Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/28d1b2e9-680c-3cf8-b3f6-6d023c9c9f20.roa
File: 28d1b2e9-680c-3cf8-b3f6-6d023c9c9f20.roa (raw, json)
Hash identifier: cRT9+0XsM/qn4bebiVfz5tZdmqqXnyA/JDjmH5m4BWY=
Subject key identifier: 89:67:93:7C:03:41:18:B3:EB:39:97:CD:64:2E:5D:B0:85:9D:57:FD
Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial: 010D0C9F4328584800AF91849B38DEEC1C555320
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/28d1b2e9-680c-3cf8-b3f6-6d023c9c9f20.roa
Signing time: Tue 26 Nov 2024 02:00:26 +0000
ROA not before: Tue 26 Nov 2024 02:00:26 +0000
ROA not after: Mon 24 Feb 2025 02:00:26 +0000
asID: 33363
IP address blocks: 2605:a401:814b::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:00:af:91:84:9b:38:de:ec:1c:55:53:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Validity
Not Before: Nov 26 02:00:26 2024 GMT
Not After : Feb 24 02:00:26 2025 GMT
Subject: CN=4f13e306-57dc-4825-80e6-a79a890d29f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:aa:99:16:6f:be:b9:aa:f4:2f:67:f7:b1:5b:
7a:cd:86:20:47:60:67:6d:6c:9e:48:2d:1a:8b:01:
a7:25:a5:fb:58:dd:11:a5:eb:9b:ed:76:6b:38:ad:
2b:74:c1:f9:ca:94:59:8f:37:a2:38:ce:10:90:60:
fb:f5:ae:e4:97:39:c6:a5:bd:72:c5:15:66:15:a5:
fc:af:07:e0:ef:1a:cc:2a:64:5a:15:a2:b0:c7:b7:
0c:12:3e:81:8d:d9:eb:15:4f:a4:7a:0e:af:5d:c1:
44:23:55:63:0b:1f:6b:73:b9:25:b3:6e:9d:99:bf:
4e:a3:d0:06:5e:c5:3d:9d:66:7e:a1:d1:dd:28:42:
fa:ac:f8:bb:96:f8:b7:87:01:5f:0f:ed:9d:bb:44:
fb:67:97:ef:e8:f8:c6:5b:ff:16:f6:a8:e1:7b:4f:
22:24:dc:9d:15:4a:35:c7:e6:70:8b:8b:2a:c4:aa:
22:c7:b1:4c:9e:1b:98:bf:22:f6:ac:92:34:b8:67:
08:c4:1c:fd:4e:92:3e:61:09:fe:0c:5e:95:31:97:
bd:3b:5b:d0:da:15:77:fc:c4:ea:7f:45:95:f9:59:
e4:35:af:40:4a:ea:44:9b:db:31:bb:32:3d:67:ec:
6f:c3:0f:b5:45:65:5e:44:a2:8a:1e:3f:a7:8a:ca:
bc:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:67:93:7C:03:41:18:B3:EB:39:97:CD:64:2E:5D:B0:85:9D:57:FD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/28d1b2e9-680c-3cf8-b3f6-6d023c9c9f20.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
X509v3 Authority Key Identifier:
keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
sbgp-ipAddrBlock: critical
IPv6:
2605:a401:814b::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
28:79:61:81:fd:79:f5:d0:9c:48:8c:e4:e1:26:a5:49:84:5d:
72:61:1d:7d:88:5e:b4:84:59:a9:2f:e8:6a:49:81:f8:7e:4f:
21:db:c9:23:37:3f:b1:ba:c3:1b:4d:3c:ea:1e:f3:38:9d:b1:
bb:cc:85:59:59:df:b0:aa:8c:aa:2d:2f:63:74:f6:d6:e4:00:
a9:f4:98:f7:df:b4:62:6f:47:9d:2e:e6:5d:e1:90:64:7e:c0:
18:a2:7d:96:6e:be:1b:57:3f:7f:07:04:cf:b6:dd:54:b4:df:
3d:73:50:1f:12:47:94:46:3e:8f:63:55:d2:6f:02:44:4c:a6:
25:bf:39:d3:68:f4:90:be:e3:ef:22:8a:92:33:d0:19:26:05:
fe:79:b8:0c:1c:17:ab:07:23:c8:ec:82:f0:ff:ed:c2:6a:e4:
0a:e2:0c:55:d9:d2:6b:ca:4f:69:d2:64:c5:78:da:01:69:12:
9e:df:79:07:8e:bd:24:19:de:70:69:45:7a:a6:8e:7e:4f:f0:
65:89:98:a2:da:d4:73:0c:b9:42:1a:bb:78:f9:2d:06:32:53:
bb:93:1c:41:41:b2:fc:38:04:1c:fd:38:6d:b4:7b:75:5f:ac:
a9:33:ed:62:c4:7c:d7:23:ed:6f:6f:9d:f4:b2:b1:2e:18:6e:
41:cc:d9:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:25:55 2025 by rpki-client