Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5df6ebd7-0ccd-4c06-80a0-45fd76077f54/2f5530ed-15f5-3da6-baf0-335815c4d026.roa
File: 2f5530ed-15f5-3da6-baf0-335815c4d026.roa (raw, json)
Hash identifier: xFreXqIHQWyTWrJVSyhwtm3JoqatF5XLJYG3lw3MED4=
Subject key identifier: A5:AE:96:71:D9:BC:0C:60:6D:FB:18:38:CF:AA:57:AA:98:D3:B5:1F
Certificate issuer: /CN=5df6ebd7-0ccd-4c06-80a0-45fd76077f54
Certificate serial: 010D0C9F432858484C102434C5B2A69D00B18480
Authority key identifier: F9:95:F2:99:32:98:E6:4A:40:C8:BC:48:CF:27:49:EC:AD:5E:FE:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5df6ebd7-0ccd-4c06-80a0-45fd76077f54.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5df6ebd7-0ccd-4c06-80a0-45fd76077f54/2f5530ed-15f5-3da6-baf0-335815c4d026.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 16552
IP address blocks: 2600:1800::/28 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:10:24:34:c5:b2:a6:9d:00:b1:84:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5df6ebd7-0ccd-4c06-80a0-45fd76077f54
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=4b668fc0-bce8-46c6-9328-1971b4e9283c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:89:d5:20:bd:a0:86:41:d1:0f:22:19:85:2e:
79:e3:8e:10:b3:92:7e:13:77:87:87:3b:7b:f0:d1:
41:ae:06:f8:93:b9:f5:f6:2b:87:eb:ee:1c:e3:d5:
bc:4e:af:a7:ec:a9:17:aa:2e:f9:a6:6d:a6:a8:c3:
44:e7:54:63:5a:8f:5d:3b:36:52:3a:d5:8f:3f:0b:
22:ed:49:22:ce:c6:b8:dd:55:16:1e:ee:16:90:bb:
66:d3:48:6d:68:c2:4a:92:75:c1:e0:c9:a2:d4:56:
8e:ad:06:89:a3:8e:3b:4f:e9:35:f6:2e:98:a1:83:
6a:b1:7d:22:d9:51:a9:02:03:3a:b1:3e:2e:c8:3f:
04:d4:2b:43:f6:91:f3:fe:da:23:d7:4f:3c:ec:5b:
47:c4:24:09:37:a3:4c:26:0a:40:15:12:6a:e4:c3:
fa:13:93:0d:21:11:bb:37:bc:70:30:02:f3:ab:de:
f5:47:bb:9e:18:cf:0f:0c:b0:72:f6:86:17:7c:ea:
db:aa:77:14:9c:a5:1f:b1:86:27:9e:a5:92:7c:90:
74:dc:5f:47:a0:91:b2:05:82:33:74:c5:1d:84:9f:
39:10:b4:ee:47:0a:56:12:97:d7:aa:46:aa:ea:9d:
6a:de:fc:cc:d8:ea:51:7f:e8:ad:61:83:c1:1b:ad:
59:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:AE:96:71:D9:BC:0C:60:6D:FB:18:38:CF:AA:57:AA:98:D3:B5:1F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5df6ebd7-0ccd-4c06-80a0-45fd76077f54/2f5530ed-15f5-3da6-baf0-335815c4d026.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5df6ebd7-0ccd-4c06-80a0-45fd76077f54/5df6ebd7-0ccd-4c06-80a0-45fd76077f54.crl
X509v3 Authority Key Identifier:
keyid:F9:95:F2:99:32:98:E6:4A:40:C8:BC:48:CF:27:49:EC:AD:5E:FE:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5df6ebd7-0ccd-4c06-80a0-45fd76077f54.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:1800::/28
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5f:19:f0:2d:76:1e:a2:3b:90:ce:0d:a5:57:1c:ce:55:b4:fc:
98:cd:c5:ed:ff:5f:f7:c6:9b:da:36:a1:cc:ac:84:09:c7:c2:
2a:c0:ae:48:88:82:3c:72:f0:a3:4d:b7:6e:74:3a:d2:bb:9a:
ca:f9:39:b3:1c:4d:93:a3:07:fe:4b:9d:5b:c1:25:be:26:b8:
c4:e6:01:b3:46:29:95:6e:73:f8:d8:20:87:5c:4e:f5:f4:6d:
35:e2:5f:0b:f4:f6:c6:de:d2:fd:c3:b3:82:bd:b7:84:8e:62:
ef:99:05:2a:c6:78:e8:d6:a1:da:74:d6:74:9f:43:6e:45:8f:
e2:90:af:6a:52:bd:ba:5a:83:95:96:2b:e8:aa:ac:7a:81:5d:
27:67:94:12:b1:8d:49:f3:c3:fd:07:9c:bf:06:8e:72:5d:6b:
9a:83:82:69:15:ec:ff:e4:ec:6f:29:ee:9e:a5:ea:4a:68:ab:
a6:45:e0:25:86:27:94:85:71:c3:37:2d:4e:95:1b:65:c9:3a:
9b:c3:d7:28:21:c8:a1:46:46:08:56:c9:ef:a3:de:4c:53:92:
40:b0:11:52:a3:54:83:54:e0:82:da:66:97:ac:e1:37:fa:60:
4f:7d:d3:9d:45:b1:95:0a:42:96:36:4b:54:f8:9a:71:9e:20:
5a:f7:44:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 01:10:20 2025 by rpki-client