Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c24a40f6-23ba-4adf-a2a5-42e2fff42c08/dfd3ee90-cddf-3aba-a97f-09d40278ec5a.roa
File: dfd3ee90-cddf-3aba-a97f-09d40278ec5a.roa (raw, json)
Hash identifier: j+I24UKmuzM5Nh38xT53AhWvj7ezZzbG3R3zDzc0juY=
Subject key identifier: 5F:26:D1:4F:0F:88:63:AB:28:87:CD:CF:F0:A5:E7:93:1A:DB:2C:5A
Certificate issuer: /CN=c24a40f6-23ba-4adf-a2a5-42e2fff42c08
Certificate serial: 010D0C9F4328584838854C91803D8D13A6EA1E00
Authority key identifier: F8:E4:B8:57:4D:A9:93:5B:26:69:C6:3A:4A:0F:C7:B9:E3:51:F9:0C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c24a40f6-23ba-4adf-a2a5-42e2fff42c08.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c24a40f6-23ba-4adf-a2a5-42e2fff42c08/dfd3ee90-cddf-3aba-a97f-09d40278ec5a.roa
Signing time: Mon 16 Dec 2024 02:00:39 +0000
ROA not before: Mon 16 Dec 2024 02:00:39 +0000
ROA not after: Sun 16 Mar 2025 01:00:39 +0000
asID: 397142
IP address blocks: 2605:b40:f0c0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:38:85:4c:91:80:3d:8d:13:a6:ea:1e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c24a40f6-23ba-4adf-a2a5-42e2fff42c08
Validity
Not Before: Dec 16 02:00:39 2024 GMT
Not After : Mar 16 01:00:39 2025 GMT
Subject: CN=5798641b-ce4b-413f-851a-106a3c1890cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:51:48:79:19:63:36:a1:9f:28:80:5e:8a:38:
28:7e:76:1f:25:df:08:60:b1:05:23:35:70:2d:5f:
6c:51:32:99:dc:6d:94:5a:c5:67:c2:aa:ca:9a:13:
d8:66:90:09:fa:d5:a7:a4:99:b1:75:90:c8:ab:f4:
30:17:c8:e2:be:27:fd:5e:b4:7b:f8:6f:46:86:24:
ab:a3:70:6e:8d:d4:d3:86:26:b9:a5:36:43:ac:92:
d7:80:02:9c:5d:59:bc:ea:3e:f1:e9:96:cb:34:6e:
55:65:8d:82:41:b4:84:7d:72:84:56:28:be:58:f3:
75:8f:92:07:18:e3:e9:2e:0a:65:dd:c0:bb:87:94:
2e:c9:26:59:1a:8a:ed:d7:98:eb:43:1a:76:a8:f0:
41:e0:f1:07:51:f7:46:e8:13:c5:99:c5:76:62:80:
c9:8c:45:6e:3f:55:ff:2f:e6:7b:b4:96:1c:1d:69:
b4:bd:0b:d2:ef:78:7d:ad:3a:d9:74:74:68:e4:3c:
ec:f5:7a:16:09:db:2f:28:a0:37:39:38:38:a1:69:
93:83:f6:9d:5f:1b:ee:ab:fc:c7:35:34:95:53:bd:
ea:41:96:de:2a:04:0c:62:57:f0:98:2e:70:ac:b5:
7e:74:cd:64:27:89:ad:8f:60:f3:c1:2c:5b:e4:3c:
7f:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:26:D1:4F:0F:88:63:AB:28:87:CD:CF:F0:A5:E7:93:1A:DB:2C:5A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c24a40f6-23ba-4adf-a2a5-42e2fff42c08/dfd3ee90-cddf-3aba-a97f-09d40278ec5a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c24a40f6-23ba-4adf-a2a5-42e2fff42c08/c24a40f6-23ba-4adf-a2a5-42e2fff42c08.crl
X509v3 Authority Key Identifier:
keyid:F8:E4:B8:57:4D:A9:93:5B:26:69:C6:3A:4A:0F:C7:B9:E3:51:F9:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c24a40f6-23ba-4adf-a2a5-42e2fff42c08.cer
sbgp-ipAddrBlock: critical
IPv6:
2605:b40:f0c0::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
60:85:f9:81:6b:c3:56:e9:c1:64:ea:de:22:31:1b:e7:4c:6b:
d8:ee:f3:1f:87:47:f4:b0:60:28:10:a9:5d:4a:72:cd:8b:86:
6d:62:dc:04:63:b9:74:27:fa:a2:45:e5:af:44:6f:49:91:8d:
b4:b9:f5:a1:4f:67:bb:7a:9a:be:f1:0f:5c:3f:2c:2c:37:b2:
73:6c:04:91:fa:1b:9e:2b:6d:f4:ff:7d:09:37:d2:29:09:94:
fe:29:76:ed:60:6c:af:bf:07:f8:55:71:7a:2c:1f:03:ef:79:
95:db:61:13:d9:38:14:5d:eb:94:6d:90:a1:9f:e0:4a:26:0b:
4e:e3:ab:4e:67:d2:2f:34:ed:a2:3f:4c:3c:84:44:4d:d9:c1:
49:e3:e8:1f:22:8a:55:2b:35:38:f8:d9:40:23:ff:8f:0d:b9:
74:1f:7a:0d:e0:0c:36:1c:6b:a5:1f:08:1a:88:b5:82:5b:9a:
5b:1b:27:36:c7:68:23:b1:ca:2e:86:96:c8:b0:23:fc:52:a9:
ab:2c:70:29:cf:f6:8c:45:5e:5c:3e:00:9e:62:54:87:6d:1b:
7e:b0:cc:74:97:83:a1:73:f5:0b:4e:04:ae:4e:93:64:fa:d2:
e0:47:52:fd:ef:f5:d6:4c:08:6b:91:1b:c3:1b:8c:1e:a2:40:
78:2b:3c:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 23:32:13 2025 by rpki-client