Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ad78b405-a495-404a-a809-d632ddd6e3d6/2bf07e84-bc82-3e7b-96db-63ef4dde1fcd.roa
File: 2bf07e84-bc82-3e7b-96db-63ef4dde1fcd.roa (raw, json)
Hash identifier: yXO68zsPgE5faVrABjR/EM02v37s2T4gUsJTwoF+IjU=
Subject key identifier: 73:5B:8D:58:05:37:83:61:E8:FE:BA:BD:BC:E2:60:77:95:80:95:C8
Certificate issuer: /CN=ad78b405-a495-404a-a809-d632ddd6e3d6
Certificate serial: 010D0C9F432858484EDAD0D63048EB1B7852A000
Authority key identifier: 41:15:5C:F0:5D:CC:60:53:42:CD:FE:87:88:B4:10:C2:EA:EB:5B:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ad78b405-a495-404a-a809-d632ddd6e3d6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ad78b405-a495-404a-a809-d632ddd6e3d6/2bf07e84-bc82-3e7b-96db-63ef4dde1fcd.roa
Signing time: Tue 24 Dec 2024 02:00:38 +0000
ROA not before: Tue 24 Dec 2024 02:00:38 +0000
ROA not after: Mon 24 Mar 2025 01:00:38 +0000
asID: 16509
IP address blocks: 2620:1f9::/42 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4e:da:d0:d6:30:48:eb:1b:78:52:a0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad78b405-a495-404a-a809-d632ddd6e3d6
Validity
Not Before: Dec 24 02:00:38 2024 GMT
Not After : Mar 24 01:00:38 2025 GMT
Subject: CN=8531e29f-b443-4769-be65-3c32fe10d8dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:4a:f3:c9:44:c4:d2:14:21:69:06:5b:17:22:
a8:8d:77:a0:32:7b:61:2f:c4:04:c0:63:fc:88:ee:
c6:9d:95:a0:f6:42:1b:7e:41:67:7b:f3:95:4a:37:
b5:f9:2a:15:a8:c4:43:89:fb:91:a9:b9:51:f9:21:
80:6b:cf:d3:c5:4b:65:52:dc:a2:40:67:e9:7d:02:
bf:88:25:bc:ea:87:f1:60:30:60:1e:e3:8e:68:7b:
7b:d5:2b:d3:a9:f2:e8:88:6c:dc:ac:7c:86:4f:86:
59:05:83:42:a2:89:44:6b:07:58:95:0e:b0:14:04:
71:12:ba:77:25:9f:fb:44:f5:57:ba:71:04:ba:05:
2f:09:0f:35:e1:3a:54:3b:68:9e:4a:9a:e5:9b:7a:
12:f6:18:26:b5:b3:a2:f3:99:da:b3:59:53:04:71:
3c:4f:0b:bf:7a:fc:64:18:ee:6d:77:a5:8d:be:af:
ac:b9:bd:a4:1c:2e:ab:91:df:6f:3f:16:dc:c9:10:
58:52:3f:d9:ec:f1:c6:c1:b8:05:8f:0e:3b:b2:94:
f0:b3:55:22:4c:c8:cf:a6:32:f9:9d:68:b9:ca:09:
d9:f7:0d:6a:59:ae:35:72:80:b3:89:3b:a6:ed:c0:
d8:1a:95:8c:9d:58:d5:5c:27:51:c0:cf:06:18:36:
8c:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:5B:8D:58:05:37:83:61:E8:FE:BA:BD:BC:E2:60:77:95:80:95:C8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ad78b405-a495-404a-a809-d632ddd6e3d6/2bf07e84-bc82-3e7b-96db-63ef4dde1fcd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ad78b405-a495-404a-a809-d632ddd6e3d6/ad78b405-a495-404a-a809-d632ddd6e3d6.crl
X509v3 Authority Key Identifier:
keyid:41:15:5C:F0:5D:CC:60:53:42:CD:FE:87:88:B4:10:C2:EA:EB:5B:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ad78b405-a495-404a-a809-d632ddd6e3d6.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:1f9::/42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
55:30:9c:7c:7d:0d:a9:3a:83:75:18:0f:2e:49:91:0a:73:31:
bb:65:04:e0:59:c0:24:20:0d:e6:6e:84:24:36:98:fb:d9:cd:
39:17:73:12:88:06:cb:b2:71:99:cc:c6:45:d5:11:f8:43:bf:
4c:2b:23:d7:0f:6c:67:81:f9:07:dc:e5:5c:6e:99:1d:26:96:
c0:35:70:35:d1:0d:e6:d9:e9:2b:fb:ee:b9:4c:47:a0:8f:f7:
cf:7f:9a:62:98:8f:f1:ad:5e:08:22:5f:52:e3:1e:66:d4:15:
a8:b4:9b:a6:00:fe:67:f9:b3:8e:21:24:61:2d:f1:4a:01:98:
d0:3b:3b:41:27:a9:3e:06:94:71:b0:02:92:57:c1:7c:55:03:
41:1f:4c:63:37:4e:07:9e:e5:72:bc:75:29:95:3f:51:6c:c2:
42:5e:1b:77:74:c3:86:12:88:4f:b6:1c:c3:3f:6f:07:40:e3:
a4:87:c9:ff:fd:d5:a9:f2:bc:2a:52:5c:a2:dd:65:e1:c8:93:
1c:f8:3e:9c:f4:a7:37:4f:c0:c9:a2:61:d7:d8:6d:00:44:0b:
1c:cb:0d:0b:c4:1f:ba:91:a7:75:d2:43:76:2a:59:fe:c8:48:
17:39:e2:79:85:80:cb:5b:ef:24:4f:b7:3d:80:83:bd:d7:cf:
f9:40:6c:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:14:22 2025 by rpki-client