Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c7b3cf4c-bba0-481c-8e82-74f050c5fa2e/4d174698-f0e1-3dfc-8937-59d2c51f39a9.roa
File: 4d174698-f0e1-3dfc-8937-59d2c51f39a9.roa (raw, json)
Hash identifier: 8HHXVG2u+z9yX68Bg4P8l7SNDelJU7n2+Pwp52Y5hZg=
Subject key identifier: F8:9B:86:A5:3F:71:B7:20:7E:87:E4:F3:32:BE:24:EF:22:EF:2E:18
Certificate issuer: /CN=c7b3cf4c-bba0-481c-8e82-74f050c5fa2e
Certificate serial: 010D0C9F432858484C101960FB988824F1102AC0
Authority key identifier: FF:BC:A7:A8:B0:C9:3E:0B:30:5C:7D:40:5E:6D:1E:0F:2B:BA:93:03
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c7b3cf4c-bba0-481c-8e82-74f050c5fa2e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c7b3cf4c-bba0-481c-8e82-74f050c5fa2e/4d174698-f0e1-3dfc-8937-59d2c51f39a9.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 394456
IP address blocks: 2607:b6c0::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:10:19:60:fb:98:88:24:f1:10:2a:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7b3cf4c-bba0-481c-8e82-74f050c5fa2e
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=49087bab-d8ec-48f3-971f-93e1722fa972
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:f3:bb:48:2e:10:27:ff:03:5d:21:f8:b5:9d:
77:2a:f9:c1:95:80:b1:16:de:12:ab:6b:a5:1c:89:
fb:e5:9e:1d:e3:98:81:20:a3:8f:1e:c7:b9:89:c8:
0a:bd:2c:13:dd:35:29:8a:a9:81:09:9e:49:0c:9a:
df:4b:3e:f8:6b:fe:10:05:64:d2:96:13:e5:66:bf:
a0:91:52:e2:da:df:a8:34:44:95:c4:a7:7e:a8:ba:
53:96:8f:5a:21:d1:8c:be:36:0b:66:c4:cb:0e:3a:
61:47:ab:a2:7a:cb:55:55:df:e8:e4:f0:47:a0:9e:
16:ee:fc:38:b0:fb:80:f5:5c:e7:66:7c:96:e9:d2:
fb:03:ba:0f:ea:99:ec:c3:09:45:d8:6e:49:1c:2c:
a7:91:65:95:e0:da:05:a6:31:97:9e:d2:03:53:24:
27:97:9d:46:e5:50:a8:f1:49:50:00:f3:71:7d:37:
cd:14:f2:d7:fa:ff:d6:b9:56:e8:77:c4:13:ba:32:
7e:21:df:b0:89:22:30:93:a2:cb:db:77:5a:d8:f4:
dc:31:1e:4c:22:c0:2e:f7:3c:bc:34:cf:31:9d:34:
39:1e:ed:87:e2:79:e7:14:14:71:99:ec:14:a3:8a:
21:c7:86:45:f8:af:3a:dc:dc:d6:37:59:f6:a3:12:
0d:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:9B:86:A5:3F:71:B7:20:7E:87:E4:F3:32:BE:24:EF:22:EF:2E:18
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c7b3cf4c-bba0-481c-8e82-74f050c5fa2e/4d174698-f0e1-3dfc-8937-59d2c51f39a9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c7b3cf4c-bba0-481c-8e82-74f050c5fa2e/c7b3cf4c-bba0-481c-8e82-74f050c5fa2e.crl
X509v3 Authority Key Identifier:
keyid:FF:BC:A7:A8:B0:C9:3E:0B:30:5C:7D:40:5E:6D:1E:0F:2B:BA:93:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c7b3cf4c-bba0-481c-8e82-74f050c5fa2e.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:b6c0::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
34:2f:1a:c4:f3:1d:37:6a:80:ce:8c:2f:6a:ce:97:fe:1c:a3:
87:80:31:4c:54:30:04:29:df:a0:b7:af:96:90:1f:69:9b:6f:
e9:6d:c0:38:cc:14:fd:e7:f0:68:40:5d:04:20:4d:36:7c:1c:
2c:67:b5:4e:b9:6a:a3:a2:3f:ca:96:3a:94:3a:78:5c:88:07:
76:ee:35:e3:05:d9:c3:a0:22:08:30:14:b1:92:b8:78:0a:79:
37:c8:ac:14:04:5e:4b:da:85:60:17:ff:6d:81:dc:e3:19:ad:
c6:8e:bf:47:2c:8e:c8:e4:ee:f0:eb:29:65:15:e2:12:79:0f:
09:e7:13:88:66:a8:2e:fd:7b:62:a2:60:09:44:df:61:28:db:
24:f7:17:6c:e6:d8:08:83:43:bc:6b:ab:af:92:f0:5c:c2:99:
69:a3:e1:8a:25:c0:6c:2a:d4:24:62:dd:a3:4e:c5:e4:7f:2b:
11:57:b6:63:97:48:46:e3:f4:1e:16:fa:c7:57:d4:6d:eb:ac:
23:67:8e:7e:da:83:3e:40:be:82:4e:b6:07:84:be:82:26:e8:
9b:f6:bf:2f:1c:8d:da:be:55:26:61:1f:16:fd:3e:ce:ca:34:
20:96:25:fd:48:49:eb:ec:f3:fb:89:89:c1:50:2f:be:df:d3:
8c:b3:1d:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:00:05 2025 by rpki-client