Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1e9b1a66-091d-3f53-887d-2b09200ef885.roa
File: 1e9b1a66-091d-3f53-887d-2b09200ef885.roa (raw, json)
Hash identifier: HnM9Gy3REw2YetrsRtpV/xOxS0owT2Dl3RHiFp0EVrs=
Subject key identifier: 18:0E:3C:CC:F3:2C:AF:FD:0E:4E:F8:2C:93:22:CA:6D:10:64:A8:8C
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285847F1550DF0B18FDCC7257C5B00
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1e9b1a66-091d-3f53-887d-2b09200ef885.roa
Signing time: Wed 20 Nov 2024 14:00:52 +0000
ROA not before: Wed 20 Nov 2024 14:00:52 +0000
ROA not after: Tue 18 Feb 2025 14:00:52 +0000
asID: 7029
IP address blocks: 2604:cb00:1c::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:f1:55:0d:f0:b1:8f:dc:c7:25:7c:5b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Nov 20 14:00:52 2024 GMT
Not After : Feb 18 14:00:52 2025 GMT
Subject: CN=6e4359ac-d005-4c26-9d33-af65da0dc990
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:92:d2:61:d1:19:4f:6d:97:c5:1e:a7:91:45:
4f:67:ef:98:a4:bb:74:4a:34:20:62:7f:2f:8f:4e:
6a:70:fc:37:1b:10:35:bc:ec:99:d9:07:44:bd:5c:
78:86:88:f6:cd:22:9f:35:3d:10:e0:28:bf:cc:af:
2b:59:66:6c:2d:4e:11:46:eb:30:6e:2b:93:53:f6:
38:38:67:34:e4:11:9d:cf:dc:22:fc:84:1b:38:46:
44:62:ab:4c:3a:9f:4c:53:c8:d0:14:29:1f:d4:43:
56:a6:2d:d3:91:13:14:76:36:39:6c:d1:a8:11:b3:
51:64:61:d8:0a:d8:f5:2e:ca:e6:36:a4:80:8d:aa:
cc:42:6f:c5:a9:06:51:de:27:7e:f6:f3:e1:1a:9b:
46:99:50:ca:a5:60:8e:ba:48:ec:03:0a:ea:a7:ad:
17:16:28:cd:68:79:45:4e:70:f2:35:dc:24:dd:24:
2d:a5:a9:cb:5a:f2:85:26:ca:b0:d8:41:15:c4:8e:
21:a8:3e:39:87:be:0d:81:42:a4:76:b4:1a:29:44:
3b:61:1e:af:04:61:51:16:d0:50:97:0b:85:2c:1f:
08:70:65:44:e1:2b:7c:b9:be:ae:d2:b6:55:00:4f:
8b:a0:16:10:c3:fc:87:4e:5a:51:f9:14:ae:d1:1c:
14:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:0E:3C:CC:F3:2C:AF:FD:0E:4E:F8:2C:93:22:CA:6D:10:64:A8:8C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1e9b1a66-091d-3f53-887d-2b09200ef885.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:cb00:1c::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8d:e5:43:0d:f9:a4:68:87:13:2c:21:c0:74:60:1b:46:fe:ff:
24:45:f2:41:2b:b1:af:b9:db:c4:ea:d0:4f:f4:73:69:7e:e4:
8c:77:b0:ac:6e:a7:55:63:8f:56:8d:c2:80:86:f4:65:31:9e:
36:d5:bf:02:c2:af:cd:f6:02:9e:03:29:ae:80:20:52:ee:39:
93:f4:0f:75:87:aa:73:75:dc:6c:fd:4e:e6:4d:de:8e:b0:60:
96:f3:b1:c3:58:45:17:f9:88:06:c4:79:1b:8d:78:2c:4a:5d:
b0:c1:a2:bc:ff:3d:7c:98:fd:21:8d:a1:b4:68:3d:4d:f3:42:
fb:a6:d7:af:a8:e2:22:58:61:89:50:f9:76:58:ff:24:e7:0a:
67:d2:11:43:9e:12:75:08:12:7c:41:43:c1:48:46:e5:4c:7a:
14:7f:00:a3:a1:c1:0f:60:f5:36:2a:6d:61:e6:5e:17:2e:9c:
9d:87:41:f3:60:1e:79:b3:54:5e:f9:3a:90:9a:48:5e:1f:9a:
8c:a6:74:4e:0c:d6:b4:d5:27:04:5c:f3:59:73:1e:e2:3d:92:
10:c4:80:d5:18:13:6f:e7:d9:bf:64:59:55:a1:19:0b:85:ac:
2d:4a:21:f1:27:b5:35:73:b9:7b:f9:cc:3e:f7:b0:44:b6:d5:
22:fe:04:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 09:49:14 2025 by rpki-client