
05:e9:aa:2e:5b:75:e5:c2:a4:14:f7:be:27:b5:d7:94:40:00:
3e:5f:53:f4:b0:29:dc:11:2a:d6:63:61:f4:8d:2f:e9:5e:e9:
6b:f6:de:9b:d5:b5:68:f5:01:fa:91:ea:ef:f6:a9:8b:6b:7a:
9a:2b:ce:07:16:d6:1b:f4:d5:97:8b:ad:6b:57:39:f4:99:dc:
7a:89:e4:eb:78:73:08:d4:58:85:33:84:f0:9a:b4:62:84:24:
3f:e2:9c:43:d3:02:97:d2:ba:7a:b2:1f:0b:0b:11:46:79:0f:
84:aa:bc:c6:6b:8a:ed:2d:53:57:65:82:95:4e:af:aa:e6:85:
77:08:31:3c:f1:02:22:b6:69:af:8b:d9:ea:66:fa:fa:ce:43:
e6:1e:76:f2:34:b3:29:89:be:9c:37:e2:d7:f3:5d:7f:82:1e:
f1:cb:4f:5c:74:3b:22:1b:0b:df:b2:0c:df:de:d3:d8:67:94:
e6:fe:93:12:ce:5e:95:7a:bd:a4:f3:5d:f3:08:fc:d6:8b:10:
cc:15:bf:3c:51:d8:0f:99:ff:80:bb:c1:d2:0a:6c:42:4a:8d:
bd:ec:87:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 07:14:39 2025 by rpki-client