Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/596fa084-7f39-355f-a655-93c77b6ffdc9.roa
File: 596fa084-7f39-355f-a655-93c77b6ffdc9.roa (raw, json)
Hash identifier: r4dJrjZysF/KuqtKR8Yazy/2eVYhwZbICbpuBRAEPg4=
Subject key identifier: E5:BC:6F:E6:F5:08:4B:AC:48:6C:C3:CF:B7:66:36:50:A0:C4:50:FE
Certificate issuer: /CN=4bc604de-ac2b-4921-b601-a2c976ab18e8
Certificate serial: 010D0C9F432858484C1021138BAE273C51E6DB80
Authority key identifier: 5D:EC:C2:1E:9D:07:9D:B1:09:72:20:A7:5D:09:3D:FA:E3:FC:AC:40
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/596fa084-7f39-355f-a655-93c77b6ffdc9.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 55195
IP address blocks: 2620:10a:801d::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:10:21:13:8b:ae:27:3c:51:e6:db:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bc604de-ac2b-4921-b601-a2c976ab18e8
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=ac88c641-4a63-4381-82ac-89e436d0b3ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:8d:d8:84:4e:bb:a3:72:8e:3f:dc:8b:6e:ae:
64:4b:5b:b8:10:30:98:09:e0:0a:20:64:de:ea:a1:
e6:52:78:38:b4:73:0b:d4:55:59:39:dc:f3:f1:1c:
a9:eb:d5:7d:8a:e3:12:82:7d:c5:14:e8:62:4d:d0:
2a:51:b2:c9:00:71:6f:e2:15:6c:26:2d:5c:27:b9:
e9:24:a0:7c:81:2e:ef:e8:31:1f:f7:85:ad:ba:6e:
4d:1c:09:05:ff:b6:ec:99:28:53:74:fb:32:f7:dc:
01:9f:a7:a7:0b:bb:5e:6b:64:d9:f1:1b:39:2b:dd:
41:3e:94:98:58:00:e4:78:23:25:72:fd:75:32:c1:
44:c3:32:76:2e:72:d9:04:5b:2f:84:c0:d1:a4:23:
cb:aa:bc:4f:2a:ec:99:fa:c9:da:c1:75:d0:98:61:
3b:6d:06:12:42:a2:a7:21:14:0b:ca:79:e0:4b:c8:
be:a0:2c:0b:6f:33:5b:72:63:f6:13:55:9d:79:b6:
fa:ff:0b:8b:cd:d0:33:62:c7:d7:ce:9f:ba:14:79:
43:3c:8f:54:0b:74:55:ae:c9:88:2d:11:00:b1:5d:
d7:6f:4e:2f:0d:97:f2:22:9c:57:3f:18:0b:ce:ef:
48:06:77:b2:39:d2:f5:e2:54:db:5b:95:59:9b:9e:
1f:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:BC:6F:E6:F5:08:4B:AC:48:6C:C3:CF:B7:66:36:50:A0:C4:50:FE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/596fa084-7f39-355f-a655-93c77b6ffdc9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/4bc604de-ac2b-4921-b601-a2c976ab18e8.crl
X509v3 Authority Key Identifier:
keyid:5D:EC:C2:1E:9D:07:9D:B1:09:72:20:A7:5D:09:3D:FA:E3:FC:AC:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:10a:801d::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
61:b1:44:8f:88:62:bf:72:d3:e8:8e:76:d8:ab:c4:e2:51:a6:
b6:40:00:98:99:b6:b0:3f:ec:09:fa:76:4a:b6:44:f7:b2:47:
49:9f:7b:08:09:1b:e7:ce:52:d7:23:61:82:bf:2d:14:35:f5:
8f:ce:27:cf:16:41:4d:cd:84:e4:18:ec:12:cc:81:fa:66:d0:
21:24:55:a3:f3:27:0d:d1:2f:85:1f:c0:d9:52:a5:77:c1:3b:
1f:81:97:a0:ad:e0:bc:47:5c:48:aa:ce:6f:f1:b9:bf:33:ed:
6d:11:e8:2f:63:12:af:f1:93:77:5e:60:66:bc:3b:06:14:9c:
c0:7d:36:8d:b7:6d:ba:29:5e:83:fb:07:44:a3:e6:51:ad:76:
b8:c3:37:eb:90:62:eb:fa:d5:79:2a:46:41:64:a0:79:df:01:
a5:e9:30:5c:48:d4:6b:25:70:ba:ce:45:df:74:2b:cf:79:ba:
51:44:c1:23:2a:79:8f:db:44:09:96:4c:57:74:7d:94:ea:40:
2e:fc:5f:aa:57:40:47:79:56:5f:6b:3a:27:94:76:a1:86:bb:
fd:0d:76:ac:2c:b9:49:68:60:eb:cf:12:03:6f:cd:8a:0a:fc:
c7:d0:02:63:02:f4:37:cb:61:1a:00:45:5e:21:ab:e8:40:0e:
52:c9:6e:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:36:16 2025 by rpki-client