Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/dad7bed1-72a8-309b-b17d-8debdac0b70a.roa
File: dad7bed1-72a8-309b-b17d-8debdac0b70a.roa (raw, json)
Hash identifier: anxeKj+kExGb/3hhIup0YLBxg3FcpcBWE3FSMd2ta88=
Subject key identifier: D5:21:0D:EC:C8:72:5E:BF:66:20:F7:10:B1:D9:9A:93:EA:BA:7B:79
Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial: 010D0C9F4328584800AF9795B9A3869317A27B00
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/dad7bed1-72a8-309b-b17d-8debdac0b70a.roa
Signing time: Tue 26 Nov 2024 02:00:26 +0000
ROA not before: Tue 26 Nov 2024 02:00:26 +0000
ROA not after: Mon 24 Feb 2025 02:00:26 +0000
asID: 33363
IP address blocks: 2605:a401:8118::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:00:af:97:95:b9:a3:86:93:17:a2:7b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Validity
Not Before: Nov 26 02:00:26 2024 GMT
Not After : Feb 24 02:00:26 2025 GMT
Subject: CN=9cf186c0-4307-4277-9712-a9481fd37b27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d6:8f:ec:89:55:f6:f8:26:7a:cb:a4:4c:43:
fd:83:1c:6d:f0:4c:29:8b:0a:25:64:3f:af:ed:d5:
43:1d:d2:3c:d7:d7:8d:10:15:b5:2a:3b:c4:b4:45:
2a:f7:4a:e2:80:0c:fe:8f:47:1d:01:ca:7d:f0:e0:
a9:90:fd:28:54:0d:f1:80:85:13:32:e2:b9:e4:c4:
4c:df:ea:70:12:fa:d0:0d:62:69:7c:e0:47:41:16:
6d:c2:6a:0b:8c:48:85:a7:30:75:69:04:57:b9:49:
ce:e0:e6:ba:1c:bd:ea:24:e7:0a:96:21:9d:6e:c1:
92:62:ab:66:71:71:1b:45:b8:1b:5b:61:53:26:44:
5f:d9:0c:b6:a5:59:8e:c3:8a:a4:b5:32:02:2e:63:
94:8a:95:9b:3c:04:10:00:ff:6a:5e:ba:d9:32:8c:
7e:20:71:30:af:37:e3:ba:f5:65:a3:bd:cc:8f:22:
9a:77:1f:9b:d5:14:56:ce:2b:2e:b3:80:93:00:d6:
22:73:08:e5:2f:2e:c2:c5:da:52:31:ac:ac:65:21:
5e:d9:54:15:51:28:15:0e:d7:ed:0d:c4:e3:07:0b:
c9:66:e9:02:8b:a0:37:67:14:72:24:64:fc:8a:b5:
84:b9:4b:4d:40:49:ff:f3:f8:8f:56:02:96:95:cf:
28:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:21:0D:EC:C8:72:5E:BF:66:20:F7:10:B1:D9:9A:93:EA:BA:7B:79
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/dad7bed1-72a8-309b-b17d-8debdac0b70a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
X509v3 Authority Key Identifier:
keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
sbgp-ipAddrBlock: critical
IPv6:
2605:a401:8118::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
24:59:28:80:c1:14:86:10:02:be:ef:a8:b6:43:eb:3b:ee:dc:
81:10:4a:56:f2:a3:a5:b3:c7:94:13:32:ed:4f:e9:12:a1:75:
53:12:42:da:98:76:78:de:28:19:e7:58:ed:b2:a3:b2:f2:4e:
e0:3a:c0:3a:d4:d5:2e:64:1a:3c:b0:c4:f1:f3:5c:87:8b:b5:
d8:eb:21:c5:c3:3b:b6:ab:c1:be:fb:fb:52:06:26:1b:7a:3d:
ab:91:e9:78:73:21:f1:57:9a:f9:b9:08:94:1e:52:1d:0f:f0:
cd:68:bf:30:16:55:e5:d6:eb:91:f4:ba:12:ff:0e:0d:95:11:
4b:27:17:6a:a2:7a:e9:0c:04:b8:dc:8c:02:93:3b:94:bf:d9:
e4:c0:26:f0:97:e2:9c:a4:11:57:e3:05:f6:c2:1a:13:10:c6:
18:42:fb:9e:03:0b:ac:4f:5d:59:f8:b1:26:ac:e3:89:1a:ff:
19:a6:00:30:38:ff:91:cd:89:ff:93:b6:5e:b3:e1:27:4f:6a:
60:c3:14:8b:a3:c1:7a:3b:df:33:f5:76:e3:50:65:5f:22:c2:
06:11:82:64:d7:ba:05:6c:04:1d:5a:ef:61:e4:db:05:ae:0c:
6e:d9:8f:72:04:19:45:c9:42:bb:db:fb:aa:91:c9:23:41:9d:
fa:1c:26:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:47:34 2025 by rpki-client