Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1ab83235-de48-3b4c-86e4-b9ebe0d3c9cf.roa
File: 1ab83235-de48-3b4c-86e4-b9ebe0d3c9cf.roa (raw, json)
Hash identifier: E4P4QU7MEI2PZ0vfrM15S1cUgF+d8y6SrflXY5xsuCw=
Subject key identifier: 60:71:08:FC:12:34:CD:EA:75:68:03:FB:68:74:EC:2F:B1:1C:A3:12
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285847F15510DBBAD0196F44A29E00
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1ab83235-de48-3b4c-86e4-b9ebe0d3c9cf.roa
Signing time: Wed 20 Nov 2024 14:00:52 +0000
ROA not before: Wed 20 Nov 2024 14:00:52 +0000
ROA not after: Tue 18 Feb 2025 14:00:52 +0000
asID: 7029
IP address blocks: 2604:cb00:4000::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:f1:55:10:db:ba:d0:19:6f:44:a2:9e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Nov 20 14:00:52 2024 GMT
Not After : Feb 18 14:00:52 2025 GMT
Subject: CN=66a524ca-acbf-40d0-b824-92086a3baa92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:2e:65:26:bb:aa:40:13:1b:87:58:be:d1:41:
3c:32:26:de:09:92:39:33:e7:47:45:64:6d:00:c0:
7e:35:17:ab:d7:27:5a:3c:9b:d6:7c:cd:24:71:f1:
67:6e:b3:e7:a3:62:92:3b:14:39:c1:94:7e:de:30:
60:38:e7:8a:ea:21:93:19:a1:3b:7d:f8:16:66:07:
0c:6b:be:4b:1e:0d:fb:5d:e6:02:37:a0:f5:4d:33:
36:d0:47:d6:07:9b:1b:9e:68:b4:17:1f:3d:eb:bf:
25:a7:3c:6b:62:e3:48:15:04:23:6c:89:9c:89:72:
e4:7d:7f:de:d3:a8:b7:5f:1d:b6:5b:44:33:62:28:
76:35:19:4c:4f:8f:4c:6a:a1:f6:dc:6f:52:86:fe:
40:c3:c4:58:d6:5c:51:68:98:e0:f9:04:21:09:9f:
70:c0:71:66:e2:fa:e9:00:a1:ef:c3:80:f6:ae:f0:
8c:20:f8:22:6c:36:8e:02:82:88:6b:a0:4a:0e:63:
9c:ae:c5:13:fc:11:37:fd:42:6d:75:c5:e4:74:df:
ff:1a:68:8a:4f:f1:c6:63:03:3a:66:e8:0c:58:25:
74:d2:5d:7c:c2:ff:3d:6d:9a:8a:a2:d9:a6:08:10:
26:50:81:6c:fe:d4:11:4b:0d:96:33:d3:8c:80:a5:
ff:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:71:08:FC:12:34:CD:EA:75:68:03:FB:68:74:EC:2F:B1:1C:A3:12
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1ab83235-de48-3b4c-86e4-b9ebe0d3c9cf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:cb00:4000::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1f:37:cc:7d:8e:a5:da:64:52:f1:ff:16:45:e9:28:e7:0b:12:
89:61:40:23:ab:c0:f5:56:17:60:a2:a6:df:51:c6:e2:d8:79:
16:88:4f:a7:45:24:20:02:7d:e4:b6:db:d6:8e:86:c3:0b:16:
0f:3d:06:d3:6c:f8:d6:ca:1d:9b:c8:85:ce:b1:b9:f9:1c:7c:
3b:a9:e9:c2:9e:8c:5b:5b:5d:99:62:42:4a:8f:d1:0e:6a:70:
f3:9b:ea:93:92:5d:79:22:48:f4:07:25:ff:c6:77:28:a7:c8:
7c:0c:81:99:63:4d:bf:b1:20:78:2a:b6:9e:d4:8d:cb:27:20:
bc:58:63:35:79:67:a0:29:34:03:23:a8:3c:35:e7:5b:0f:5d:
d1:bc:fd:ad:54:ed:c9:91:72:fb:a0:94:2e:47:92:d6:12:f8:
ab:a3:25:d9:96:b3:a6:2e:86:1b:00:13:c7:ae:04:ca:3e:e7:
7e:47:dc:9f:d4:2d:5f:0a:90:54:0f:14:51:1f:ee:ee:8a:a8:
92:ab:dd:a8:83:c6:25:1d:66:49:5b:e8:a0:1a:6a:2f:53:1b:
ab:58:f6:03:28:e7:54:8f:d8:f6:e3:7b:c2:f5:0f:1f:91:f5:
f3:73:49:69:8f:3c:45:45:1e:fa:a0:5f:56:b3:df:5b:07:3d:
4b:fa:db:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:21:49 2025 by rpki-client