Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/b2ddcb41-c324-3769-8f4f-d5befa4d5fa4.roa
File: b2ddcb41-c324-3769-8f4f-d5befa4d5fa4.roa (raw, json)
Hash identifier: aoL0SLnyk1lcjBKQpIgwKPDUvsK0F8U67t+y3UGyBUU=
Subject key identifier: 1B:BC:18:40:81:09:B6:62:A0:FA:A5:0F:97:C1:9D:0C:2E:71:40:C2
Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial: 010D0C9F4328584800AF8E3BD2B527F15AA48800
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/b2ddcb41-c324-3769-8f4f-d5befa4d5fa4.roa
Signing time: Tue 26 Nov 2024 02:00:26 +0000
ROA not before: Tue 26 Nov 2024 02:00:26 +0000
ROA not after: Mon 24 Feb 2025 02:00:26 +0000
asID: 33363
IP address blocks: 2605:a401:8021::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:00:af:8e:3b:d2:b5:27:f1:5a:a4:88:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Validity
Not Before: Nov 26 02:00:26 2024 GMT
Not After : Feb 24 02:00:26 2025 GMT
Subject: CN=bf56cf45-3692-4069-ad41-22454bfda286
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:90:14:06:a5:5e:39:ca:db:4a:fc:be:68:1a:
8f:55:ad:a7:16:71:c4:52:5b:31:b4:9e:00:bf:cd:
9c:7d:ac:6b:4f:16:8d:dd:19:a9:14:ea:a3:e5:ec:
63:f0:3b:9e:b4:9d:3f:2d:9a:9d:cf:aa:07:87:35:
cb:7f:82:b1:07:53:ca:ab:28:5b:3f:34:cf:03:4c:
8c:a6:c9:40:ca:a0:e5:86:31:8f:d9:95:9b:e4:f9:
7f:49:36:27:27:f9:b4:ba:11:a1:51:78:d7:c0:f7:
9d:1f:a0:38:a9:ab:5c:0b:d2:86:bc:52:e4:3c:49:
db:e9:19:b1:80:4a:3f:dc:c1:a0:d4:d7:e6:5f:a2:
c9:b8:e2:b1:32:33:30:1d:69:51:c2:2b:01:38:c1:
da:0c:29:1a:38:b1:b1:93:84:20:36:ec:b0:50:65:
3a:a4:d4:c0:a8:d1:39:33:e1:24:7e:1a:25:d1:9f:
e8:08:11:04:ab:a5:09:2b:1b:ac:0c:e2:34:9e:7f:
e4:17:2b:54:be:5d:07:27:8b:26:98:50:6e:fe:5b:
b8:dd:86:dd:15:38:87:87:3c:28:43:df:79:87:e0:
c5:72:d3:d7:de:e8:fe:59:1a:1d:f3:96:2a:6b:00:
56:b9:e7:0b:11:7e:ef:31:70:ed:79:36:e1:ef:79:
27:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:BC:18:40:81:09:B6:62:A0:FA:A5:0F:97:C1:9D:0C:2E:71:40:C2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/b2ddcb41-c324-3769-8f4f-d5befa4d5fa4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
X509v3 Authority Key Identifier:
keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
sbgp-ipAddrBlock: critical
IPv6:
2605:a401:8021::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
16:26:1c:ba:de:b5:b5:bb:44:56:cf:36:fc:6a:2f:5b:b0:e3:
b6:b6:d8:54:10:97:0b:cc:38:2a:6a:ad:89:c9:f1:e8:09:1f:
78:09:ba:92:b1:75:7a:29:67:04:1d:c7:79:8b:2f:b9:fd:c6:
a7:95:5e:fa:7c:13:f6:4a:78:0b:37:bd:7d:ed:3c:42:9e:3b:
4b:84:23:24:5a:83:85:51:04:24:1f:da:ba:5c:07:c6:e2:4e:
d1:73:5f:15:83:54:a2:86:6a:4a:18:13:2a:14:b8:1b:aa:ad:
96:ce:56:ed:b1:28:0d:1c:2d:bb:13:a9:50:f6:66:ef:fd:49:
c8:0f:55:58:1e:dd:35:76:09:ff:0d:fc:6e:6f:d3:a6:3f:39:
7f:85:ab:db:6e:06:7e:83:a1:3a:78:39:75:4c:22:bb:2e:37:
31:f9:47:a5:3a:39:54:e5:4f:44:ed:1a:09:0d:da:13:be:0c:
be:82:06:25:7e:b1:21:bf:bc:7a:fe:da:fe:59:9d:65:c5:97:
d4:78:22:c8:24:d1:ec:4c:da:21:14:ee:a7:21:9c:d0:4e:32:
59:aa:b4:ec:cb:4b:a6:c0:05:7b:35:ba:d6:95:75:9d:94:aa:
b8:f5:3a:b5:ba:e7:bd:11:28:6e:ec:8d:17:0b:4c:2b:7a:06:
9f:57:57:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:27:18 2025 by rpki-client