Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a1ef3634-7b49-4b97-8787-680d6196e6e4/b9a26cf1-e2a7-305d-8ab8-71e04b4440c1.roa
File: b9a26cf1-e2a7-305d-8ab8-71e04b4440c1.roa (raw, json)
Hash identifier: yIGuonfMfxR4XB+01nG5UVoQnT8+1s/puwjWK+jqTks=
Subject key identifier: E8:F4:67:E9:F4:74:07:FA:D1:33:EA:D5:F1:E3:20:5A:85:A4:58:F1
Certificate issuer: /CN=a1ef3634-7b49-4b97-8787-680d6196e6e4
Certificate serial: 010D0C9F43285848345569C0AE1CE3A30B8FCE00
Authority key identifier: EB:86:31:11:A8:0E:0A:AD:F7:41:A5:FC:82:68:DA:14:80:97:BE:BC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a1ef3634-7b49-4b97-8787-680d6196e6e4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a1ef3634-7b49-4b97-8787-680d6196e6e4/b9a26cf1-e2a7-305d-8ab8-71e04b4440c1.roa
Signing time: Sat 14 Dec 2024 14:00:52 +0000
ROA not before: Sat 14 Dec 2024 14:00:52 +0000
ROA not after: Fri 14 Mar 2025 13:00:52 +0000
asID: 53507
IP address blocks: 2604:56c0::/32 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:34:55:69:c0:ae:1c:e3:a3:0b:8f:ce:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1ef3634-7b49-4b97-8787-680d6196e6e4
Validity
Not Before: Dec 14 14:00:52 2024 GMT
Not After : Mar 14 13:00:52 2025 GMT
Subject: CN=706d8a09-6156-4444-993a-597755492534
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:f2:dc:d1:60:07:1e:2a:a5:90:49:19:89:de:
cf:31:6c:0a:4a:f6:7c:4e:2d:f0:50:86:0f:60:d6:
10:52:85:0b:98:6e:30:e5:87:5d:33:9e:0f:5e:e4:
9b:79:40:fe:77:86:72:69:fd:35:de:6f:0f:38:b6:
99:c5:97:90:6e:66:69:18:ec:af:2c:9c:c1:44:95:
7b:f7:c4:38:25:8e:ff:8c:ca:00:85:11:84:7f:96:
99:ca:f6:d0:4e:48:cd:56:40:c0:f5:d5:63:62:cf:
fc:0e:4e:aa:92:e3:04:19:39:0c:ea:45:62:02:8e:
d3:14:84:07:7d:36:67:e3:99:58:37:6b:df:e7:1d:
72:c1:a3:a9:74:e0:c5:fd:1f:66:bf:5a:d9:27:87:
95:6a:e3:7c:8c:6d:dc:06:bc:f5:f9:50:b5:05:c4:
e9:f7:e1:b4:c7:b3:2d:bf:22:56:85:85:de:47:ef:
a8:a9:7e:36:f3:ef:c2:34:a5:4e:35:32:c7:ed:00:
ec:b9:7d:0f:ac:e3:d9:f0:da:da:da:44:50:3e:23:
53:e6:50:b8:89:48:1a:d4:98:a3:17:0a:b9:36:4d:
60:aa:62:6b:c6:39:c4:05:f4:1a:7e:89:64:b5:ce:
56:22:1f:99:7c:c0:82:60:42:2f:03:20:52:f3:2b:
2c:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:F4:67:E9:F4:74:07:FA:D1:33:EA:D5:F1:E3:20:5A:85:A4:58:F1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a1ef3634-7b49-4b97-8787-680d6196e6e4/b9a26cf1-e2a7-305d-8ab8-71e04b4440c1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a1ef3634-7b49-4b97-8787-680d6196e6e4/a1ef3634-7b49-4b97-8787-680d6196e6e4.crl
X509v3 Authority Key Identifier:
keyid:EB:86:31:11:A8:0E:0A:AD:F7:41:A5:FC:82:68:DA:14:80:97:BE:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a1ef3634-7b49-4b97-8787-680d6196e6e4.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:56c0::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a3:90:66:f6:9c:ae:d1:0c:3e:7d:70:03:6f:c8:d3:6c:1b:b0:
11:9c:a1:82:16:06:41:0c:56:23:1a:ac:58:27:87:8d:1f:d7:
c2:0e:ac:a3:7e:8e:eb:99:9f:d9:8a:de:54:6a:ce:1a:ca:28:
6b:25:ab:51:fe:ee:96:6b:e3:8c:58:dd:ee:7d:3d:0d:d2:65:
da:90:7c:46:27:ce:af:7c:08:6f:f3:2f:4c:21:38:09:56:f0:
72:42:b8:6f:16:3a:64:1f:ae:a6:0a:42:01:c8:82:9f:2e:47:
0e:b8:42:8e:8f:f2:cd:ff:47:a7:37:ca:3a:0a:40:34:23:18:
82:d4:7f:e3:a2:80:75:db:74:d8:b4:62:81:76:32:85:a6:f3:
5f:a9:28:37:54:82:63:b7:5e:a3:7f:15:56:f2:85:45:b2:e4:
66:08:a9:78:2e:02:e0:35:f6:e5:78:01:c2:e1:3b:f1:50:f6:
fa:5c:a2:56:1b:fb:47:5e:ed:13:a4:46:f7:10:73:fb:e5:3a:
01:65:97:2a:57:00:83:90:78:7b:13:05:8b:55:4e:3c:ad:6a:
d3:a8:2a:cc:44:0c:dc:07:16:97:5c:3b:12:6e:1e:7e:dd:c1:
69:dd:3a:4a:83:be:f3:fa:97:47:12:12:99:9c:8c:0d:e9:2f:
87:15:2d:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:33:19 2025 by rpki-client