Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/4a57b41f-4c11-32a3-bef7-a56153a7cb1f.roa
File: 4a57b41f-4c11-32a3-bef7-a56153a7cb1f.roa (raw, json)
Hash identifier: cPJHN74gB2//yMZSyykD2rC9ln9MJkg4nPgJbrFpDls=
Subject key identifier: 94:4F:CA:AD:B1:BE:AB:19:90:30:BD:0B:3F:7A:FA:E9:5E:41:13:92
Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial: 010D0C9F4328584800AFC099229C282D48861CD8
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/4a57b41f-4c11-32a3-bef7-a56153a7cb1f.roa
Signing time: Tue 26 Nov 2024 02:00:26 +0000
ROA not before: Tue 26 Nov 2024 02:00:26 +0000
ROA not after: Mon 24 Feb 2025 02:00:26 +0000
asID: 33363
IP address blocks: 2605:a401:801f::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:00:af:c0:99:22:9c:28:2d:48:86:1c:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Validity
Not Before: Nov 26 02:00:26 2024 GMT
Not After : Feb 24 02:00:26 2025 GMT
Subject: CN=087956f8-04cc-4c0b-8555-43c6304f737b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:a3:3d:06:86:e8:f3:70:1a:4c:41:16:08:cf:
94:55:87:86:7a:cf:14:12:51:47:44:08:75:1f:d6:
15:5c:de:47:06:12:7b:3b:3a:73:2a:60:65:2a:3a:
95:75:88:c0:1f:c8:b5:1a:ab:40:e6:fd:cf:0f:80:
17:d2:27:bf:73:25:66:78:6f:ce:db:3e:48:e0:65:
87:67:54:d0:76:5e:3f:75:de:73:ac:ef:d2:26:5b:
35:aa:70:47:f7:f1:0e:24:02:09:d9:a0:45:df:24:
45:c3:d3:1a:1e:0c:07:45:44:de:66:8a:73:92:51:
bc:64:97:4c:da:f5:ca:c0:55:39:0c:e9:ff:33:23:
d0:1c:07:7b:5e:bc:21:65:0b:a2:a1:67:3a:2a:06:
ab:c6:fb:5e:fa:4e:1a:91:51:ec:d4:9e:53:ab:5b:
f3:05:ae:d9:99:cb:82:8b:94:a8:33:ba:05:59:e7:
68:53:16:01:60:90:da:2b:1d:6b:26:e4:3a:3f:67:
a0:74:f9:29:0c:b3:ff:0e:20:52:b3:ec:82:c3:55:
9b:12:6d:34:98:7a:da:7a:89:8f:9b:7d:e5:bc:51:
14:fc:fb:30:be:e3:8a:84:32:65:ca:d3:8e:ff:b1:
c5:1f:7a:a9:30:d8:11:96:17:17:53:e5:ec:12:db:
82:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:4F:CA:AD:B1:BE:AB:19:90:30:BD:0B:3F:7A:FA:E9:5E:41:13:92
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/4a57b41f-4c11-32a3-bef7-a56153a7cb1f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
X509v3 Authority Key Identifier:
keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
sbgp-ipAddrBlock: critical
IPv6:
2605:a401:801f::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3a:1e:79:8f:52:bd:68:5e:ef:01:92:6e:fe:da:d3:e5:33:31:
1c:d3:63:f6:bf:3a:14:c2:88:35:32:c1:78:ba:c2:4a:61:80:
e7:03:9a:a3:b9:de:19:43:78:40:06:75:60:e3:d4:fa:5b:7c:
c9:a3:a9:f6:1d:2e:99:05:c2:ab:3c:e1:4e:17:44:b4:6e:10:
66:1d:6e:22:4b:29:dd:cb:7d:e3:10:14:b9:cc:f1:b2:ed:3d:
f0:eb:eb:cc:a1:4a:b4:2c:bd:85:f1:cc:b6:f6:3a:89:f6:7c:
56:fa:81:e8:92:9d:8b:62:c0:c9:59:30:da:bc:53:68:2e:c7:
d0:b0:c3:28:99:ae:ed:8b:b9:8d:3a:b8:7c:c8:36:7d:ee:1b:
75:72:97:50:7a:ce:59:4f:26:e1:48:e0:11:e3:fb:74:de:55:
f2:ac:80:74:08:6a:6d:cb:8c:bd:0a:b9:a2:be:07:cd:01:a0:
eb:9f:62:0e:1b:5a:5c:66:53:67:24:10:a6:4c:43:44:d4:4d:
ca:18:9f:76:80:c8:fc:0e:7b:10:ee:cd:cb:1a:c8:0e:f4:1e:
72:40:81:e8:b2:7e:2d:3f:3f:b6:9a:cc:92:aa:c9:b4:da:70:
3b:66:0f:a9:91:11:24:be:be:a4:38:fb:0f:38:46:25:66:e3:
da:f8:b5:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:26:16 2025 by rpki-client