Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/789769dc-64e2-373c-acc0-788fa6654d0e.roa
File: 789769dc-64e2-373c-acc0-788fa6654d0e.roa (raw, json)
Hash identifier: XOSA7ceCzYSP461U9fmq8bfSQrQFRxQZkBm4qNKEueo=
Subject key identifier: 52:4E:D4:82:46:3F:3F:CF:04:2D:E4:EF:B9:5F:A2:58:CD:98:4C:40
Certificate issuer: /CN=3c1b9e2d-457a-403f-9256-27f272ed993d
Certificate serial: 010D0C9F4328584817E2B652B9CC73F69AF7F1E0
Authority key identifier: EE:DF:25:D2:42:4C:99:1F:D5:04:B3:D0:D3:64:9E:B5:B5:6A:72:C3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/789769dc-64e2-373c-acc0-788fa6654d0e.roa
Signing time: Wed 04 Dec 2024 09:27:17 +0000
ROA not before: Wed 04 Dec 2024 09:27:17 +0000
ROA not after: Tue 04 Mar 2025 09:27:17 +0000
asID: 14618
IP address blocks: 2620:1f7:c022::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:17:e2:b6:52:b9:cc:73:f6:9a:f7:f1:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c1b9e2d-457a-403f-9256-27f272ed993d
Validity
Not Before: Dec 4 09:27:17 2024 GMT
Not After : Mar 4 09:27:17 2025 GMT
Subject: CN=49c7aacd-56af-4c38-af28-6b20f01e9b8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:70:c8:a3:04:ff:2e:03:71:e7:48:fb:fc:62:
4d:76:24:ee:66:83:ab:e8:1e:58:a9:e0:d5:43:df:
62:fe:72:e0:52:21:62:70:d8:e4:4e:62:cd:1f:41:
93:fa:13:3f:75:69:a2:d3:ad:0a:5c:5b:05:9a:74:
d1:4c:14:81:b3:21:ba:7e:d3:45:07:85:6e:2a:91:
91:33:30:91:ae:56:50:8d:9e:1c:d7:e6:48:39:ea:
d9:cc:38:f0:9d:37:be:6e:91:d1:b2:31:76:4f:99:
7a:fb:d7:19:96:71:c6:ba:89:a6:35:bf:1c:1f:fb:
c7:1a:76:3d:a5:72:fa:78:98:06:bd:01:10:68:3d:
58:26:b5:2a:60:e0:ae:16:6b:1d:9c:f1:a7:42:73:
8d:9b:2e:67:7b:71:8c:ec:05:07:7c:7f:fe:2f:5b:
fa:02:bb:c0:3e:0f:2c:53:10:57:4c:be:2b:43:e1:
4d:cf:5b:9d:83:44:51:a4:b7:96:04:1c:dd:3a:56:
0c:4a:6d:36:45:bb:36:d2:a7:03:71:5c:99:d7:29:
7d:50:46:42:fb:f1:a8:3d:28:81:47:01:95:fb:78:
38:01:53:dd:63:17:9e:fe:37:8c:5b:c2:b3:98:bb:
0d:23:87:93:ed:1c:1c:8e:fe:be:c1:8b:cb:f1:b5:
87:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:4E:D4:82:46:3F:3F:CF:04:2D:E4:EF:B9:5F:A2:58:CD:98:4C:40
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/789769dc-64e2-373c-acc0-788fa6654d0e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/3c1b9e2d-457a-403f-9256-27f272ed993d.crl
X509v3 Authority Key Identifier:
keyid:EE:DF:25:D2:42:4C:99:1F:D5:04:B3:D0:D3:64:9E:B5:B5:6A:72:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:1f7:c022::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3c:44:e0:1b:99:db:f4:55:d5:a6:aa:fb:96:ba:c5:bf:9b:b1:
17:60:af:54:6f:3c:2d:23:0f:dd:81:84:f6:f9:86:d4:0a:bc:
67:b4:e6:28:71:9d:7c:a2:f1:14:b1:ec:f8:07:0a:ce:a2:38:
b3:52:20:29:90:03:9e:eb:27:3b:5f:b3:9b:09:73:2b:19:2e:
af:14:ac:df:1e:6c:d8:8e:d0:d5:51:71:d0:14:41:4d:a2:64:
5b:7f:dd:e5:b0:33:00:c8:90:9d:fb:01:79:41:64:f9:6a:93:
15:a3:ec:6f:07:43:60:2c:9e:a8:66:c0:cd:4b:86:18:f5:a4:
64:9e:86:e9:fd:31:16:63:70:60:73:0b:2d:4e:ef:23:4f:85:
7e:a0:32:05:3a:fa:49:aa:26:57:fc:24:78:84:9b:8e:99:d9:
a2:b4:d8:30:e3:4a:d9:f4:14:2e:df:e1:86:e1:7f:52:9e:4c:
04:6f:32:07:e2:27:16:ca:92:ea:76:28:8e:d9:46:5c:f8:a1:
cb:bd:2d:d3:c8:9e:fc:68:b1:ba:ca:24:4e:d9:ca:20:44:ea:
2b:d4:79:8a:f3:8a:e8:c5:88:d6:3f:a9:bd:c8:ab:74:15:1d:
7b:d2:94:85:7b:78:fd:b4:16:36:84:51:0b:2a:6d:f2:72:2e:
5d:13:c8:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:27:18 2025 by rpki-client