Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/2afcd3d2-508e-374d-8a63-62f8e2cfdafe.roa
File: 2afcd3d2-508e-374d-8a63-62f8e2cfdafe.roa (raw, json)
Hash identifier: tlF2jPGmzJ+ChYWnw/Ckux1sSiOJQ1K9KTYlw7PMgUg=
Subject key identifier: 02:3D:76:EE:9C:79:CB:C4:D1:53:99:95:F2:7F:32:78:39:34:8D:12
Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a
Certificate serial: 010D0C9F432858483F803DC3250670B3B92C72C0
Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/2afcd3d2-508e-374d-8a63-62f8e2cfdafe.roa
Signing time: Wed 18 Dec 2024 14:00:52 +0000
ROA not before: Wed 18 Dec 2024 14:00:52 +0000
ROA not after: Tue 18 Mar 2025 13:00:52 +0000
asID: 16839
IP address blocks: 2606:3600:160::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:3f:80:3d:c3:25:06:70:b3:b9:2c:72:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a
Validity
Not Before: Dec 18 14:00:52 2024 GMT
Not After : Mar 18 13:00:52 2025 GMT
Subject: CN=21d6b5cb-7017-436c-984f-6f233d6cb62c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:dd:c9:e5:02:bd:14:8b:e3:de:1e:9b:db:77:
be:a8:d7:b7:d5:e6:dd:15:05:d1:c7:30:89:40:02:
42:cc:3c:96:57:0f:23:02:8c:cc:b2:8b:e8:2f:7e:
d1:4f:c7:9d:a4:e0:71:35:65:57:59:57:c1:81:a4:
d4:ad:58:9b:fa:a1:8b:27:fe:36:a4:48:34:f8:8b:
cf:93:b8:ab:5c:f6:9e:0f:d5:da:0e:fd:09:7e:c9:
61:8b:64:82:b5:fd:61:29:a5:09:33:12:62:c7:15:
0d:63:f7:90:fe:de:5d:56:75:41:76:c4:ea:9f:8c:
63:8c:ec:78:aa:bd:ce:9d:91:1f:1f:4f:0e:a4:2e:
5a:39:fb:72:96:ae:a9:53:49:9d:ff:c1:f2:0c:5d:
ff:36:9d:63:f2:38:f5:4c:1f:45:f8:2b:d5:d0:25:
a6:48:3a:5c:48:77:2c:f1:30:87:34:2e:38:40:b8:
5d:46:a1:0f:92:ad:18:b5:7a:06:d8:af:96:57:1d:
11:e8:e2:d7:7d:24:b2:36:0d:ed:94:59:3e:85:ef:
5d:c8:be:10:1f:94:d9:2b:5d:96:7a:bf:fb:7e:61:
58:ed:9d:7f:50:fd:71:49:30:eb:0c:5e:db:90:5d:
08:06:a8:5c:a0:06:a0:80:b3:ff:eb:56:a6:87:71:
b0:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:3D:76:EE:9C:79:CB:C4:D1:53:99:95:F2:7F:32:78:39:34:8D:12
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/2afcd3d2-508e-374d-8a63-62f8e2cfdafe.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl
X509v3 Authority Key Identifier:
keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
sbgp-ipAddrBlock: critical
IPv6:
2606:3600:160::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9c:33:47:be:25:4f:fd:b3:5e:4f:b5:16:06:8b:a8:55:bb:82:
b4:d2:87:70:95:5a:25:af:78:39:ec:7b:65:98:98:2e:7f:5b:
52:8a:0b:f7:fd:74:18:7b:80:f8:df:d3:71:97:6a:b4:f0:b4:
b9:64:94:8b:1f:cc:22:2b:58:d6:49:d8:c6:33:94:e8:f5:a2:
5c:aa:f8:d0:ae:a3:7e:28:4e:60:71:0c:59:97:41:f0:3f:40:
e9:fa:fa:fe:f8:46:ae:0e:05:94:69:cf:88:37:e1:fa:d1:18:
9e:b7:44:60:9f:d9:21:81:49:21:e6:1a:2b:ea:27:f7:3a:f9:
d1:53:e6:69:ff:54:da:21:4d:40:c6:15:94:78:64:e9:f1:cf:
e7:b0:52:48:bc:db:99:d2:a4:a9:b8:57:5a:30:96:e5:0d:e7:
a7:3d:62:04:ee:f3:ac:d1:a5:95:ab:95:60:16:81:25:f2:9c:
5c:bb:d5:b3:69:b0:2a:59:af:fd:3c:73:f5:c3:48:6d:55:de:
b3:5b:0c:85:7f:e7:89:d6:46:2c:f5:b2:dd:89:32:1c:a7:b0:
db:b1:c3:8f:d3:e2:4a:b5:82:d7:be:92:e3:b2:95:ae:dc:18:
f9:30:8a:1e:7c:62:ae:84:02:73:ed:0c:5d:43:ab:9c:0a:10:
6b:21:84:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:25:08 2025 by rpki-client