Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/219bc4aa-8142-3f5e-a469-4a615b68d218.roa
File: 219bc4aa-8142-3f5e-a469-4a615b68d218.roa (raw, json)
Hash identifier: QD2t0N8mF+1J7Kru68eom+nbw/B7Xn3CYcrU60fx+gg=
Subject key identifier: 43:1F:ED:B6:2B:51:20:9C:AB:6F:55:76:C9:F2:EC:FF:8F:FD:BA:97
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285847F1551050666DB555C9153580
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/219bc4aa-8142-3f5e-a469-4a615b68d218.roa
Signing time: Wed 20 Nov 2024 14:00:52 +0000
ROA not before: Wed 20 Nov 2024 14:00:52 +0000
ROA not after: Tue 18 Feb 2025 14:00:52 +0000
asID: 7029
IP address blocks: 2604:cb00:2300::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:f1:55:10:50:66:6d:b5:55:c9:15:35:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Nov 20 14:00:52 2024 GMT
Not After : Feb 18 14:00:52 2025 GMT
Subject: CN=fd3eed4c-b058-4411-8807-82b621ffd18a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:ca:4a:e8:f0:04:46:56:75:fc:5e:0f:30:1b:
12:e1:e1:1d:fd:ee:21:8d:80:86:c3:a1:70:aa:11:
5c:67:90:c5:69:12:89:84:8c:09:63:9d:5b:2a:b0:
ac:89:ed:6a:be:6e:07:a4:2a:92:45:45:41:8a:04:
06:67:2a:24:83:af:02:9a:a9:81:39:ad:7d:81:47:
52:73:81:a8:3a:ba:06:93:d0:ad:76:6f:d6:28:b7:
d5:69:2e:33:54:ee:3b:70:64:a3:80:b5:92:77:75:
23:4f:95:d0:48:a0:89:35:d1:05:e1:bb:b9:f1:ee:
59:1f:62:63:0e:47:2f:aa:9d:f2:ae:2f:f6:54:63:
54:5c:78:47:fd:42:23:95:fe:f7:91:60:95:cd:7f:
14:bc:16:2f:4f:d0:49:66:5f:50:28:2e:15:63:f1:
2e:38:4c:74:dc:16:9b:1a:c2:dd:26:a9:c9:80:ae:
ae:8c:08:ff:82:25:8a:86:ba:c0:cd:f3:39:b4:f9:
84:0e:db:ef:6d:63:7c:08:b3:e4:6b:d9:21:bd:b2:
a0:77:cf:19:b7:5c:01:5e:4f:79:f4:d5:f4:a8:bc:
14:f3:04:ea:ee:76:d8:5a:57:7d:9f:e5:31:21:4f:
b0:37:3b:25:75:9f:2d:dd:a0:ff:3e:56:b6:53:a3:
56:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:1F:ED:B6:2B:51:20:9C:AB:6F:55:76:C9:F2:EC:FF:8F:FD:BA:97
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/219bc4aa-8142-3f5e-a469-4a615b68d218.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:cb00:2300::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6a:11:d4:28:40:aa:3d:06:24:d5:3f:af:83:85:c4:44:c3:89:
28:43:9f:82:5e:dc:aa:e5:3e:ca:73:e5:e0:30:3d:fa:09:0a:
3c:e2:b5:60:e6:8c:f7:90:fd:3c:8e:75:8a:82:af:95:e3:b4:
ab:f1:13:f4:67:5d:82:27:7f:f2:8b:c1:5d:c8:75:67:bd:8d:
c9:b8:b6:11:2e:1b:b3:47:18:07:30:81:f9:12:8b:db:d6:d0:
6c:08:5e:7c:fa:f1:61:28:93:5a:1c:56:e1:41:19:eb:62:9c:
34:25:3f:a2:5c:cb:34:41:e9:af:57:42:ef:ba:5c:92:49:ed:
0c:5c:9a:ef:eb:a2:f0:b4:4b:0a:6d:36:c7:4d:ed:b8:08:b9:
88:dc:ed:66:6c:55:5d:ca:79:6d:1c:af:7c:de:60:d9:f6:5b:
4e:22:18:8d:4c:d5:bd:8d:ec:f6:92:e7:62:43:b6:7d:48:0b:
e6:2e:5f:a4:d8:c2:ba:dd:89:a4:23:6f:85:aa:a8:d8:eb:87:
26:8c:88:a8:fe:be:0e:9b:15:be:70:48:7f:42:2f:9f:f5:fd:
e2:59:df:62:65:91:ed:be:e2:b9:f8:a4:e1:9b:25:0a:81:b5:
a3:63:a0:0a:cb:c8:04:0a:fa:32:17:02:0c:da:35:05:c3:e4:
7e:29:e5:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 09:49:02 2025 by rpki-client