Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a3c79f28-fa8a-3267-a6f0-d1099d604c6a.roa
File: a3c79f28-fa8a-3267-a6f0-d1099d604c6a.roa (raw, json)
Hash identifier: POHyEpi00L/aF4EbwTclTh4SNypOkajeoTxS9W+sV4U=
Subject key identifier: 86:EF:9D:AE:FB:44:11:6F:36:E9:C8:F1:7E:3E:C5:DE:64:C3:0C:39
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285847F1553DECACD1AC9528D9F44C
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a3c79f28-fa8a-3267-a6f0-d1099d604c6a.roa
Signing time: Wed 20 Nov 2024 14:00:52 +0000
ROA not before: Wed 20 Nov 2024 14:00:52 +0000
ROA not after: Tue 18 Feb 2025 14:00:52 +0000
asID: 7029
IP address blocks: 2604:cb00:23::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:f1:55:3d:ec:ac:d1:ac:95:28:d9:f4:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Nov 20 14:00:52 2024 GMT
Not After : Feb 18 14:00:52 2025 GMT
Subject: CN=912538c7-370f-4475-a0ae-13ce44c8acf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:df:6e:e8:03:10:e3:f3:7c:c4:d4:3f:7c:37:
bd:10:b0:8e:02:f2:23:c3:4e:44:8d:a0:2e:21:ba:
bf:fc:0d:ae:f0:79:c0:ef:ff:41:61:40:5d:e0:1e:
69:af:02:5a:cc:2b:29:eb:97:1f:24:e8:57:5c:e2:
6f:0a:da:3e:0f:0a:43:08:40:bd:67:f1:a3:bb:5f:
05:3e:35:2b:e3:a0:01:35:cc:40:b7:b3:cc:b4:d4:
0d:80:a8:1d:97:dd:2b:09:1d:f3:52:ea:3c:87:60:
b3:98:03:c4:5b:df:31:e8:72:5d:2b:92:02:91:41:
70:50:92:5a:8f:3c:41:71:11:f3:08:c1:cd:f5:b6:
6a:69:13:1d:bc:c4:4b:23:50:5d:43:d3:1b:7c:e5:
2a:9b:56:4e:2f:53:5d:7c:1d:4f:83:6f:53:8f:0e:
34:70:62:4a:60:aa:aa:22:d5:49:d4:18:4e:ed:bb:
11:b4:1e:3e:bd:1a:15:e6:14:2f:84:c9:ec:f6:61:
f7:bd:e9:59:e7:8a:94:c5:c3:69:64:93:a3:9a:c1:
48:ac:57:f8:94:37:46:02:f8:12:05:81:78:31:cb:
ab:3d:08:cc:a7:07:15:6c:3f:a2:ba:d8:ce:d5:e7:
6d:19:1a:bf:e0:cb:2c:98:fc:2e:25:1c:5f:2e:4a:
af:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:EF:9D:AE:FB:44:11:6F:36:E9:C8:F1:7E:3E:C5:DE:64:C3:0C:39
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a3c79f28-fa8a-3267-a6f0-d1099d604c6a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:cb00:23::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5a:f7:d2:05:10:07:85:8c:2a:de:20:2d:5f:21:d9:da:d5:c9:
c3:4e:d9:b2:2b:b7:22:ac:33:13:7d:52:e0:59:56:3d:d0:9b:
97:2c:25:40:d8:dc:c3:cf:d0:a8:0b:1f:c2:42:45:fc:63:10:
20:72:a3:7b:9c:3b:85:d8:75:43:03:11:1c:14:1d:86:2e:25:
6e:2d:fe:70:14:93:7e:be:ea:60:a1:1b:d4:ba:16:11:5a:5e:
9b:78:99:cb:ee:9d:02:a8:f8:21:d7:93:6e:fa:be:ba:dd:4e:
26:c6:bd:49:97:49:7f:a5:1a:77:68:f9:85:16:4b:d6:f9:12:
31:f0:75:8b:2e:bd:3d:92:6e:b6:5a:a9:87:7a:4a:67:28:8f:
e7:74:8b:8e:56:2f:13:12:e2:44:c6:64:89:b4:b6:a2:7e:de:
09:ea:11:9e:26:25:02:6b:86:65:c0:dc:26:0b:86:8b:ac:35:
c1:64:bd:30:15:93:91:34:76:eb:86:83:55:83:b5:a4:ad:91:
39:85:c5:0a:96:2e:25:5d:33:94:f0:de:53:72:f8:7a:34:04:
48:33:d8:aa:04:fe:ed:3d:35:68:36:f8:3a:a6:67:1d:28:ad:
a9:7a:52:51:f9:d4:cc:12:47:84:5a:ac:ca:df:e6:63:8b:41:
30:e2:8d:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 00:16:20 2025 by rpki-client