Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/b66e3bc8-0233-351b-be9f-dad47d29f8aa.roa
File: b66e3bc8-0233-351b-be9f-dad47d29f8aa.roa (raw, json)
Hash identifier: L13OiRYDy+61AaBlM2ijq8tHi5pC8wnh5Lfkrf12jxM=
Subject key identifier: A9:17:49:5E:61:31:B6:AC:1C:21:BC:68:79:F2:B1:2D:42:27:35:A5
Certificate issuer: /CN=0d86638a-2e12-4aa4-bdcd-22665b26e57c
Certificate serial: 010D0C9F43285848090FAE3526A802736AA28640
Authority key identifier: 58:46:71:B4:EB:9B:8E:63:06:78:A4:72:C1:68:25:40:B3:3F:13:D7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/b66e3bc8-0233-351b-be9f-dad47d29f8aa.roa
Signing time: Fri 29 Nov 2024 02:00:39 +0000
ROA not before: Fri 29 Nov 2024 02:00:39 +0000
ROA not after: Thu 27 Feb 2025 02:00:39 +0000
asID: 2906
IP address blocks: 2620:10c:7000::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:09:0f:ae:35:26:a8:02:73:6a:a2:86:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d86638a-2e12-4aa4-bdcd-22665b26e57c
Validity
Not Before: Nov 29 02:00:39 2024 GMT
Not After : Feb 27 02:00:39 2025 GMT
Subject: CN=e321c3c5-7651-49bd-8c28-91223f11623c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:37:74:e7:6b:24:1a:9a:05:2e:75:ca:6d:02:
fb:9b:21:07:76:92:67:09:b1:e3:f4:03:01:63:40:
03:62:6c:8c:5f:39:82:b8:71:32:8f:21:d9:3c:4a:
81:cc:e6:b9:f5:9e:63:34:21:3b:d4:32:2c:58:66:
d1:c7:ea:eb:15:6b:37:cd:39:ad:54:61:45:5d:0e:
78:07:07:97:dd:07:e5:15:0f:e0:4b:2f:38:b0:fc:
a5:d3:02:f7:60:bf:e4:81:e1:a6:9f:58:13:ad:f2:
14:3d:15:cc:e2:6a:be:37:a6:00:a1:e1:78:f3:41:
b1:9f:96:8c:3d:0b:96:d7:de:6d:d4:ae:c9:77:d9:
55:f0:d0:20:7f:c0:51:c0:dc:b4:47:be:53:4a:75:
aa:09:30:f3:62:9c:76:3e:9b:1c:66:33:58:ae:d0:
9d:53:a8:0a:20:1d:5f:0f:a9:32:a2:04:39:50:6e:
9e:45:ce:94:af:72:e8:15:79:2d:d6:ca:8d:b6:e0:
cc:8c:d5:12:f1:27:66:57:40:4b:5c:92:d7:b4:ec:
56:1c:70:b2:49:0a:6e:c3:91:27:48:63:fb:eb:97:
d6:00:4d:cb:66:a7:32:6a:da:88:cf:02:28:08:d9:
80:9b:b0:2d:20:0f:dd:a6:4d:45:ce:95:9d:1d:40:
59:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:17:49:5E:61:31:B6:AC:1C:21:BC:68:79:F2:B1:2D:42:27:35:A5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/b66e3bc8-0233-351b-be9f-dad47d29f8aa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/0d86638a-2e12-4aa4-bdcd-22665b26e57c.crl
X509v3 Authority Key Identifier:
keyid:58:46:71:B4:EB:9B:8E:63:06:78:A4:72:C1:68:25:40:B3:3F:13:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:10c:7000::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2a:e6:0c:1a:40:a7:14:aa:d1:29:b9:73:40:8b:f6:2f:8c:37:
bb:c0:7e:1b:95:0f:58:5d:3c:68:5f:8a:a2:75:a0:21:4b:14:
7e:2e:82:11:14:9d:55:1a:89:27:ca:3c:18:98:29:ab:d4:ee:
fa:bf:bc:53:b7:88:80:9d:cc:6e:de:c5:df:37:15:87:4a:1c:
bc:79:8f:7f:16:65:0d:90:20:09:9c:1d:32:14:ad:ef:3b:4f:
c7:e5:a3:fa:8e:a2:99:0f:a0:16:e2:41:9e:2d:f4:9c:03:73:
3f:ad:b6:63:dd:cd:e3:85:57:38:5e:ef:4e:33:5b:c7:3e:b1:
36:5d:41:26:15:a2:ce:8d:97:17:00:13:7c:79:fa:69:1d:d1:
7f:01:7f:ba:28:cb:78:12:aa:e8:1e:fe:78:15:7b:09:eb:9d:
07:9f:31:64:e5:47:5e:6a:ab:23:4d:97:73:e8:9b:35:17:bb:
68:9e:84:21:db:ce:2e:4b:ce:6f:df:1f:2d:7f:13:54:89:61:
7a:2c:da:c1:9a:12:88:b9:4c:95:5b:9e:f2:c6:26:03:fe:cd:
c0:51:d0:6d:a9:4d:1f:9a:09:be:e8:eb:84:43:26:21:0f:f0:
a5:4c:ef:90:4f:1a:d8:55:59:fe:8d:a1:b2:88:01:11:2d:ad:
9e:5b:7c:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 10:37:26 2025 by rpki-client