Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/a0f485f5-967d-3448-a732-d57c2d1d96bb.roa
File: a0f485f5-967d-3448-a732-d57c2d1d96bb.roa (raw, json)
Hash identifier: GLtPaNKajHbBEam+Ytkdswn0+g0B9vGBsOnF4TIlCYk=
Subject key identifier: 8E:20:B2:EF:E2:30:A0:31:2B:C6:F3:C9:15:92:AF:4C:70:AB:EA:96
Certificate issuer: /CN=dbc41d55-9cbd-403e-9fa7-a3334f1ede3d
Certificate serial: 010D0C9F4328584839EACFB454BB61DDA309CB00
Authority key identifier: BD:09:90:7A:2D:9A:2F:56:65:B6:16:4C:EC:24:63:8A:F2:D2:09:9C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/a0f485f5-967d-3448-a732-d57c2d1d96bb.roa
Signing time: Mon 16 Dec 2024 14:00:51 +0000
ROA not before: Mon 16 Dec 2024 14:00:51 +0000
ROA not after: Sun 16 Mar 2025 13:00:51 +0000
asID: 5715
IP address blocks: 2604:3000::/32 maxlen: 48
2604:d380::/32 maxlen: 48
2605:6d80::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:39:ea:cf:b4:54:bb:61:dd:a3:09:cb:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbc41d55-9cbd-403e-9fa7-a3334f1ede3d
Validity
Not Before: Dec 16 14:00:51 2024 GMT
Not After : Mar 16 13:00:51 2025 GMT
Subject: CN=69849408-a79b-4295-9b0a-ca757cf403fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a3:c5:10:0f:5e:ed:8a:d4:b7:44:cd:2f:da:
e8:e2:22:17:b3:aa:c3:24:87:72:62:8f:1c:57:f5:
f5:3f:b6:16:c7:f4:15:ae:6e:45:42:f6:c6:33:c4:
52:1f:73:8c:8f:6d:b8:84:48:be:af:0a:fb:2a:c2:
4d:82:b5:16:9a:89:99:9d:db:d8:70:a3:bd:fb:80:
3b:7a:12:a0:be:4d:de:c0:b8:0a:da:dc:e3:46:47:
14:6b:94:cc:78:2f:68:c2:0e:f4:dc:44:4b:14:c9:
2c:b3:4d:bd:9f:3c:5e:93:03:72:22:cc:2d:f3:e3:
e0:2c:66:47:25:aa:34:f6:a5:06:a0:74:41:0d:f4:
fc:b3:87:89:4d:3b:ff:ba:eb:df:0a:e5:42:73:d9:
23:52:f6:4c:3a:66:7f:bc:09:cd:ce:47:2c:25:c1:
05:7c:d9:e7:7c:e4:0e:4c:9e:ad:9a:26:af:f5:6a:
cb:f3:53:10:ef:70:a5:fc:39:89:60:70:ec:f5:36:
b4:e8:88:32:b4:79:14:eb:2c:13:d7:42:33:87:46:
a2:ec:7f:bd:c1:91:cf:21:71:5d:e5:42:1a:9d:46:
43:00:28:44:b4:e8:9e:c7:cf:67:dc:fc:6c:91:63:
8d:1b:0f:cd:28:3f:8e:f6:92:d9:f9:f9:00:4b:34:
bc:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:20:B2:EF:E2:30:A0:31:2B:C6:F3:C9:15:92:AF:4C:70:AB:EA:96
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/a0f485f5-967d-3448-a732-d57c2d1d96bb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.crl
X509v3 Authority Key Identifier:
keyid:BD:09:90:7A:2D:9A:2F:56:65:B6:16:4C:EC:24:63:8A:F2:D2:09:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:3000::/32
2604:d380::/32
2605:6d80::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
74:93:4b:80:2f:8d:c0:ce:fb:3e:54:e4:eb:ef:c3:fc:59:73:
34:2b:8f:28:5c:04:3d:63:b5:6b:7c:66:39:f7:98:e7:ea:1d:
87:63:24:ae:db:02:7b:da:4f:fd:14:58:35:48:a1:4a:3a:fd:
98:4d:f2:22:71:e6:c6:73:87:30:c7:b4:f1:08:21:28:8e:b6:
14:fc:ea:25:1b:29:8a:55:4a:79:9c:00:d5:c2:83:be:68:b0:
00:cd:f5:56:d8:54:8e:83:23:79:ca:32:9f:a1:ad:02:43:16:
3c:f5:20:e3:be:a9:be:cc:e2:29:76:d6:b9:9a:b8:9b:d8:d2:
46:db:ff:5e:a6:54:8b:17:dc:36:f1:bf:52:0a:df:43:64:e4:
cf:7d:ac:20:b6:ff:15:16:4f:3f:dc:9a:11:a3:6d:70:61:e9:
74:bb:9b:e5:7d:98:c4:97:e1:60:0a:84:a9:51:32:0d:ce:68:
aa:79:0b:18:f6:98:26:f9:25:9b:82:f6:ca:f2:e5:e7:a4:01:
da:ad:38:ed:7e:ae:fd:0d:81:a1:5b:e4:56:cc:ac:ea:d6:3c:
ac:7f:a6:98:59:0c:4b:14:e3:90:1a:e8:a4:72:48:c3:4b:09:
5b:9a:3b:6f:64:2d:64:81:58:0e:d9:ae:1c:44:a4:14:df:8b:
9c:bf:89:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:01:32 2025 by rpki-client