Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/309a1a50-a5ba-37b9-8b4d-0cc4d42332cc.roa
File: 309a1a50-a5ba-37b9-8b4d-0cc4d42332cc.roa (raw, json)
Hash identifier: 1Ti1zww+4COR4W5UYmzBgGyIh4JW4N9SNuzjSUe7Fko=
Subject key identifier: 32:00:7F:E5:32:BA:62:AB:6C:0E:A3:4B:06:4A:A5:51:B0:0F:C9:5D
Certificate issuer: /CN=dbc41d55-9cbd-403e-9fa7-a3334f1ede3d
Certificate serial: 010D0C9F4328584839EACFF7952289459AC02680
Authority key identifier: BD:09:90:7A:2D:9A:2F:56:65:B6:16:4C:EC:24:63:8A:F2:D2:09:9C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/309a1a50-a5ba-37b9-8b4d-0cc4d42332cc.roa
Signing time: Mon 16 Dec 2024 14:00:51 +0000
ROA not before: Mon 16 Dec 2024 14:00:51 +0000
ROA not after: Sun 16 Mar 2025 13:00:51 +0000
asID: 1347
IP address blocks: 2604:3000::/32 maxlen: 48
2604:d380::/32 maxlen: 48
2605:6d80::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:39:ea:cf:f7:95:22:89:45:9a:c0:26:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbc41d55-9cbd-403e-9fa7-a3334f1ede3d
Validity
Not Before: Dec 16 14:00:51 2024 GMT
Not After : Mar 16 13:00:51 2025 GMT
Subject: CN=b98e8e25-2798-438f-87a8-e20b1e4d24c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:69:c0:61:51:24:15:5c:b1:8f:03:53:0b:7f:
bc:c6:cf:98:10:fa:4e:2d:7d:16:0d:14:e2:97:e6:
ce:a5:4c:89:1d:54:14:32:d2:84:34:39:45:de:29:
4a:e7:f7:a0:4b:13:60:ab:59:76:5f:3a:a8:32:13:
e3:f1:b3:5e:83:dc:bc:3a:c3:80:57:3a:78:49:f9:
04:9e:80:85:aa:1b:df:9d:19:53:6d:80:6c:75:83:
1b:b8:9d:40:dc:d8:8a:ff:e9:aa:b6:5d:fb:dc:24:
ef:38:02:ca:d6:08:b2:36:ab:f4:98:2b:0b:89:dc:
70:ca:77:d3:4b:c1:e4:30:4e:cb:06:b4:6c:b3:b9:
12:c3:6e:e7:d9:ac:3f:92:b6:f5:0d:01:e1:a6:0f:
33:ee:f6:88:3b:0d:9a:98:69:94:ae:3f:5d:a0:3d:
41:0a:2d:1a:18:21:fb:85:d9:da:7b:b0:20:5a:d8:
a0:29:58:5e:6e:20:fe:4f:33:2c:77:e9:ba:cf:a8:
17:03:4f:d5:9a:0c:70:69:13:7f:18:a6:d6:d7:75:
94:b1:73:8d:93:1e:e1:a7:12:c9:30:b2:94:49:56:
2c:cc:4d:d9:4d:31:fd:02:de:59:e5:a5:82:a0:4d:
26:85:d0:f2:ec:76:e7:b0:b6:9f:27:16:fb:3c:4d:
59:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:00:7F:E5:32:BA:62:AB:6C:0E:A3:4B:06:4A:A5:51:B0:0F:C9:5D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/309a1a50-a5ba-37b9-8b4d-0cc4d42332cc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.crl
X509v3 Authority Key Identifier:
keyid:BD:09:90:7A:2D:9A:2F:56:65:B6:16:4C:EC:24:63:8A:F2:D2:09:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:3000::/32
2604:d380::/32
2605:6d80::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
42:8b:16:68:af:72:4c:67:47:a4:4a:de:d2:02:78:cf:ae:11:
e4:2d:c7:9c:8b:40:26:aa:03:5c:40:52:a2:66:6a:0f:4b:e6:
5a:ca:ad:6f:7a:92:6a:45:da:c4:d7:c6:29:0e:9c:c5:f4:36:
4d:c0:21:ba:45:a2:c2:fe:b3:51:44:9c:0e:41:db:11:f5:be:
e9:c7:5d:2c:a5:7d:96:89:b7:d8:c5:cc:a8:fd:b8:98:a0:3b:
22:72:71:7c:73:b5:95:36:03:e5:9d:91:7b:8b:86:e7:34:b4:
46:ac:b3:df:e7:94:7e:bd:fa:ff:7a:0b:1e:e8:96:71:f1:b9:
22:a3:80:36:f8:24:31:ba:9c:f7:ad:60:cc:c3:66:e2:8d:72:
95:ea:b3:bb:71:5a:99:ca:69:3f:7f:72:b8:23:f6:8c:b3:0a:
ad:e6:e1:f4:4e:0f:5a:01:bb:6d:f6:c5:ab:54:a5:09:6f:1d:
92:83:10:61:39:07:df:cb:15:42:dc:c4:2a:9f:0e:8d:ca:fe:
22:ad:c9:fd:80:31:f4:5d:35:9f:cc:eb:fe:c8:80:d7:df:e2:
d7:e2:8f:ba:e3:b0:54:b3:c3:a2:47:f6:52:ce:34:d9:c0:2f:
f2:26:71:17:bc:fa:98:fb:56:34:3f:ab:dd:92:04:76:e6:5b:
5e:4b:5f:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:56:02 2025 by rpki-client