Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/db63c8c5-e612-3bec-8103-b958e2d7c581.roa
File: db63c8c5-e612-3bec-8103-b958e2d7c581.roa (raw, json)
Hash identifier: 8Zh+0xRqeKFQMH2ohXDLVV/ilW43qI1bYMO+qOLuzmU=
Subject key identifier: 04:91:51:9F:D7:26:4E:D9:B6:74:F2:C6:94:92:98:C7:E2:E7:A6:B3
Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial: 010D0C9F4328584800AF9A0B1DDE5367D3A5D840
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/db63c8c5-e612-3bec-8103-b958e2d7c581.roa
Signing time: Tue 26 Nov 2024 02:00:26 +0000
ROA not before: Tue 26 Nov 2024 02:00:26 +0000
ROA not after: Mon 24 Feb 2025 02:00:26 +0000
asID: 33363
IP address blocks: 2605:a401:860c::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:00:af:9a:0b:1d:de:53:67:d3:a5:d8:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Validity
Not Before: Nov 26 02:00:26 2024 GMT
Not After : Feb 24 02:00:26 2025 GMT
Subject: CN=7e91828b-d123-4b19-bedc-6e805c0798cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:a7:6d:41:84:6b:32:86:61:ae:a8:c6:12:1b:
52:a8:2b:7d:e4:94:b0:e1:1d:b7:3e:80:8d:e6:1e:
1b:ae:60:3e:db:f3:90:82:12:2a:21:27:93:92:8c:
c4:f9:3d:9c:78:3b:6b:f6:5d:35:89:3d:25:e1:0c:
64:d3:15:7f:18:a3:be:24:21:b1:70:10:25:15:aa:
69:2e:8d:1c:18:6c:d2:c0:f4:bc:dd:1d:2c:e9:90:
1f:1a:9d:d0:43:83:e6:fb:5d:f7:c1:34:5b:1f:58:
c7:dc:96:fc:d1:36:e3:80:48:dd:47:1e:69:70:33:
67:89:21:58:e7:db:06:25:58:04:b2:14:43:26:c3:
e8:17:ab:20:aa:01:16:6e:8f:e3:55:c0:f5:d5:ce:
46:73:b8:c3:58:f1:42:53:89:a5:cd:c9:76:fe:5a:
4b:36:2f:71:d7:37:22:f5:49:5a:0f:35:03:f5:a5:
e9:c9:e2:b4:01:e6:97:5f:77:a9:6e:53:c4:14:2f:
af:80:60:b1:7e:93:47:f0:7a:2c:7b:9c:5a:98:01:
8a:0b:a8:0e:35:92:f6:81:c0:e2:d7:5a:f4:04:df:
48:ed:2e:ce:bb:df:01:27:7d:5a:2c:38:82:03:f0:
16:97:41:cb:5b:f7:de:48:06:7e:05:6f:19:57:8c:
cc:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:91:51:9F:D7:26:4E:D9:B6:74:F2:C6:94:92:98:C7:E2:E7:A6:B3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/db63c8c5-e612-3bec-8103-b958e2d7c581.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
X509v3 Authority Key Identifier:
keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
sbgp-ipAddrBlock: critical
IPv6:
2605:a401:860c::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
71:46:69:1b:19:90:9f:12:ec:ed:f6:93:b5:c3:c8:94:a5:f7:
54:98:4a:06:a8:8f:e9:5d:2d:75:43:6f:f9:01:51:70:08:0f:
e2:2a:ca:ce:00:c2:bb:15:47:dd:5e:75:de:3a:67:66:34:d6:
e1:3f:e1:0f:b1:dc:e2:b2:8e:80:ec:58:17:c2:7c:b1:bd:74:
74:15:d4:67:02:1f:33:0d:12:b3:32:67:00:82:56:8d:48:7c:
c2:14:35:c0:0e:f0:02:30:91:93:25:d0:a6:7d:ab:ab:7c:c9:
45:f3:2d:15:66:26:1e:17:65:53:cb:1e:49:62:ae:d3:9a:4c:
e8:7f:fe:e6:5e:44:d8:33:ed:06:1c:4d:2a:94:c3:a1:09:3c:
ee:60:5c:4d:1b:b8:4e:ab:18:da:ce:2d:0a:56:c3:4e:72:1d:
4c:e9:b8:2f:bb:b0:40:12:6f:d0:45:17:cd:aa:89:7a:68:5f:
7a:49:d0:7c:b9:19:6c:53:12:29:72:2b:fd:3e:0a:06:83:26:
53:90:d0:44:de:b6:38:7e:e3:18:9d:55:5e:39:9a:47:b0:4b:
62:fe:58:92:ee:0c:4d:88:49:97:d1:6e:3d:b0:dc:17:d9:13:
77:9e:4f:21:0a:0b:5b:a7:96:36:c9:c1:19:61:ee:0d:50:48:
15:c3:40:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:27:14 2025 by rpki-client