Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d826c88d-e62d-45fe-a08c-0b0a021a5314/4935dcca-fda3-3095-ae33-8359b2b1cc48.roa
File: 4935dcca-fda3-3095-ae33-8359b2b1cc48.roa (raw, json)
Hash identifier: YSncXhjzW5pv4ytwMAcjBllUvbkvnXNdpGf3nUIIaNA=
Subject key identifier: 7D:13:99:8C:E7:D1:40:2D:C4:5E:FA:8E:41:9C:C7:C8:EC:41:6A:CE
Certificate issuer: /CN=d826c88d-e62d-45fe-a08c-0b0a021a5314
Certificate serial: 010D0C9F43285847F84F80F88619E7A6E2063200
Authority key identifier: A1:CF:A2:F0:DE:CA:A4:4B:99:13:F3:EA:92:FC:76:9E:9F:EE:80:64
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d826c88d-e62d-45fe-a08c-0b0a021a5314.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d826c88d-e62d-45fe-a08c-0b0a021a5314/4935dcca-fda3-3095-ae33-8359b2b1cc48.roa
Signing time: Sat 23 Nov 2024 02:00:28 +0000
ROA not before: Sat 23 Nov 2024 02:00:28 +0000
ROA not after: Fri 21 Feb 2025 02:00:28 +0000
asID: 7018
IP address blocks: 2620:7:2000::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:f8:4f:80:f8:86:19:e7:a6:e2:06:32:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d826c88d-e62d-45fe-a08c-0b0a021a5314
Validity
Not Before: Nov 23 02:00:28 2024 GMT
Not After : Feb 21 02:00:28 2025 GMT
Subject: CN=b6f2c6db-c816-4516-85b5-9cf80f3d8835
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:8c:b1:9b:40:f4:b1:6c:b0:db:7c:fd:ab:26:
dc:cb:4b:61:37:1f:0b:0e:c2:80:3d:da:1a:cd:9b:
76:fa:cd:d9:66:dd:64:90:e5:e6:4a:53:41:b0:14:
b5:48:f7:56:cc:21:5a:fb:be:c9:a9:18:c0:d0:31:
ab:5d:11:b1:be:1f:21:b7:ba:a8:7e:4d:53:38:51:
37:15:bc:2e:b4:5d:bd:6f:c4:e2:4c:39:d0:81:d5:
67:c0:a2:d7:3d:4f:0d:18:a6:6f:c7:d8:f3:aa:d5:
10:e6:84:35:eb:47:f8:c3:76:2d:04:b1:6d:0c:2b:
e5:b4:e1:ab:79:24:95:71:1f:a4:f6:c8:0c:5e:46:
af:14:b3:7f:fd:f0:ef:46:50:ee:10:77:cd:90:cf:
51:c5:85:5f:fb:a4:1c:3c:14:dd:7e:45:4b:f1:6d:
2d:fd:36:ed:84:53:d7:4c:59:94:e5:27:fd:4b:fd:
46:86:a3:3d:01:76:b8:06:3c:dd:5c:5e:a9:04:b6:
db:73:60:4f:7e:2b:f2:48:69:99:c8:28:e3:4b:b4:
fd:71:07:96:45:bf:26:38:c5:71:23:dc:74:0a:f1:
1c:dc:84:a3:fd:f1:f9:c9:b0:c1:b0:7b:74:71:35:
e4:c3:da:b9:fa:e2:92:71:0f:de:50:0e:ed:8d:4b:
91:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:13:99:8C:E7:D1:40:2D:C4:5E:FA:8E:41:9C:C7:C8:EC:41:6A:CE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d826c88d-e62d-45fe-a08c-0b0a021a5314/4935dcca-fda3-3095-ae33-8359b2b1cc48.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d826c88d-e62d-45fe-a08c-0b0a021a5314/d826c88d-e62d-45fe-a08c-0b0a021a5314.crl
X509v3 Authority Key Identifier:
keyid:A1:CF:A2:F0:DE:CA:A4:4B:99:13:F3:EA:92:FC:76:9E:9F:EE:80:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d826c88d-e62d-45fe-a08c-0b0a021a5314.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:7:2000::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
04:4e:21:9e:5e:ac:9a:72:39:05:3b:67:b2:07:2e:51:72:08:
91:a8:6a:7a:63:75:e7:e7:89:bd:63:05:38:ae:c1:8a:0c:ae:
76:04:2a:b5:09:ab:51:69:9b:79:28:1b:48:1d:37:62:f0:8c:
82:67:12:32:b1:86:87:71:5a:fb:83:1d:08:43:d4:6f:34:a6:
01:1e:46:db:0c:04:e3:9b:16:fd:22:df:80:27:cd:99:48:32:
8d:73:9d:59:03:14:11:e1:67:44:e1:2e:1a:42:c5:1c:f6:1a:
e5:70:36:a2:6c:51:6b:10:d6:62:bb:24:dd:1f:e9:62:d6:58:
58:be:fc:0d:7d:c4:25:cc:a7:a6:8b:d4:10:13:78:ff:b7:de:
f4:61:4b:f3:e4:0b:b4:bf:b2:85:8c:6f:82:d2:36:ed:2f:1f:
a6:83:91:d2:3d:79:d5:0a:72:a6:52:c0:ec:94:5e:09:ab:fe:
f3:d1:6b:d5:3f:56:54:33:19:ad:4e:90:64:f0:94:69:22:e7:
eb:a9:bb:08:85:b7:dd:1e:17:d0:c3:a6:f1:69:6b:1a:01:d9:
51:85:63:91:39:41:a7:c9:b9:da:1a:bb:90:ed:60:c2:ea:06:
a9:66:6e:35:89:c3:94:94:57:2a:07:a8:39:b7:8f:24:ea:e6:
2f:59:5a:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 05:14:22 2025 by rpki-client