Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cbe5a201-74d3-4759-8d65-120a9abc8eaa/49ad91a4-54ac-37a2-818c-38261d97663e.roa
File: 49ad91a4-54ac-37a2-818c-38261d97663e.roa (raw, json)
Hash identifier: Rv6xEcvgoQymT4K4/ziMWnfP2mAtQuFhU+tx0RwWhjM=
Subject key identifier: 5F:FC:12:21:02:76:58:48:42:BB:2C:6F:2D:E4:5D:90:40:CE:73:1B
Certificate issuer: /CN=cbe5a201-74d3-4759-8d65-120a9abc8eaa
Certificate serial: 010D0C9F43285848ADC5FF5B9092FDE676814440
Authority key identifier: DF:CE:26:E8:A1:07:21:33:BF:11:9C:AA:53:94:D3:08:BE:14:55:7B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cbe5a201-74d3-4759-8d65-120a9abc8eaa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cbe5a201-74d3-4759-8d65-120a9abc8eaa/49ad91a4-54ac-37a2-818c-38261d97663e.roa
Signing time: Mon 27 Jan 2025 02:00:39 +0000
ROA not before: Mon 27 Jan 2025 02:00:39 +0000
ROA not after: Sun 27 Apr 2025 01:00:39 +0000
asID: 399989
IP address blocks: 2604:354a::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ad:c5:ff:5b:90:92:fd:e6:76:81:44:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbe5a201-74d3-4759-8d65-120a9abc8eaa
Validity
Not Before: Jan 27 02:00:39 2025 GMT
Not After : Apr 27 01:00:39 2025 GMT
Subject: CN=b95d9014-c408-4bd7-b736-b0bf2c3ee1fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:48:37:4e:74:83:c7:64:a3:69:3c:23:41:90:
f7:33:37:59:26:3f:0c:8f:38:c9:d3:6a:4d:c7:7d:
ac:e7:04:ed:4c:27:e8:fd:74:7b:b1:78:f9:78:7d:
19:42:52:90:21:3d:17:0b:f1:0a:c2:66:2c:b7:8b:
15:bb:59:55:84:b1:92:3f:93:83:aa:fd:7b:3a:92:
0b:6f:d0:1b:e7:79:bd:6b:fe:19:6a:bb:e6:cd:a2:
3b:c2:88:8c:90:04:cf:6f:7b:dc:69:bd:5e:22:b1:
13:3f:44:d1:8b:9d:fd:3a:38:07:35:b3:d1:53:3a:
92:0f:56:53:cb:04:27:df:9b:66:35:90:9c:09:54:
65:b5:5a:84:ae:3a:0e:f0:7f:cc:af:2e:06:bb:9e:
31:42:b0:16:9f:f2:86:6e:d5:46:8d:01:3e:b0:f5:
70:2f:84:da:57:b8:1e:f9:f6:c9:53:0a:f5:01:b0:
47:a8:14:52:69:8e:d6:7a:d6:96:79:06:78:d3:19:
9b:24:cd:38:71:5f:ee:4e:68:9a:d4:a7:c7:28:65:
c6:4f:52:80:cb:66:04:05:a8:ca:f6:93:50:ad:75:
2c:d9:79:cf:0a:7f:3f:2e:46:75:54:4a:3f:0b:57:
1f:2d:a6:0f:80:cc:68:3c:f9:04:f9:11:6c:56:a8:
5d:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:FC:12:21:02:76:58:48:42:BB:2C:6F:2D:E4:5D:90:40:CE:73:1B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cbe5a201-74d3-4759-8d65-120a9abc8eaa/49ad91a4-54ac-37a2-818c-38261d97663e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cbe5a201-74d3-4759-8d65-120a9abc8eaa/cbe5a201-74d3-4759-8d65-120a9abc8eaa.crl
X509v3 Authority Key Identifier:
keyid:DF:CE:26:E8:A1:07:21:33:BF:11:9C:AA:53:94:D3:08:BE:14:55:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cbe5a201-74d3-4759-8d65-120a9abc8eaa.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:354a::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b3:32:f5:8d:4d:c0:b9:23:b5:2d:03:93:42:96:59:23:a9:79:
e2:78:97:7f:67:a7:1c:6f:e9:d5:a7:7c:44:f5:29:7a:ef:00:
b0:29:13:52:0b:f1:93:ed:ee:25:93:3f:a1:a1:b6:3a:ca:b9:
59:77:11:1c:24:aa:1f:63:8a:42:db:3f:9c:97:e9:7d:b6:5a:
04:01:dc:a4:6d:35:f9:40:96:c8:d5:4c:e1:b7:a8:4b:2f:e0:
20:2f:5a:5d:ac:d6:87:a1:66:9f:59:1a:34:07:9a:d9:ff:7e:
6f:48:7e:f6:d3:8a:2d:fb:c3:9b:e8:d4:eb:3c:0d:dc:07:75:
39:a0:cb:5d:d2:35:ad:ed:7b:32:a1:73:33:95:42:7c:52:61:
e5:93:2e:1f:b9:0c:94:1e:cf:f1:05:46:ad:4d:f1:73:36:12:
7e:f7:6f:c1:a7:e1:e6:f9:4d:cd:ff:a4:38:e2:85:59:d5:da:
59:ac:42:74:63:c4:ac:7d:a1:70:68:db:15:81:d0:3f:35:62:
0a:99:73:46:78:c2:17:aa:97:ac:ec:4f:93:95:ff:9b:bc:6e:
ae:0d:27:7f:ec:26:60:24:7e:fc:a5:d1:0b:78:90:57:7d:f5:
4b:1d:1d:2b:15:bb:fe:d2:1b:71:e0:30:df:79:b7:a3:d4:ac:
1a:f5:e8:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:34:40 2025 by rpki-client