Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cbdc881f-54ac-40a9-89b3-5383cf243bae/cf2b3797-7be9-3b3a-ba2e-23e8cc77131d.roa
File: cf2b3797-7be9-3b3a-ba2e-23e8cc77131d.roa (raw, json)
Hash identifier: WkgeQW56L3r+BMp8535BiGrrd20X3pATGnGMjBGXUB0=
Subject key identifier: 1A:19:31:F3:99:49:B7:68:69:96:74:40:95:74:EF:25:49:F1:88:24
Certificate issuer: /CN=cbdc881f-54ac-40a9-89b3-5383cf243bae
Certificate serial: 010D0C9F43285848467AC058AF3FC93E748AF760
Authority key identifier: 0B:77:9F:06:0B:42:75:84:12:DE:DC:60:66:74:A4:3B:3B:C5:1C:33
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cbdc881f-54ac-40a9-89b3-5383cf243bae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cbdc881f-54ac-40a9-89b3-5383cf243bae/cf2b3797-7be9-3b3a-ba2e-23e8cc77131d.roa
Signing time: Sat 21 Dec 2024 02:00:39 +0000
ROA not before: Sat 21 Dec 2024 02:00:39 +0000
ROA not after: Fri 21 Mar 2025 01:00:39 +0000
asID: 396982
IP address blocks: 2620:126:f000::/44 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:46:7a:c0:58:af:3f:c9:3e:74:8a:f7:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbdc881f-54ac-40a9-89b3-5383cf243bae
Validity
Not Before: Dec 21 02:00:39 2024 GMT
Not After : Mar 21 01:00:39 2025 GMT
Subject: CN=305987b5-e2f9-452a-9762-faacc39d7fa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:34:e4:f1:44:56:91:fe:e2:32:20:6d:9c:4e:
90:a9:93:03:d6:ea:08:49:eb:5a:c5:ea:4d:41:e9:
9b:21:bc:c8:24:10:b7:6a:b6:bd:45:47:24:e2:2d:
c6:7c:d0:13:d6:a2:a8:61:38:ab:31:b6:1b:04:16:
da:98:be:19:a2:37:8d:19:1a:5b:39:55:01:a0:81:
de:5c:75:7d:46:84:68:60:3a:ff:4a:bd:2b:3b:96:
38:ca:a5:05:1e:a9:b4:04:ca:1d:9a:fd:87:41:26:
a5:9c:e6:cd:67:f2:6d:87:77:9e:81:e0:54:cf:c8:
9b:bb:e8:4e:7e:ec:f2:dc:6f:77:43:4a:f4:08:26:
7e:8a:0f:a8:ce:6a:3b:e1:c6:1c:71:b3:84:e7:ca:
d0:27:0d:1c:87:e1:93:75:0a:f1:65:b6:ec:cd:cd:
16:2e:8b:31:8d:a0:bd:c5:0a:51:b7:b4:d2:e0:e6:
e1:8c:f6:90:32:78:53:d9:d6:52:d7:f1:4d:a3:2a:
0f:63:cb:68:d5:da:f6:12:6c:ca:f9:a7:6c:aa:5c:
97:7c:62:61:70:a1:a2:4c:84:92:ea:af:c6:b6:ad:
2d:e9:9a:fe:f6:6a:01:9f:b4:4a:b0:c2:57:b8:f6:
c5:44:4e:95:ce:a0:16:b0:7a:9b:84:05:7a:30:cb:
e2:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:19:31:F3:99:49:B7:68:69:96:74:40:95:74:EF:25:49:F1:88:24
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cbdc881f-54ac-40a9-89b3-5383cf243bae/cf2b3797-7be9-3b3a-ba2e-23e8cc77131d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cbdc881f-54ac-40a9-89b3-5383cf243bae/cbdc881f-54ac-40a9-89b3-5383cf243bae.crl
X509v3 Authority Key Identifier:
keyid:0B:77:9F:06:0B:42:75:84:12:DE:DC:60:66:74:A4:3B:3B:C5:1C:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cbdc881f-54ac-40a9-89b3-5383cf243bae.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:126:f000::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
15:1a:12:5a:95:9a:dc:9a:ed:eb:cd:93:cb:87:a7:89:bb:06:
c2:ae:7d:e5:46:e5:aa:3c:ac:9b:37:c3:a5:b9:5b:65:b9:a3:
71:66:5a:c5:60:44:15:8a:e6:28:3f:5f:56:c1:e2:1a:ad:f9:
50:2e:e2:91:63:69:66:4f:fe:23:ef:42:3e:25:0e:cf:cd:27:
89:84:e0:1a:d5:fc:8e:32:4a:0d:44:52:a3:d1:ae:f9:40:e8:
11:4c:58:b3:71:f9:65:70:e6:5e:e2:f5:8b:71:50:9f:54:07:
b7:23:e5:64:f0:98:8f:11:af:01:87:ee:1a:9e:87:e1:7b:24:
2e:be:b4:ee:62:06:2d:65:5b:7a:2b:5b:df:a7:b8:4a:fb:21:
b4:ae:e1:40:49:4a:46:41:9f:6c:84:c9:3a:a0:95:f2:69:47:
a3:c8:2d:8d:95:4d:2a:6d:e5:b5:f7:3a:ef:52:6b:13:3a:9a:
6d:8b:e2:e6:e5:bc:cf:f4:76:ef:7b:94:b6:6d:89:27:92:32:
b8:3f:c3:28:9a:5f:de:c2:58:14:d0:a5:20:f9:2b:b8:5c:5e:
b2:ef:81:dd:71:8d:10:af:85:09:45:4a:ea:88:a7:7f:54:09:
51:52:30:73:2a:2d:ba:a5:71:ff:44:a3:f3:11:6c:56:2a:18:
5f:8c:82:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:24:39 2025 by rpki-client