Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/944798f3-c757-3437-a879-f1ef410b924e.roa
File: 944798f3-c757-3437-a879-f1ef410b924e.roa (raw, json)
Hash identifier: 84XO0SEBQMbMMTuF9CkxPdhlCu1gA9W25Tu/Jix4t4E=
Subject key identifier: F7:49:5D:B6:09:01:B7:E4:FB:8D:67:81:C6:42:E7:AB:80:72:08:A9
Certificate issuer: /CN=65dae2a0-0cb7-46e8-ae17-abeb06007e1a
Certificate serial: 010D0C9F43285848424ACE6E28188E146E6E9B00
Authority key identifier: 1A:49:9D:8B:77:A3:3A:DF:1F:CD:4E:BA:51:CC:1A:A3:FA:A3:F6:25
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/944798f3-c757-3437-a879-f1ef410b924e.roa
Signing time: Thu 19 Dec 2024 14:00:52 +0000
ROA not before: Thu 19 Dec 2024 14:00:52 +0000
ROA not after: Wed 19 Mar 2025 13:00:52 +0000
asID: 46562
IP address blocks: 2607:6b80:63::/48 maxlen: 48
2607:6b80:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:42:4a:ce:6e:28:18:8e:14:6e:6e:9b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65dae2a0-0cb7-46e8-ae17-abeb06007e1a
Validity
Not Before: Dec 19 14:00:52 2024 GMT
Not After : Mar 19 13:00:52 2025 GMT
Subject: CN=1ea7522f-fd44-49a9-be88-c2fd56f7934c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:07:fb:1f:56:41:e7:dc:fe:22:f4:35:08:0d:
ba:33:c3:1a:ac:f7:62:0d:69:a7:f1:08:fd:25:93:
17:75:89:d3:81:bd:14:79:af:2c:bb:01:d4:b7:5b:
35:cd:77:5c:a5:d0:da:07:47:3c:6b:2f:77:6a:20:
e0:b4:b8:2d:ba:0b:42:55:c1:53:06:43:80:fd:8e:
5f:f7:b7:d8:b8:bf:c9:dd:5f:fb:a0:ee:56:37:0e:
cb:69:e2:9e:5c:63:d9:a6:b1:fa:61:d2:26:5a:8d:
d0:c4:f5:55:3d:35:c8:e7:25:3d:cc:b7:f3:39:90:
31:cd:9a:9b:f8:a8:62:3f:4f:85:f6:da:b3:32:00:
f3:a0:53:3f:56:5a:a0:72:9c:07:7c:59:95:f7:f0:
7d:a9:5c:fe:8e:0f:f2:ab:af:90:63:d7:bb:b4:e5:
9e:f9:7a:43:9d:31:0c:4c:49:e1:c9:ff:26:20:52:
47:20:b8:35:41:74:06:e4:11:39:ac:01:bd:6d:91:
2e:4d:31:2f:a9:eb:33:a0:72:84:f5:ad:3f:ce:5d:
f3:ff:87:19:b1:f7:52:5a:15:dd:47:7b:30:1a:1f:
b6:0d:7a:88:da:41:0d:21:4d:45:01:91:b9:f2:e8:
c2:df:30:75:2b:64:f2:44:39:93:00:05:85:14:a0:
f9:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:49:5D:B6:09:01:B7:E4:FB:8D:67:81:C6:42:E7:AB:80:72:08:A9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/944798f3-c757-3437-a879-f1ef410b924e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.crl
X509v3 Authority Key Identifier:
keyid:1A:49:9D:8B:77:A3:3A:DF:1F:CD:4E:BA:51:CC:1A:A3:FA:A3:F6:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:6b80:63::-2607:6b80:64:ffff:ffff:ffff:ffff:ffff
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1f:69:49:bf:ad:09:3c:ec:7c:36:3a:ef:5a:48:02:c8:63:2b:
cb:b5:02:7d:b2:cd:b0:28:67:bb:3f:e4:89:d6:77:46:ec:e0:
03:59:61:f0:4c:0d:50:06:49:17:53:12:b4:a6:b6:83:01:14:
18:05:cd:a6:4a:34:58:62:d4:cf:89:ad:37:79:25:ed:bf:c4:
69:04:95:e1:eb:80:f0:ca:3c:fb:a7:64:71:80:91:30:6e:0d:
a0:44:a1:9b:66:b6:b2:38:08:56:6b:c6:da:f8:1f:23:f5:fa:
d3:4a:88:5f:b1:bc:51:d3:13:16:cb:d4:76:e1:ef:1f:b3:73:
72:ea:cd:fa:82:4e:61:dc:01:db:b1:14:46:e3:03:c5:38:42:
10:c5:ce:df:dc:cb:9a:4a:60:a6:3c:29:6f:dd:4f:59:63:37:
d0:97:46:3c:24:af:a0:df:0d:68:04:05:2c:f1:d2:0d:d9:a3:
7e:72:2a:37:d6:c0:1b:16:1b:0b:5e:fd:a5:3a:c3:b0:7d:52:
50:f2:5b:ea:55:b3:cf:65:62:6e:8b:0d:44:04:a5:0f:e0:28:
8f:be:d2:b6:8b:f1:76:e9:bd:3b:69:23:33:fc:9d:e1:49:25:
15:f4:f2:42:4b:41:f7:2a:1e:41:f7:88:12:ab:ee:f6:d0:4c:
4d:03:9e:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 16:03:50 2025 by rpki-client