Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/bac4515f-d3d1-3e27-8339-d055e249c5d6.roa
File: bac4515f-d3d1-3e27-8339-d055e249c5d6.roa (raw, json)
Hash identifier: sJ7wmmRMq26F77ZmczhQgvWuK7t7RLyLff+axvzsMHo=
Subject key identifier: D0:97:DD:0A:51:3C:1E:04:D1:5A:38:F5:B1:B4:AF:6F:59:0D:B5:BD
Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial: 010D0C9F4328584800AFC3891233DB0261F16880
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/bac4515f-d3d1-3e27-8339-d055e249c5d6.roa
Signing time: Tue 26 Nov 2024 02:00:26 +0000
ROA not before: Tue 26 Nov 2024 02:00:26 +0000
ROA not after: Mon 24 Feb 2025 02:00:26 +0000
asID: 33363
IP address blocks: 2605:a401:8b6a::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:00:af:c3:89:12:33:db:02:61:f1:68:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Validity
Not Before: Nov 26 02:00:26 2024 GMT
Not After : Feb 24 02:00:26 2025 GMT
Subject: CN=f74dd97f-562f-43c7-b7f1-df39251639c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e2:da:ef:9a:b1:14:86:5b:cc:de:8d:e7:02:
82:ca:73:a6:9c:13:40:bb:61:29:5a:64:36:51:34:
6e:4e:af:bd:02:f5:d9:ca:54:5a:8c:7a:d9:7f:8c:
8f:0d:06:bb:d7:d1:d2:20:70:56:ac:73:48:45:6a:
4a:57:58:0b:5d:1e:1d:46:a7:2c:0b:dc:d1:24:8d:
4c:ea:0a:b1:d0:a6:40:41:d0:fd:33:a7:96:44:00:
e8:fe:d4:73:80:40:57:0f:2a:68:c2:72:71:53:dd:
99:f0:65:e8:12:8b:50:10:56:b8:d0:7a:d9:db:98:
ed:25:98:e1:6b:2e:35:8d:96:6a:04:5b:04:90:53:
1c:ed:f8:59:79:45:fb:14:06:40:bd:a1:ce:d4:51:
53:4b:9d:09:ef:79:49:62:76:e1:87:6c:fe:91:42:
62:0e:f6:ad:46:34:4e:53:cb:01:44:1a:8e:de:90:
d6:c3:6a:0e:80:51:4f:48:23:a6:36:70:03:8e:74:
48:0d:66:58:02:23:df:ad:9b:e3:5b:79:94:d9:72:
c4:2a:96:f1:c6:51:fb:90:1a:ea:82:ba:3a:b0:0d:
1a:52:de:b6:ff:6f:27:61:9f:04:1a:a9:4d:f8:f2:
9e:06:d6:15:e5:63:99:0f:f7:a7:fd:cf:ea:96:23:
50:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:97:DD:0A:51:3C:1E:04:D1:5A:38:F5:B1:B4:AF:6F:59:0D:B5:BD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/bac4515f-d3d1-3e27-8339-d055e249c5d6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
X509v3 Authority Key Identifier:
keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
sbgp-ipAddrBlock: critical
IPv6:
2605:a401:8b6a::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
18:c0:c1:0f:3f:ba:50:55:0d:fc:68:19:c0:75:dc:eb:ea:d6:
ec:14:14:b7:7a:99:60:44:62:56:45:b6:33:b6:60:3d:ab:51:
ff:0e:9d:1c:1d:94:9a:66:b2:2d:90:ba:cf:5c:bd:19:3e:20:
25:24:cb:93:f5:e4:69:75:ec:59:96:72:5b:be:ba:91:0d:48:
35:d5:99:11:af:e9:2f:7b:e3:59:01:fa:95:f8:fa:67:8f:db:
d2:5d:e5:89:7e:10:5d:30:a6:94:3c:bb:b1:c7:19:c2:4e:4b:
9b:14:dd:ad:2e:c8:6c:08:90:96:f4:32:9d:4f:32:bc:47:ff:
7d:9b:b9:ff:1d:03:f7:1c:3a:ae:b9:bf:15:46:ce:45:7e:1d:
f8:a6:15:bc:05:df:54:e2:87:3b:26:3c:27:a6:bc:5b:59:09:
14:44:f1:3d:5b:47:0f:2c:28:bd:5d:8c:89:e1:03:75:13:63:
33:91:0c:f9:4f:fc:be:e9:a9:4b:2d:5a:1f:80:dc:94:b2:ba:
37:db:0f:ab:3c:2e:ca:46:1f:52:43:e9:32:36:ec:f7:fe:20:
c4:11:59:01:2f:ca:e7:cd:c6:aa:f4:df:35:b1:80:17:53:5f:
31:e9:21:e8:7f:37:49:63:fb:48:93:13:54:09:56:13:3b:70:
a7:3f:7f:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:27:33 2025 by rpki-client