Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/bd8e9e2b-1f34-3a77-a74f-47d6def27f60.roa
File: bd8e9e2b-1f34-3a77-a74f-47d6def27f60.roa (raw, json)
Hash identifier: 4g+X23s75Q8gEPpQm+sfNuIvYKJ5kGPrS9LfOOZlzQM=
Subject key identifier: 39:02:86:D5:56:82:7A:C3:AB:A9:8A:0A:01:B6:80:2C:D3:53:05:68
Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial: 010D0C9F4328584800AFC10B899C6754BDBE33C0
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/bd8e9e2b-1f34-3a77-a74f-47d6def27f60.roa
Signing time: Tue 26 Nov 2024 02:00:26 +0000
ROA not before: Tue 26 Nov 2024 02:00:26 +0000
ROA not after: Mon 24 Feb 2025 02:00:26 +0000
asID: 33363
IP address blocks: 2605:a401:8067::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:00:af:c1:0b:89:9c:67:54:bd:be:33:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Validity
Not Before: Nov 26 02:00:26 2024 GMT
Not After : Feb 24 02:00:26 2025 GMT
Subject: CN=4433b7d3-9472-41f0-a81f-376e3315a294
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:49:09:fd:b5:85:34:49:99:e1:80:f9:ba:df:
a3:ff:b1:99:ba:7e:6d:54:ba:b9:3c:3d:06:40:9f:
a5:70:10:79:d8:35:ad:10:df:8f:66:4c:ee:c0:38:
89:83:df:8e:6c:dd:18:ea:03:b3:be:1d:5f:a1:7a:
6a:00:61:07:96:52:60:44:41:80:cc:2d:96:96:c3:
4f:12:4d:ac:6a:7f:e1:72:0d:65:d3:77:c8:85:a6:
a1:d2:d1:b5:b5:fe:af:c2:0f:82:2d:ef:d5:f2:61:
f2:22:87:74:62:dc:a9:57:9d:84:4f:3a:19:95:ab:
e5:d3:04:0e:a2:3e:f7:fe:37:fc:7d:04:ee:09:06:
fb:00:99:aa:90:88:25:bf:13:40:26:ce:f8:ae:65:
8f:d0:8e:31:3e:a6:a1:18:17:fb:87:58:73:c4:3d:
49:72:68:c6:bb:96:48:98:09:0e:36:00:6d:e9:57:
ce:a9:fb:a3:bb:bc:ee:7d:d0:f1:99:4c:e8:b1:63:
20:a5:7a:8e:39:a8:51:ae:d4:8a:ee:02:ba:bb:a1:
dd:11:aa:4e:6c:c9:cb:0e:3d:0b:54:eb:79:fd:cc:
c5:0c:95:f6:43:86:0b:68:05:22:ac:5c:94:ca:0e:
ef:a9:5d:28:51:97:73:8e:27:a8:7e:ec:f6:73:c9:
46:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:02:86:D5:56:82:7A:C3:AB:A9:8A:0A:01:B6:80:2C:D3:53:05:68
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/bd8e9e2b-1f34-3a77-a74f-47d6def27f60.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
X509v3 Authority Key Identifier:
keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
sbgp-ipAddrBlock: critical
IPv6:
2605:a401:8067::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6a:81:60:33:64:c5:76:76:9b:53:f2:73:62:e3:82:ed:80:27:
70:8c:8e:51:6c:93:4f:1e:f0:04:9e:f1:27:8c:69:15:e5:d8:
40:0c:23:16:7e:4e:f6:28:24:23:a3:28:a5:55:05:7d:15:34:
1d:39:9a:f5:de:42:6b:3c:80:69:60:ce:e3:a8:b7:9c:cc:96:
eb:0a:36:4f:4b:c0:52:b2:a7:63:15:f9:7e:4d:6f:19:ef:1c:
a1:94:ec:93:c6:a4:0b:c9:89:d5:ee:43:0d:95:33:4c:fb:72:
e7:b3:01:be:5f:e2:27:ab:fe:0e:5b:35:fd:dc:4b:45:a0:1f:
58:56:1b:0f:d4:47:fa:ae:d1:f3:fe:55:13:2d:ae:52:1e:f6:
c1:22:7f:c6:64:43:62:0a:6a:50:a6:10:ba:07:23:5e:ef:83:
16:55:8f:ca:66:9d:4e:ac:41:63:b0:40:27:14:9d:29:3a:af:
6f:fb:04:c4:f6:52:34:b2:34:eb:f4:8e:1f:e5:0c:4b:13:4f:
61:f3:a9:94:a2:53:12:18:5a:96:4c:97:f0:00:c2:7e:16:bd:
97:79:c8:7a:41:7b:65:af:f9:93:23:11:d6:64:dd:1c:70:28:
06:8d:dc:e4:1c:5d:83:db:77:4b:c7:1e:23:12:5a:22:91:dc:
c3:6e:f4:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:27:59 2025 by rpki-client