Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1/67b4a9d0-55c3-32d0-a6d5-3dbd8343d1c0.roa
File: 67b4a9d0-55c3-32d0-a6d5-3dbd8343d1c0.roa (raw, json)
Hash identifier: hCtPQEOlYo5toOcXfvYANG5EWOrfiwE7T+y9spOe718=
Subject key identifier: BF:96:8F:4C:D1:7F:53:C0:21:1C:91:60:B4:73:3C:18:F8:6B:D5:33
Certificate issuer: /CN=e3fada49-b353-4a69-9b32-1b6ab3729db1
Certificate serial: 010D0C9F432858484551CAE2A12B81F7C18CF8F0
Authority key identifier: 26:E9:72:DD:F2:AB:6A:0B:0F:65:29:13:47:2F:D8:DF:E5:06:3D:9E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1/67b4a9d0-55c3-32d0-a6d5-3dbd8343d1c0.roa
Signing time: Fri 20 Dec 2024 16:02:28 +0000
ROA not before: Fri 20 Dec 2024 16:02:28 +0000
ROA not after: Thu 20 Mar 2025 15:02:28 +0000
asID: 3855
IP address blocks: 2606:b80::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:45:51:ca:e2:a1:2b:81:f7:c1:8c:f8:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3fada49-b353-4a69-9b32-1b6ab3729db1
Validity
Not Before: Dec 20 16:02:28 2024 GMT
Not After : Mar 20 15:02:28 2025 GMT
Subject: CN=8cac53e3-f637-4917-a33f-325a2588b375
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:31:fc:79:e9:58:f0:b8:73:e9:96:93:1a:6d:
78:58:7a:ed:6e:74:c3:a3:65:4c:96:72:29:4f:f5:
aa:6c:43:66:ac:74:d3:1a:92:1d:77:a9:54:ad:58:
d6:35:e6:51:d4:b4:c4:be:01:2d:be:70:53:59:56:
04:1e:f3:96:2e:2c:56:11:05:9a:8e:b5:e5:cc:80:
ed:b9:a7:13:3f:b2:bd:69:0b:15:da:d5:96:40:9f:
e2:1e:d7:2d:f9:77:48:b3:19:05:75:09:40:77:bb:
14:d2:41:12:c6:99:89:3e:ce:24:ba:81:5b:e1:fc:
d0:3a:d1:b4:c1:02:b5:b2:fc:03:af:04:23:c5:e4:
07:d7:81:3d:e0:ae:30:24:77:80:47:74:5b:3c:20:
e5:48:e3:83:be:ea:62:87:46:57:de:f1:b5:60:88:
4f:d8:d0:f7:06:5a:f4:24:ea:ab:6b:3c:93:e5:0b:
20:60:01:7c:f1:0e:ad:25:f8:21:52:b4:20:58:88:
4c:ee:9f:b6:ba:d9:ff:f3:8e:7f:30:25:19:96:f9:
cf:c7:92:4c:20:46:be:fa:7b:c8:01:3b:8c:4b:ee:
ca:23:c5:5c:37:d4:42:43:80:bb:80:84:01:d9:ac:
ba:83:70:07:43:5d:61:f5:13:3b:49:25:85:8f:f7:
cd:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:96:8F:4C:D1:7F:53:C0:21:1C:91:60:B4:73:3C:18:F8:6B:D5:33
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1/67b4a9d0-55c3-32d0-a6d5-3dbd8343d1c0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1/e3fada49-b353-4a69-9b32-1b6ab3729db1.crl
X509v3 Authority Key Identifier:
keyid:26:E9:72:DD:F2:AB:6A:0B:0F:65:29:13:47:2F:D8:DF:E5:06:3D:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1.cer
sbgp-ipAddrBlock: critical
IPv6:
2606:b80::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
40:2b:5e:2c:0f:c4:14:0e:34:98:d0:0f:22:10:b4:cb:b9:72:
b2:79:87:66:7d:c6:4f:3d:3f:5e:ab:7f:55:3a:ea:da:ac:03:
83:7e:dc:df:47:5e:8d:49:8d:2a:6f:10:76:89:35:55:6a:30:
df:08:f4:ee:46:fa:14:1c:67:6c:b5:c1:36:c2:88:02:f8:30:
26:1e:ba:32:04:f6:53:c9:70:82:e9:b8:f3:61:d5:64:f1:fd:
d9:7b:2a:c6:b6:b5:c6:6a:ff:9a:9c:5f:2b:3a:53:02:b5:c9:
59:e6:1c:f0:e4:fd:48:7c:a6:6e:84:83:29:ef:9e:6d:74:2b:
e3:dd:2f:0a:51:4b:73:02:79:68:37:7f:30:2f:09:10:2c:67:
66:74:c0:11:5a:5d:98:98:35:45:63:bf:d3:15:44:81:d4:91:
d5:0f:1b:39:68:d6:45:20:09:e0:a1:a3:2e:5a:d0:31:02:16:
c9:66:46:9e:30:fa:4f:8f:02:6a:4f:64:96:45:eb:8d:4d:dd:
10:7f:48:b0:54:5d:65:5a:1f:8f:b6:61:87:ae:78:41:a8:07:
96:36:0d:8d:bd:57:2e:90:c9:8d:5f:1f:d8:5b:b7:34:dc:4c:
7f:84:cd:1c:86:b9:6d:95:cc:0c:7d:c3:73:d4:87:fd:79:aa:
98:5b:0d:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 09:41:51 2025 by rpki-client