Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51ca7155-bca1-46e1-9945-f2519df32314/bbe3289d-8815-3fe6-bbf5-4fcce3f0559e.roa
File: bbe3289d-8815-3fe6-bbf5-4fcce3f0559e.roa (raw, json)
Hash identifier: 84jPYHFR1HNhfRNwFL72sHkQ+kmmXKhOoJt9WDTDc2o=
Subject key identifier: 8F:31:AF:FF:54:98:AA:F7:AF:01:EA:E5:AC:93:F9:31:55:5B:2D:30
Certificate issuer: /CN=51ca7155-bca1-46e1-9945-f2519df32314
Certificate serial: 010D0C9F4328584824FA81B3AFD850BD0AE36100
Authority key identifier: F3:08:C6:8C:84:9C:D2:1D:4A:1D:D2:30:0A:69:9C:8D:8F:82:AB:04
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51ca7155-bca1-46e1-9945-f2519df32314.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51ca7155-bca1-46e1-9945-f2519df32314/bbe3289d-8815-3fe6-bbf5-4fcce3f0559e.roa
Signing time: Mon 09 Dec 2024 02:00:40 +0000
ROA not before: Mon 09 Dec 2024 02:00:40 +0000
ROA not after: Sun 09 Mar 2025 02:00:40 +0000
asID: 398849
IP address blocks: 2620:138:3000::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:24:fa:81:b3:af:d8:50:bd:0a:e3:61:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51ca7155-bca1-46e1-9945-f2519df32314
Validity
Not Before: Dec 9 02:00:40 2024 GMT
Not After : Mar 9 02:00:40 2025 GMT
Subject: CN=b1b9ebab-51d7-4f57-848f-4c081b9d9d35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:a1:01:a7:53:86:a6:ef:9d:22:45:38:e3:9e:
7d:ce:5e:aa:55:af:15:5f:f6:40:44:e5:a5:e5:30:
94:37:97:97:a3:fa:6d:c7:fa:4a:68:68:92:8e:e0:
f4:00:c1:97:d4:10:97:bf:a1:c9:33:c8:29:6f:ec:
99:7b:8b:91:b6:02:18:56:5f:99:b1:7a:36:fb:7f:
ac:24:24:37:a2:d0:67:42:71:fa:15:37:96:dd:2c:
71:eb:11:c7:9b:92:91:f3:ef:b2:68:0c:cc:ee:47:
ac:03:4e:40:22:74:37:2d:9a:f1:db:08:c5:07:49:
5b:95:7a:a3:ea:a8:58:0a:f9:f9:54:5f:43:15:84:
e5:01:bd:67:e4:67:9d:f7:78:1e:5b:c4:2c:41:23:
e0:b7:98:03:a0:0e:bf:34:9c:be:9a:e7:e0:bd:36:
df:b2:32:c5:34:3d:2a:1c:e7:e7:f0:fa:25:11:c7:
c8:ab:b1:92:04:07:d9:3d:7b:74:1b:ea:8b:b0:a3:
93:84:7a:07:84:29:47:ce:81:8e:3e:82:e3:5d:55:
e5:ab:b1:a5:12:31:7a:76:3e:ac:7e:dc:75:fc:c2:
0c:1b:8c:6f:15:2f:52:84:64:e3:1a:04:2d:94:cf:
18:9c:4b:0b:3b:97:f5:ad:6c:19:2d:15:8d:40:e8:
7a:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:31:AF:FF:54:98:AA:F7:AF:01:EA:E5:AC:93:F9:31:55:5B:2D:30
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51ca7155-bca1-46e1-9945-f2519df32314/bbe3289d-8815-3fe6-bbf5-4fcce3f0559e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51ca7155-bca1-46e1-9945-f2519df32314/51ca7155-bca1-46e1-9945-f2519df32314.crl
X509v3 Authority Key Identifier:
keyid:F3:08:C6:8C:84:9C:D2:1D:4A:1D:D2:30:0A:69:9C:8D:8F:82:AB:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51ca7155-bca1-46e1-9945-f2519df32314.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:138:3000::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
92:e1:48:38:3b:5f:bf:62:d7:40:95:f6:3f:81:d8:fc:51:bc:
86:af:81:73:4c:f6:7c:c3:10:c4:6b:fb:7f:40:e6:e4:12:bf:
8e:c3:8c:12:bd:30:36:d7:ed:b5:1b:f8:5d:89:8c:31:c5:7d:
eb:7b:28:2c:db:11:f6:c2:c3:d9:3c:b3:fe:41:08:95:a6:a7:
70:af:05:b3:37:80:41:ca:64:10:30:79:11:00:62:07:c8:05:
e7:86:38:4f:e0:0f:47:dc:c3:a7:bc:aa:9f:20:3b:2e:7a:5d:
6d:3a:a4:34:03:63:4d:aa:28:e4:ce:82:1c:51:5c:64:5d:0a:
e9:dc:34:46:a1:9b:62:a7:f8:6a:8f:f1:30:d6:45:5c:ca:58:
69:a6:8b:23:7f:3d:6f:84:1a:4a:c9:21:ef:73:bd:e7:13:7f:
4c:a1:6a:10:f3:d3:8d:f3:a0:da:ab:cd:23:eb:0d:bd:a5:cf:
f5:37:06:6f:7e:6c:3e:f5:73:63:30:99:bc:ee:f4:21:54:b0:
75:cd:74:3a:99:30:be:6c:98:ba:86:63:14:c7:43:a6:82:e9:
76:c6:69:50:49:a5:f1:04:2f:8c:7f:ce:9b:19:28:7e:83:3e:
de:fb:94:67:3b:3d:6f:b4:bf:94:d2:52:f4:b8:cb:32:dc:75:
19:41:f2:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 01:07:36 2025 by rpki-client