Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/aaa241b2-0e20-3965-af75-6d9f126290e3.roa
File: aaa241b2-0e20-3965-af75-6d9f126290e3.roa (raw, json)
Hash identifier: 11LHDe44amCe+FfQF7uQ7BC+0ghtM9b3yzclkP3sbvk=
Subject key identifier: AD:3B:B3:A4:73:8A:1C:82:4C:5D:0E:C6:51:FF:B7:79:AE:0D:9F:3B
Certificate issuer: /CN=01586a37-c709-480e-ac0d-b07d855c615b
Certificate serial: 010D0C9F43285848143A80FCADC0880024263940
Authority key identifier: 40:B8:69:3F:C9:14:9F:5C:2B:7B:FA:88:B8:C7:FF:62:32:EB:9B:A9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/aaa241b2-0e20-3965-af75-6d9f126290e3.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 207990
IP address blocks: 2600:2900::/30 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3a:80:fc:ad:c0:88:00:24:26:39:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01586a37-c709-480e-ac0d-b07d855c615b
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=9050268b-0d9f-48ca-9fa1-50a2289a746f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:64:f8:30:3c:d8:9e:70:02:5e:71:ca:95:76:
b8:3f:38:a0:c1:1c:71:b1:74:43:27:bd:28:be:5a:
27:9e:21:c2:43:fe:48:d5:4d:08:94:80:36:5e:64:
50:22:e0:1b:7e:6d:ba:b0:1b:32:3b:90:6e:12:2d:
d8:aa:58:7f:8e:f7:86:ff:1d:6d:bc:9e:30:e1:5b:
a0:63:e7:0d:be:76:6d:6b:ad:fb:a1:99:8a:ee:9d:
20:aa:18:cb:96:af:e7:85:79:d1:ca:c3:da:ae:2e:
af:e9:0b:88:ea:3c:39:b2:2f:2e:e9:1d:6a:27:2c:
57:bc:02:22:fe:9e:18:70:99:04:1f:81:c2:9d:e3:
b0:9e:83:80:4d:c5:f9:57:fc:fd:cf:31:b6:40:1b:
14:42:bc:3a:f9:ac:19:ee:fb:54:2c:7c:a1:63:73:
96:cc:5f:f2:30:7f:6c:02:42:42:26:57:74:65:cf:
8a:fd:03:f5:39:01:d1:ac:18:8b:68:90:0e:50:75:
fe:f5:03:25:41:ac:4a:62:fa:76:0a:b8:06:70:b4:
ad:7d:37:30:45:55:be:8d:82:81:9b:b0:2e:69:f1:
63:4d:ae:b4:c6:80:69:04:b8:21:7d:4f:58:84:84:
7e:8e:0c:a5:c2:5a:1b:8b:61:77:a9:d2:3c:91:28:
12:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:3B:B3:A4:73:8A:1C:82:4C:5D:0E:C6:51:FF:B7:79:AE:0D:9F:3B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/aaa241b2-0e20-3965-af75-6d9f126290e3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/01586a37-c709-480e-ac0d-b07d855c615b.crl
X509v3 Authority Key Identifier:
keyid:40:B8:69:3F:C9:14:9F:5C:2B:7B:FA:88:B8:C7:FF:62:32:EB:9B:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:2900::/30
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3e:64:d2:c6:57:c4:ae:96:48:40:db:26:f7:b4:fa:64:43:9b:
3c:4c:de:1d:ab:1b:8a:d7:a9:8a:ea:ae:8e:89:c5:9f:89:e3:
31:13:7b:95:a9:6a:b5:c2:a7:17:2c:e4:1a:18:54:4b:06:ed:
26:cd:e7:32:cd:be:14:ca:b2:8b:1e:68:dd:b5:e9:6f:a7:a3:
e0:d6:c6:18:a1:34:40:38:02:3b:e9:9e:16:b4:0a:a5:d8:ed:
3e:23:86:40:e8:ea:17:bd:ec:32:01:35:86:9b:c7:c3:64:36:
17:53:8b:6f:ab:d6:53:b0:89:de:da:f3:17:f4:75:81:14:af:
9b:57:87:f1:68:a4:d0:8e:bc:09:e1:ad:5f:cc:e6:37:0b:dc:
46:60:8e:75:d2:86:cb:bd:49:15:ec:bb:b8:3a:dd:cb:41:1f:
18:81:50:2b:13:01:13:09:1a:05:54:f1:57:eb:39:b3:f5:80:
c1:21:29:d8:58:82:b2:f9:35:af:e0:b0:a0:a8:2d:ab:75:51:
28:d7:95:9b:3d:7a:34:71:89:40:ed:b2:60:e1:44:28:78:df:
56:db:79:7c:a7:46:b4:48:99:7d:09:df:80:2b:b5:06:e9:c2:
0f:3a:6b:ad:86:40:d6:0a:6f:c6:23:d6:1a:8d:ae:a9:cf:87:
84:d1:74:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:11:29 2025 by rpki-client