Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/ca18b2c5-0b89-3a22-a1b2-50b0e5d62d86.roa
File: ca18b2c5-0b89-3a22-a1b2-50b0e5d62d86.roa (raw, json)
Hash identifier: zR0pxataoEQBmIc21cZbPgPbp1JBeYD8Kkv8h6tjpJI=
Subject key identifier: 3B:95:DA:99:55:90:39:52:E2:34:AB:84:7A:DD:57:A1:09:5B:66:4D
Certificate issuer: /CN=2a48c74e-ed9e-44e7-bbf5-76f473a21d74
Certificate serial: 010D0C9F4328584839EAC7E852329D628458D840
Authority key identifier: 5C:5A:EC:29:32:45:08:07:B2:B6:98:82:EF:E0:88:D5:65:E5:3C:B7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/ca18b2c5-0b89-3a22-a1b2-50b0e5d62d86.roa
Signing time: Mon 16 Dec 2024 14:00:51 +0000
ROA not before: Mon 16 Dec 2024 14:00:51 +0000
ROA not after: Sun 16 Mar 2025 13:00:51 +0000
asID: 40676
IP address blocks: 2606:1880::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:39:ea:c7:e8:52:32:9d:62:84:58:d8:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a48c74e-ed9e-44e7-bbf5-76f473a21d74
Validity
Not Before: Dec 16 14:00:51 2024 GMT
Not After : Mar 16 13:00:51 2025 GMT
Subject: CN=dd9483ef-ae1f-4a61-981c-b88c56684e58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:f9:03:e1:dc:0e:8f:b5:9d:a0:52:17:9e:5e:
93:0a:c4:58:bc:fd:9c:2b:d4:6d:11:86:98:bc:b0:
3c:35:03:45:a2:d4:7f:ab:55:63:9b:9e:ad:43:7a:
8f:e2:95:33:0f:80:b6:52:ea:fc:62:31:d8:7b:40:
09:86:7b:c9:e7:0c:8e:a0:3e:38:b6:60:58:d8:98:
ae:07:86:df:56:8a:b6:35:d0:50:bc:7b:a7:8a:b1:
6a:c7:f2:ee:e7:0f:3e:8c:07:9d:90:64:ff:d7:3a:
fa:a5:53:a1:b7:67:b6:28:63:8e:1e:7a:3e:0e:eb:
b1:a6:79:5b:0e:f4:60:f2:9d:ca:7f:0c:1f:54:2d:
a0:0a:cc:2d:e0:48:61:40:e3:7c:a2:54:ef:56:33:
1f:66:ad:a6:6c:50:67:18:85:2b:f1:19:64:ba:fc:
1f:e2:9b:6c:fd:57:ce:34:a1:a0:5b:66:d6:da:da:
40:62:b1:e9:b2:36:43:10:2c:15:52:74:e4:60:a5:
7a:a8:d4:dd:db:65:eb:c0:30:00:f5:86:a5:cf:d2:
69:0f:83:f5:32:81:c5:7b:66:d9:39:84:08:95:75:
11:7e:c7:49:ef:6b:66:40:6b:46:68:b7:e0:b0:16:
dd:7f:51:dd:7c:7d:24:ad:d7:5a:69:a5:44:df:45:
e0:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:95:DA:99:55:90:39:52:E2:34:AB:84:7A:DD:57:A1:09:5B:66:4D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/ca18b2c5-0b89-3a22-a1b2-50b0e5d62d86.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/2a48c74e-ed9e-44e7-bbf5-76f473a21d74.crl
X509v3 Authority Key Identifier:
keyid:5C:5A:EC:29:32:45:08:07:B2:B6:98:82:EF:E0:88:D5:65:E5:3C:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74.cer
sbgp-ipAddrBlock: critical
IPv6:
2606:1880::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:83:30:cc:2e:71:62:0f:dd:b4:ee:12:0d:5d:a7:45:36:13:
68:38:15:64:fc:09:65:2e:39:56:59:aa:0b:f7:bc:64:5b:52:
70:d1:3a:50:c0:69:1b:9d:17:d4:ea:cf:85:e9:02:8e:c3:6e:
93:31:b5:4b:96:da:0b:92:90:90:02:29:eb:c1:83:9c:a0:cc:
d8:71:60:b8:cb:5f:05:e5:d6:45:f0:d4:86:4b:b7:dd:94:66:
3c:97:71:42:82:50:c6:59:0b:c3:9c:a4:37:5b:ad:a6:94:4f:
c9:46:84:80:3a:1d:d0:15:78:dc:54:4b:5a:65:c1:ec:2d:f9:
fb:83:09:c2:51:68:33:a2:b4:46:07:98:f6:cd:02:54:f8:4e:
08:cb:90:38:f8:20:b5:07:11:88:bb:50:24:8b:ff:0e:a3:e6:
b7:c1:80:d8:e1:ea:32:34:3d:2d:83:9b:79:97:ee:ad:ba:10:
ec:44:fa:e9:f8:a7:e9:25:cb:54:d4:49:ad:29:e6:b5:40:55:
08:22:cd:73:4f:ec:d5:52:7b:c9:ac:68:b1:39:b1:25:3a:73:
b3:a6:82:5f:20:ee:b7:ab:10:60:a3:23:d3:81:80:fe:0e:dd:
5b:4c:22:9c:34:56:6e:a6:64:a4:24:d8:93:17:15:cd:c6:23:
71:ac:8f:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 03:43:44 2025 by rpki-client