Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ba79d6c1-56c4-3f78-923d-611510ae8e93.roa
File: ba79d6c1-56c4-3f78-923d-611510ae8e93.roa (raw, json)
Hash identifier: EOZpaa7OC7gIzy4MfOiyke9SjyplWdaT1g1AN4Deobc=
Subject key identifier: EF:25:B4:E7:BF:89:72:3C:7B:43:F4:79:43:6E:30:89:35:A8:B7:03
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F4328584832F0006BE6672EA220582480
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ba79d6c1-56c4-3f78-923d-611510ae8e93.roa
Signing time: Sat 14 Dec 2024 02:00:39 +0000
ROA not before: Sat 14 Dec 2024 02:00:39 +0000
ROA not after: Fri 14 Mar 2025 01:00:39 +0000
asID: 397225
IP address blocks: 2620:74:1b::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:32:f0:00:6b:e6:67:2e:a2:20:58:24:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Dec 14 02:00:39 2024 GMT
Not After : Mar 14 01:00:39 2025 GMT
Subject: CN=4d8c8f77-6efe-4cf6-8b59-080c9b99f964
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:87:09:dd:20:cb:09:97:fc:a2:d4:7e:da:04:
57:48:f5:2d:73:98:8c:cb:7a:b9:16:90:c5:93:78:
07:3f:5e:c6:2c:6a:ab:ae:61:39:2a:64:29:1c:47:
8d:d4:47:17:a6:bc:2f:53:47:39:69:a7:39:76:40:
95:34:a5:9e:fc:c4:0a:9a:95:d9:87:03:08:70:85:
4a:b9:3d:67:c7:00:5b:73:28:de:49:3e:60:1b:84:
77:44:50:45:59:b0:46:4e:65:b6:e0:e7:b0:c7:8c:
97:2d:72:25:4b:a2:34:28:d7:ec:8b:d2:4d:49:43:
0e:58:72:7f:d1:91:86:53:e9:95:8c:9e:7d:4c:c4:
41:51:d9:6e:90:68:b2:a6:e3:43:f6:60:66:2b:f1:
6a:ad:9c:61:b6:f9:28:a9:1c:b7:61:e9:3f:ee:55:
9c:2a:76:fa:d2:25:45:33:d8:27:75:c2:28:15:ea:
37:a8:87:fa:19:09:25:d7:aa:85:9f:49:b7:db:dc:
07:b7:e3:47:b6:8e:f2:49:02:76:3a:5d:a5:b9:ff:
f0:c0:a4:3d:44:08:c7:ed:19:87:d1:d5:df:94:9d:
77:54:6f:b2:0b:f9:54:6f:a2:da:de:69:4b:81:15:
12:6f:2e:99:7d:bf:da:a7:b6:10:7b:b3:af:ae:34:
21:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:25:B4:E7:BF:89:72:3C:7B:43:F4:79:43:6E:30:89:35:A8:B7:03
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ba79d6c1-56c4-3f78-923d-611510ae8e93.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:74:1b::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3b:d6:f7:f0:52:60:4f:d0:91:3e:3b:00:5a:5a:16:cd:b0:90:
45:bd:70:ff:5b:ea:69:73:a0:29:f3:2e:99:77:cc:19:5b:61:
b8:e3:f3:30:f0:fe:21:60:ae:50:3e:f9:86:e1:8d:82:d4:85:
34:72:f8:c2:4b:c0:70:b2:0d:05:c5:ba:4d:7b:80:9a:65:a2:
1e:21:51:01:67:8c:23:de:cd:c3:90:76:06:e3:87:9b:b2:31:
1b:1b:d9:50:be:40:de:d3:da:b6:11:5d:3b:50:db:2d:d1:40:
e8:1d:79:0d:40:00:17:11:0c:48:f9:78:4c:10:09:95:78:07:
35:36:7a:c5:45:8d:ce:20:7a:7b:72:f8:db:53:7d:61:86:d7:
27:fd:a2:6f:61:ce:ab:c2:4f:47:0f:dc:2c:f4:34:46:f6:84:
99:9c:e9:88:77:10:5f:cb:68:02:f8:2c:4b:81:a9:d0:aa:db:
bf:96:66:8f:97:8e:6e:c6:ad:df:f6:8f:67:06:53:05:c1:03:
6f:22:19:69:c6:54:e7:fd:51:13:18:c1:7d:db:83:1b:95:ee:
d2:ae:ce:cf:5d:ed:f0:ed:da:de:3c:89:b9:5b:7f:57:fb:7c:
8e:4e:92:3a:1a:2d:1d:32:b8:dd:2b:93:1c:2e:15:9a:07:c2:
b7:84:7a:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:19:58 2025 by rpki-client