Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/6ba94df3-35c6-32c2-a7c0-e1b0817f0606.roa
File: 6ba94df3-35c6-32c2-a7c0-e1b0817f0606.roa (raw, json)
Hash identifier: KQizePM3TrR+9o7vLr3gf8xVhvzk7HAqqbINI+wZ010=
Subject key identifier: 3A:0D:84:1E:18:E3:A4:7E:BF:95:B4:1B:FA:74:FF:E1:1F:CC:F6:C3
Certificate issuer: /CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de
Certificate serial: 010D0C9F43285848159FEA6C058B1CE4813607C0
Authority key identifier: 50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/6ba94df3-35c6-32c2-a7c0-e1b0817f0606.roa
Signing time: Tue 03 Dec 2024 14:00:52 +0000
ROA not before: Tue 03 Dec 2024 14:00:52 +0000
ROA not after: Mon 03 Mar 2025 14:00:52 +0000
asID: 12129
IP address blocks: 2607:f790::/32 maxlen: 32
2607:f790:e000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:15:9f:ea:6c:05:8b:1c:e4:81:36:07:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de
Validity
Not Before: Dec 3 14:00:52 2024 GMT
Not After : Mar 3 14:00:52 2025 GMT
Subject: CN=2d602741-6f53-4a43-a04d-1bc70e966bf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b4:eb:84:35:4a:52:a9:61:be:73:80:74:0d:
85:04:19:d6:55:19:05:f0:bb:f0:e8:04:5b:97:85:
a2:39:a7:ef:dd:9c:1c:87:c5:d8:8f:31:f5:0b:b5:
32:89:9a:47:1e:01:69:d4:34:fb:11:95:5a:4c:e2:
af:0e:be:86:b3:33:38:2e:e3:c0:dd:02:44:a3:7b:
75:87:8d:46:aa:ac:d3:9c:b1:d3:e2:23:d8:e0:de:
a0:9a:38:f6:8a:c5:d5:0b:74:17:13:e9:a9:49:c1:
42:72:a2:57:a0:50:4e:68:d9:be:b3:3c:a4:25:03:
ac:54:83:3e:05:c9:84:dd:87:00:76:24:8f:e8:c1:
70:6e:46:b1:07:fe:98:9d:07:66:4b:49:72:14:e2:
d0:e8:8b:ef:e0:7c:41:ce:70:9d:2a:b6:78:67:91:
b4:bb:be:ca:96:f8:13:3e:3b:8c:77:df:6e:6d:c7:
32:2b:7e:68:a1:30:2d:a7:74:64:a1:54:07:9e:53:
b8:e7:d3:a8:1b:cc:5b:d8:fd:bf:53:1c:81:4c:5e:
04:4b:81:79:c4:ec:35:39:af:f2:bf:41:f0:a1:10:
ec:a2:56:4e:d9:f5:b1:dc:1b:16:21:b8:a5:33:f9:
e8:e8:0d:c9:99:6c:fd:f0:e7:7f:bb:b9:fc:61:78:
f1:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:0D:84:1E:18:E3:A4:7E:BF:95:B4:1B:FA:74:FF:E1:1F:CC:F6:C3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/6ba94df3-35c6-32c2-a7c0-e1b0817f0606.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl
X509v3 Authority Key Identifier:
keyid:50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:f790::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
63:0d:f8:4e:93:8f:4f:64:db:79:c3:6b:59:e7:dc:d0:7a:a0:
ef:87:63:79:c2:05:e0:6a:a2:90:89:07:76:96:6f:1b:cb:70:
fc:b4:05:4c:c3:f4:23:a6:0e:fe:b2:e0:53:43:cd:9a:7a:5c:
db:66:1a:cd:07:91:65:5a:63:32:0b:46:23:4e:bd:fc:63:df:
60:cb:c6:4f:28:99:8f:61:b4:08:df:35:bf:85:c2:04:ed:a4:
5c:a1:f6:11:f6:89:fa:cb:1f:3e:19:69:9f:e0:68:51:59:c8:
3c:c2:cc:02:7d:8b:0e:6c:e5:92:94:5b:bc:17:85:c4:25:df:
09:c3:f1:9d:45:87:9a:38:bb:2d:e8:78:c1:0f:70:b6:fb:26:
d5:0a:7d:8b:c9:b9:cb:c8:6f:a6:8c:31:f3:8f:8a:b3:dd:9e:
2a:ad:2f:e2:75:aa:b7:6b:0b:a7:ab:77:82:45:d9:f4:1f:e2:
de:39:07:42:07:02:6b:ae:57:43:2c:f1:16:64:9f:d0:c4:46:
93:c5:27:ed:59:35:eb:d6:29:67:5d:7e:52:a5:38:24:5f:d2:
0d:04:64:04:6d:b2:b3:b8:03:bd:ff:4f:6f:af:d8:64:86:cb:
04:98:9b:53:25:7a:30:5c:83:31:9d:97:40:c7:52:5b:1e:11:
42:21:a7:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:38:01 2025 by rpki-client