Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/3b5f5588-b2d6-3b3c-afce-0ca173718c46.roa
File: 3b5f5588-b2d6-3b3c-afce-0ca173718c46.roa (raw, json)
Hash identifier: h2eA8jcfR0AqwcNgrwiWQn4VAfZvy0veBEeiF8jYgEg=
Subject key identifier: 1A:4C:F6:08:07:3E:54:23:19:E8:FD:61:E3:4C:AA:A3:D1:16:16:6F
Certificate issuer: /CN=4bc604de-ac2b-4921-b601-a2c976ab18e8
Certificate serial: 010D0C9F432858484C10213E5757CEAF4155CEA0
Authority key identifier: 5D:EC:C2:1E:9D:07:9D:B1:09:72:20:A7:5D:09:3D:FA:E3:FC:AC:40
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/3b5f5588-b2d6-3b3c-afce-0ca173718c46.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 55195
IP address blocks: 2620:10a:8021::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:10:21:3e:57:57:ce:af:41:55:ce:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bc604de-ac2b-4921-b601-a2c976ab18e8
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=7cb2f03a-e692-464e-bc63-cbeb6ab4c852
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:bd:a8:1d:3a:95:d5:37:4c:19:c4:f3:05:47:
7c:11:25:37:0e:30:ab:8e:8e:c6:56:3b:bf:c9:94:
a1:09:cd:03:25:d2:fb:bd:f3:f9:ab:68:4e:33:a5:
99:35:03:21:d2:a0:52:86:d1:48:19:28:a2:85:0d:
4f:58:a6:3b:d1:a1:1e:77:1a:07:70:36:73:c2:c9:
26:4d:28:5b:7c:c5:12:c9:ee:9a:ee:75:5e:ac:f6:
5c:07:85:63:d5:5d:3a:8d:e9:df:a6:32:88:3b:1f:
78:08:51:c5:4e:80:f0:e9:b2:9b:55:81:ca:cc:2f:
63:9f:55:81:26:99:ab:e0:49:1d:eb:3a:be:6f:f4:
19:a3:e0:8b:31:ae:81:cc:13:34:57:d1:f8:57:02:
14:eb:16:a6:70:98:c0:0d:b0:12:bb:46:a2:de:d7:
12:ec:63:73:59:98:27:69:19:a8:1e:b7:46:e1:6a:
62:a1:39:03:ba:a8:61:68:b7:87:4c:2a:97:5e:00:
f1:57:b7:3f:50:ce:f4:92:61:46:26:cb:62:42:b9:
6f:c4:50:6c:75:6e:1c:21:52:cc:72:dc:a8:74:1d:
e1:22:73:26:71:78:c1:7e:10:29:9d:54:9e:42:9c:
22:2c:bd:32:3b:0e:91:f6:82:72:ea:4e:0d:41:11:
35:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:4C:F6:08:07:3E:54:23:19:E8:FD:61:E3:4C:AA:A3:D1:16:16:6F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/3b5f5588-b2d6-3b3c-afce-0ca173718c46.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/4bc604de-ac2b-4921-b601-a2c976ab18e8.crl
X509v3 Authority Key Identifier:
keyid:5D:EC:C2:1E:9D:07:9D:B1:09:72:20:A7:5D:09:3D:FA:E3:FC:AC:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:10a:8021::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
aa:2b:2c:5a:0a:8a:e7:65:cb:ec:81:f7:c5:fc:1a:57:85:ac:
3a:0c:56:ca:a0:62:b8:72:77:1b:56:e6:20:7b:8f:5a:ae:60:
07:d5:f8:ea:f7:ff:01:ef:a6:d9:9b:a1:11:78:6c:29:b3:cc:
5b:ea:47:de:3c:c3:7e:d8:1e:42:dc:16:dd:f6:9e:60:c2:2f:
f7:e6:a0:ae:2e:98:78:08:e1:1a:25:c5:ab:18:e9:64:89:d6:
9b:31:58:23:e2:b1:01:9f:b4:36:4f:bc:b4:c3:a4:2f:84:6c:
28:ab:a0:79:18:d0:13:aa:77:23:63:32:92:f9:f8:d1:83:6b:
06:03:8a:e6:af:dc:f7:62:f6:d5:a4:d5:dc:13:cd:34:4b:39:
0c:2f:6a:5a:13:92:42:ea:35:70:a2:06:e2:f9:9a:f7:8a:c7:
03:ed:c6:7e:9d:29:3b:82:47:1a:d3:32:68:c8:c8:c8:e9:e9:
94:46:8b:a5:60:0d:55:bf:36:7f:19:22:c6:42:ee:50:56:4b:
67:0b:64:6b:07:dd:fb:2a:31:f0:ec:45:48:1f:e9:e4:37:c2:
9c:99:2a:06:03:41:0d:d4:69:2a:2a:b9:e2:6e:9f:88:9b:88:
8f:06:ee:a0:ee:b9:20:df:76:61:23:f2:bd:3d:19:b6:92:5f:
0e:32:a5:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:55:59 2025 by rpki-client