Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/4fe3f1fd-4c6b-3e30-b0a8-b2d6115f6dc4.roa
File: 4fe3f1fd-4c6b-3e30-b0a8-b2d6115f6dc4.roa (raw, json)
Hash identifier: I5dmWEexK/Jhw/fznSFBms+JcF21UtxWcRQTnEJid2w=
Subject key identifier: 4C:7F:7A:2A:1F:3A:50:9D:5D:3E:59:5A:15:80:0C:E8:48:9E:91:F6
Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial: 010D0C9F43285848037A79E11B0AAEEC9A2F4500
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/4fe3f1fd-4c6b-3e30-b0a8-b2d6115f6dc4.roa
Signing time: Wed 27 Nov 2024 02:00:39 +0000
ROA not before: Wed 27 Nov 2024 02:00:39 +0000
ROA not after: Tue 25 Feb 2025 02:00:39 +0000
asID: 11955
IP address blocks: 2606:a000:3000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:03:7a:79:e1:1b:0a:ae:ec:9a:2f:45:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Validity
Not Before: Nov 27 02:00:39 2024 GMT
Not After : Feb 25 02:00:39 2025 GMT
Subject: CN=a7997153-b2f2-4225-8991-fde3f399b4a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:81:e9:88:3f:a3:74:0e:a1:37:67:27:c7:21:
df:a7:2c:b0:31:ed:33:db:d8:d8:45:91:99:1e:5c:
1f:a9:f8:8d:df:ce:ce:23:ea:e8:97:f7:21:fc:27:
15:0e:c0:fc:a1:73:4d:7a:d5:1e:76:61:c9:35:5f:
78:a9:6b:0b:99:f8:16:ca:cb:b3:ec:13:3c:53:3d:
68:e2:25:47:c9:78:db:0d:37:e0:cd:f8:fd:46:64:
0f:a7:65:8a:7d:32:ac:5e:5b:09:dd:3c:e8:e7:44:
9f:95:a2:62:dd:00:3d:20:1c:36:5a:6b:29:b4:b6:
5a:5b:79:ec:ab:2d:99:4a:7b:76:0a:88:44:b6:38:
2e:8b:92:44:4c:06:38:6d:42:bf:c3:26:11:e8:6a:
9c:09:75:26:ed:26:b2:c6:7e:fd:85:7f:20:ec:ae:
d3:82:bf:0b:0e:84:45:0e:6a:ea:a1:9d:fe:a9:19:
35:bb:5c:64:79:95:36:92:5e:7c:6f:5c:8a:01:38:
17:85:84:a4:33:d0:b9:fc:79:73:a8:1b:a8:96:78:
30:0e:3d:ab:c2:60:1a:c3:33:6f:b9:97:77:d9:65:
59:74:6d:e8:b2:ef:50:40:2e:a4:1d:d5:80:b0:4e:
f2:e7:f4:6e:db:b7:c6:b5:4e:44:1d:11:62:01:6e:
e7:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:7F:7A:2A:1F:3A:50:9D:5D:3E:59:5A:15:80:0C:E8:48:9E:91:F6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/4fe3f1fd-4c6b-3e30-b0a8-b2d6115f6dc4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
X509v3 Authority Key Identifier:
keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
sbgp-ipAddrBlock: critical
IPv6:
2606:a000:3000::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1c:78:6b:15:c3:39:46:78:13:4a:61:a5:2d:24:d2:75:7c:70:
e0:14:a5:1b:72:3d:b5:b1:23:fc:e4:7c:aa:3a:15:4a:c1:e4:
64:e2:66:1a:37:59:d7:9a:07:2a:3e:58:c5:d8:bf:4c:04:c7:
41:3c:1d:6d:06:31:e3:02:ce:51:1a:cf:3a:a5:81:b0:50:57:
75:d3:cd:11:da:1f:19:6b:cf:4f:cb:92:10:fd:ed:4f:70:1f:
5d:6c:e0:3c:32:99:b4:bf:68:5f:26:cb:2d:4d:00:bd:f2:f0:
e0:00:71:37:96:f9:d9:16:e2:21:e8:60:31:89:48:54:f2:73:
89:22:26:a9:05:54:67:9b:c9:e4:6d:4c:3a:83:8d:79:90:5b:
3d:0e:27:24:97:c0:e5:a7:4d:40:f9:f5:82:94:35:99:0b:88:
8e:d1:37:f1:a6:cc:61:5a:cd:d1:2f:03:52:56:47:e9:0e:91:
ee:68:23:88:3d:24:be:eb:8a:d8:40:e9:03:fb:ca:53:02:10:
c2:00:cd:c6:82:80:7e:86:a7:6f:21:bf:26:a5:41:a6:95:2b:
d3:59:e0:d4:c2:ab:bd:9e:14:58:8f:32:33:fd:a7:e4:3a:d0:
7a:c5:3b:d2:71:54:4e:eb:42:f5:bd:4e:28:98:88:01:4e:94:
9f:b0:26:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:01:57 2025 by rpki-client