Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6/94964db2-18b0-30b0-9bf0-3b33092ac573.roa
File: 94964db2-18b0-30b0-9bf0-3b33092ac573.roa (raw, json)
Hash identifier: ArmQ3aY5IXaU2YyHrXUPjBf+usbrbEuTvp8BWlbCzrQ=
Subject key identifier: F1:50:FC:6C:F8:25:84:CE:6E:81:39:C7:DD:BF:24:EC:8A:93:A2:85
Certificate issuer: /CN=3d291b6a-1b30-4fc0-b1dd-582ab98347d6
Certificate serial: 010D0C9F43285848617C1F48A967F730E87DBA40
Authority key identifier: BC:F7:6D:C8:7E:F4:7A:0B:B2:C7:B8:46:A4:17:5E:45:ED:F8:72:11
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6/94964db2-18b0-30b0-9bf0-3b33092ac573.roa
Signing time: Mon 30 Dec 2024 18:10:23 +0000
ROA not before: Mon 30 Dec 2024 18:10:23 +0000
ROA not after: Sun 30 Mar 2025 17:10:23 +0000
asID: 36850
IP address blocks: 2600:2701:4000::/45 maxlen: 45
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:61:7c:1f:48:a9:67:f7:30:e8:7d:ba:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d291b6a-1b30-4fc0-b1dd-582ab98347d6
Validity
Not Before: Dec 30 18:10:23 2024 GMT
Not After : Mar 30 17:10:23 2025 GMT
Subject: CN=2dbbc04d-9ad4-42fe-9027-b7eabfc02480
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:4a:6b:f6:e9:25:c0:73:ff:d3:50:1e:5a:43:
e0:05:26:5d:26:20:df:f5:76:0a:4e:8a:a3:d7:a7:
3b:29:86:73:9d:25:cf:cf:9c:23:85:5f:32:fc:e3:
63:3d:56:c3:ea:a6:dc:b7:18:4b:21:33:2e:e3:c3:
6f:e7:29:e0:ba:83:7d:87:78:e3:2d:39:f3:52:d3:
98:9b:33:62:08:6b:b0:68:8a:a5:3f:8d:64:50:d1:
fa:04:35:7c:d7:0e:35:c1:63:a8:f4:14:c1:67:91:
85:c5:56:a8:4d:4a:65:5c:99:fb:35:67:2a:1a:d1:
86:37:6d:59:0c:cc:96:2b:37:18:c1:0d:95:34:6c:
f9:78:f4:a1:e9:7c:65:c5:25:53:48:8f:fe:c1:1c:
cc:d5:f8:97:b8:22:5b:ac:8a:62:7d:b5:09:20:a8:
a8:0e:1d:e8:c3:d1:9c:58:3f:03:ab:4e:6e:7c:77:
b6:78:07:2a:38:28:ca:d1:20:57:e2:7f:6f:2b:9e:
5d:2a:60:0a:b1:7f:bd:91:bd:51:a4:bc:2f:72:8c:
cc:8f:67:14:79:e9:60:ae:48:b8:95:88:be:32:3c:
1c:f4:ce:8a:e3:ca:4f:4c:be:0f:53:17:41:7a:cc:
0b:41:29:44:ad:46:7f:b1:c2:98:01:b0:90:81:65:
31:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:50:FC:6C:F8:25:84:CE:6E:81:39:C7:DD:BF:24:EC:8A:93:A2:85
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6/94964db2-18b0-30b0-9bf0-3b33092ac573.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6/3d291b6a-1b30-4fc0-b1dd-582ab98347d6.crl
X509v3 Authority Key Identifier:
keyid:BC:F7:6D:C8:7E:F4:7A:0B:B2:C7:B8:46:A4:17:5E:45:ED:F8:72:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:2701:4000::/45
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
76:94:72:08:58:97:7a:d1:c4:5c:4e:0e:f0:48:34:8d:a2:b4:
1c:14:c2:63:b0:c3:40:db:a8:18:33:af:7d:e4:70:d2:65:2d:
ee:0e:8a:44:af:e8:4a:42:a8:43:6e:53:96:82:9d:37:09:33:
ff:3e:b0:24:c0:d0:de:44:3a:4f:fe:3e:a9:1d:d8:89:01:20:
65:a8:d1:df:b8:cc:95:e8:ac:51:7e:17:8c:c9:2a:86:bd:da:
2e:78:52:95:c2:a6:59:4f:bd:41:45:b1:af:d1:77:2f:dc:67:
cb:83:33:96:b8:a9:b7:eb:8d:1d:96:aa:b6:86:03:3f:8d:78:
47:b3:61:17:a2:09:41:18:af:df:cd:b9:48:f4:8f:08:de:07:
50:9b:4b:c8:5f:87:29:e7:af:12:4f:c4:7e:0b:d3:a2:70:70:
9f:f2:b9:44:9a:db:03:c2:48:a9:0c:70:9e:e4:b3:89:69:42:
c8:4f:27:b8:eb:10:18:d2:3e:b9:31:21:ab:e9:2d:ed:e6:14:
a1:70:7f:6c:23:57:11:be:e1:f5:96:12:69:47:29:13:6d:5f:
3a:14:4b:84:c4:1b:f6:d3:dd:4c:3c:e8:ca:99:56:3e:7e:ef:
f9:f8:4f:29:33:15:a2:db:eb:cf:3d:45:ca:ca:93:e8:b1:b2:
4a:a6:98:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:46:16 2025 by rpki-client