Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d9f5bc99-bdca-3ef8-b680-45017ffe62a4.roa
File: d9f5bc99-bdca-3ef8-b680-45017ffe62a4.roa (raw, json)
Hash identifier: n5N6uDR/ln4Z6wM0hmHp9DLxkw1QBVBBx/hpzuMn+gs=
Subject key identifier: 58:B1:EF:29:B1:44:CA:17:9E:A3:08:31:BA:01:CB:45:31:94:C0:AC
Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial: 010D0C9F4328584800AFAC6F42D759B9CD6CF700
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d9f5bc99-bdca-3ef8-b680-45017ffe62a4.roa
Signing time: Tue 26 Nov 2024 02:00:26 +0000
ROA not before: Tue 26 Nov 2024 02:00:26 +0000
ROA not after: Mon 24 Feb 2025 02:00:26 +0000
asID: 11955
IP address blocks: 2603:90bd::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:00:af:ac:6f:42:d7:59:b9:cd:6c:f7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Validity
Not Before: Nov 26 02:00:26 2024 GMT
Not After : Feb 24 02:00:26 2025 GMT
Subject: CN=e0de40c1-6878-47f3-b623-4ba11bbfc3cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ba:d4:c0:d4:0d:1e:73:81:a8:25:37:1d:4f:
ff:f6:e6:ce:33:11:4d:bd:b2:6b:05:21:9c:b0:81:
76:4e:84:4d:c5:59:58:11:1d:08:8d:2a:0b:e1:7d:
62:2f:6a:e8:54:79:2a:c1:21:dd:35:69:20:6e:2e:
44:8c:d3:28:5d:c2:13:d8:a0:19:40:da:6b:5f:c9:
e5:79:e3:c3:ff:3d:fc:67:e1:f7:ba:b0:7d:89:8e:
bf:a9:40:6d:c4:ac:e9:13:0a:94:27:b3:62:ea:43:
6d:28:bb:ac:7b:d8:ab:6e:b5:89:a6:b1:ab:c7:0f:
65:6c:1c:aa:a9:20:a3:e5:31:f1:c0:3d:e2:3a:96:
0f:75:2e:ba:ee:f4:02:2b:7e:ac:61:0d:5d:13:ae:
e3:be:5f:6e:d7:29:db:e6:17:ad:e9:b1:14:86:82:
c5:8a:e5:c2:2c:01:f7:13:72:eb:82:79:1e:81:9e:
77:9a:0b:5e:e8:c6:08:32:15:9c:9f:69:5f:04:41:
42:1b:d5:04:44:81:62:f0:a5:a6:e9:b4:62:ab:94:
13:be:c7:69:e7:be:b2:9b:56:8c:fd:04:ca:77:94:
05:d7:18:26:2c:b1:69:1b:d5:86:31:55:37:9e:1d:
75:60:69:75:44:a6:cc:cb:5f:7b:a4:98:72:f6:d6:
a5:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:B1:EF:29:B1:44:CA:17:9E:A3:08:31:BA:01:CB:45:31:94:C0:AC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d9f5bc99-bdca-3ef8-b680-45017ffe62a4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
X509v3 Authority Key Identifier:
keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
sbgp-ipAddrBlock: critical
IPv6:
2603:90bd::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
31:5e:ba:95:db:43:2f:97:e9:00:23:e8:23:a3:ae:dd:65:1a:
dc:13:c6:a2:85:50:98:08:d9:55:c1:51:10:5a:52:3f:88:c3:
54:dc:c1:6c:5e:e5:69:f6:eb:e8:05:97:eb:83:9a:b0:76:4e:
98:d5:db:ba:75:08:cd:21:d3:64:b2:6f:23:b0:b0:80:3b:c2:
9a:5a:fc:57:87:fc:09:4f:1c:48:03:10:c1:99:2f:0c:dc:67:
13:a0:7f:60:21:63:71:5c:31:e5:28:86:49:42:1a:46:50:34:
9d:75:a7:11:0d:22:30:f0:7f:a8:3e:a7:eb:fc:9f:c9:3d:b4:
df:42:e0:b3:b7:5d:80:7e:7f:a4:33:cd:fd:4e:fc:61:30:55:
63:6a:51:c5:29:0a:dd:6e:c8:ec:b4:77:60:cc:42:58:f7:7a:
e7:8b:4f:d7:f0:63:6a:7f:da:5b:e8:ee:3b:46:4e:c5:4d:b2:
dc:a8:09:52:0a:28:79:b5:3b:9d:17:12:ea:97:13:79:e7:0c:
a0:a7:e7:ec:0b:d7:67:85:4b:e0:4e:ad:ce:a0:74:93:fb:21:
db:6f:31:2a:5a:d4:9f:6f:9b:06:2d:9a:3c:27:a0:00:00:55:
10:26:a9:b4:2d:ce:e2:d5:86:ab:4e:87:b2:e7:89:d9:3b:fa:
ac:94:37:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:32:24 2025 by rpki-client