Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/7c1e0126-d41e-3924-99a0-e7a1cd008156.roa
File: 7c1e0126-d41e-3924-99a0-e7a1cd008156.roa (raw, json)
Hash identifier: KwLFi9CnPYZDxfJSgpU+3H3HEj8aYGUe4ITr9kUYc4w=
Subject key identifier: FC:27:00:28:9F:64:A8:E2:FA:54:CC:5F:F7:88:7D:D1:00:BF:77:77
Certificate issuer: /CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f
Certificate serial: 010D0C9F43285847DC024A581BEC4ACF6332BD00
Authority key identifier: F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/7c1e0126-d41e-3924-99a0-e7a1cd008156.roa
Signing time: Tue 12 Nov 2024 22:42:24 +0000
ROA not before: Tue 12 Nov 2024 22:42:24 +0000
ROA not after: Mon 10 Feb 2025 22:42:24 +0000
asID: 394437
IP address blocks: 2606:a780::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:dc:02:4a:58:1b:ec:4a:cf:63:32:bd:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f
Validity
Not Before: Nov 12 22:42:24 2024 GMT
Not After : Feb 10 22:42:24 2025 GMT
Subject: CN=68da66f2-621a-4522-8f60-95fa5307363d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:cd:59:1d:11:e6:bb:6e:60:2e:ec:56:b5:07:
6f:8e:dc:cf:50:b2:c8:8a:27:19:67:47:32:03:a1:
14:e3:cd:ef:7c:d4:9b:c8:44:d5:03:9e:5f:1f:67:
8b:79:41:b3:4d:ae:80:41:08:a1:7a:f9:9b:ef:96:
76:55:95:0f:3f:b2:7b:cd:df:be:8e:af:33:8e:06:
f7:54:65:85:12:29:d3:4a:d2:0c:ea:cd:cd:e8:e9:
9c:36:b7:a0:5a:15:91:81:c1:a3:f8:99:c3:b8:d1:
72:70:84:f5:39:83:3b:ec:ff:eb:6f:92:f8:32:a3:
e2:52:0a:b7:7a:5d:8b:5e:2c:69:9c:19:56:4c:c8:
79:5b:18:8c:d9:a2:ee:0c:0a:7a:98:48:2d:89:64:
6e:f7:9b:4d:f0:30:56:86:88:01:b9:35:ad:ba:f7:
f9:4d:e4:cf:23:c7:da:cc:89:5c:0c:db:f2:fd:1a:
9d:a3:82:19:49:bb:9a:d4:84:a8:ab:e8:40:45:40:
90:98:04:52:5c:86:a8:8a:15:45:e4:83:14:9d:de:
ad:b0:25:85:51:f3:7b:a4:0a:0b:ad:9d:79:8d:2e:
61:20:3e:59:05:86:0d:3b:12:c8:27:d9:54:6e:95:
e7:01:c8:ad:92:a1:74:6d:4c:18:5e:42:cc:e5:d6:
ee:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:27:00:28:9F:64:A8:E2:FA:54:CC:5F:F7:88:7D:D1:00:BF:77:77
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/7c1e0126-d41e-3924-99a0-e7a1cd008156.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl
X509v3 Authority Key Identifier:
keyid:F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer
sbgp-ipAddrBlock: critical
IPv6:
2606:a780::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
99:55:cd:8b:61:e5:43:ae:23:59:1a:d6:91:be:fa:a3:72:a9:
f7:45:b9:71:97:81:ef:73:46:e8:2e:57:dd:4f:83:13:83:bb:
d2:7b:02:ac:80:8c:7f:ac:2e:99:8b:d0:71:18:56:d8:7c:74:
a7:94:9a:7d:b8:a4:19:4b:8d:a7:2c:90:04:f7:2b:2a:14:14:
9d:93:37:ed:d4:0f:b2:2c:09:91:5e:b9:bb:96:85:24:4b:57:
0b:87:a5:f4:a3:3c:37:c8:eb:1c:e5:c5:b3:0a:17:05:f2:05:
08:5e:52:e7:00:02:a5:dd:ca:5d:ce:b8:e8:8a:2c:e4:46:a5:
42:43:bb:13:d7:76:4a:6f:4a:74:9d:24:83:ce:bb:4e:f4:d0:
c6:48:38:d3:12:01:2b:69:78:e4:89:67:f7:34:0b:07:cd:ce:
9e:ce:e0:87:85:52:72:23:1f:6e:b7:3f:c9:79:11:23:62:a6:
6e:10:a4:f4:5e:bf:24:ee:4a:f3:81:69:95:22:fd:d8:f4:26:
f0:fc:ce:c7:4d:2a:c3:7c:53:46:4e:15:71:26:ba:15:a4:a3:
43:4b:29:b8:eb:0b:93:4f:23:7f:e7:3d:ba:94:06:3b:21:e4:
37:ce:f4:fd:f9:5f:06:8a:f4:b6:35:59:86:d1:8c:3d:b3:4b:
f7:6a:7c:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:38:25 2025 by rpki-client