Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676/40979e81-e4d5-3b9e-aa17-d47ae9979638.roa
File: 40979e81-e4d5-3b9e-aa17-d47ae9979638.roa (raw, json)
Hash identifier: 5E0q02GtEouZDi5qUQUBLvCkyHjzhEIGv9pqz5M48gg=
Subject key identifier: 22:C0:CE:92:88:B2:0A:E9:67:3F:42:E6:40:BF:1A:44:71:DA:1B:30
Certificate issuer: /CN=d23910be-77e9-4381-87eb-cb12cfc9b676
Certificate serial: 010D0C9F43285848D64107035AEBFF476C9EEE00
Authority key identifier: F2:EF:14:4D:25:A7:C4:18:7B:99:82:5B:6B:E0:0A:AD:42:48:6A:98
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676/40979e81-e4d5-3b9e-aa17-d47ae9979638.roa
Signing time: Mon 10 Feb 2025 14:00:52 +0000
ROA not before: Mon 10 Feb 2025 14:00:52 +0000
ROA not after: Sun 11 May 2025 13:00:52 +0000
asID: 16509
IP address blocks: 2606:9680:20c0::/48 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d6:41:07:03:5a:eb:ff:47:6c:9e:ee:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d23910be-77e9-4381-87eb-cb12cfc9b676
Validity
Not Before: Feb 10 14:00:52 2025 GMT
Not After : May 11 13:00:52 2025 GMT
Subject: CN=3b6c5358-94e2-4e85-9f1d-02d670010ff5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:b1:bc:24:0b:c4:15:47:40:99:df:fe:4d:24:
8b:2f:21:b0:d2:c7:31:e1:ac:2e:98:67:aa:39:a9:
9b:8c:87:6c:3d:84:40:99:b7:40:0e:04:15:73:4e:
35:a0:ac:dc:83:d8:d4:1a:8e:4f:6c:e2:e2:e4:7a:
e6:c4:9a:28:ba:4c:ef:ad:e9:b0:1f:65:6a:e5:3a:
3b:4a:d0:4e:90:5e:5b:cd:3d:55:7b:1f:fe:77:aa:
c9:ff:7c:9a:62:18:08:17:21:45:e4:03:fb:3d:2e:
16:3b:59:ac:f8:f3:5e:5f:49:67:27:55:0d:58:2a:
fc:e1:c5:b1:ec:8f:65:5f:a5:90:ac:c2:17:51:b2:
f4:78:ef:57:79:0e:7a:b9:d2:74:5f:45:3e:7a:fb:
51:fb:4d:4f:3d:35:8a:15:df:df:7c:a5:c1:9c:4b:
84:bd:36:31:8e:14:e0:c0:43:10:f5:9f:b3:86:e0:
b7:75:5e:a3:8a:d6:c7:cb:f9:9f:d2:3d:01:90:e0:
01:82:06:10:91:f1:b5:6b:db:fa:9c:c2:e0:5c:56:
f1:ee:d1:31:d5:78:fc:00:4f:f6:db:5f:c4:fc:7e:
3c:76:0f:ef:22:58:e0:34:33:87:48:c2:7a:53:c5:
34:01:84:b7:d4:48:0b:4c:41:49:09:35:d7:45:c5:
42:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:C0:CE:92:88:B2:0A:E9:67:3F:42:E6:40:BF:1A:44:71:DA:1B:30
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676/40979e81-e4d5-3b9e-aa17-d47ae9979638.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676/d23910be-77e9-4381-87eb-cb12cfc9b676.crl
X509v3 Authority Key Identifier:
keyid:F2:EF:14:4D:25:A7:C4:18:7B:99:82:5B:6B:E0:0A:AD:42:48:6A:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676.cer
sbgp-ipAddrBlock: critical
IPv6:
2606:9680:20c0::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7a:6e:7c:9e:9f:66:02:6c:56:31:a8:a5:4f:f5:da:b7:b0:2d:
20:dc:fc:57:19:8b:44:0b:a5:91:78:59:53:88:3e:f2:60:2f:
72:35:33:5c:85:4a:74:38:75:9f:b4:21:f8:bd:f4:9a:54:d7:
13:7b:2e:28:63:2e:22:62:a3:82:af:28:d9:0a:87:d8:c0:4e:
a3:10:a0:a4:55:a9:fe:0b:a0:d6:75:77:1a:2a:ca:6a:51:8c:
16:bd:0e:4c:21:d2:8f:1d:e4:a2:ea:6c:a1:ea:cf:df:a5:cf:
96:56:3d:1e:6b:49:3b:2e:55:08:c4:39:52:17:76:21:04:81:
8d:64:c5:82:ae:d9:6b:8d:17:3d:32:bc:87:71:16:a8:c5:8a:
2f:28:20:82:a8:9e:2f:52:e4:97:ad:f4:50:eb:31:56:4f:24:
51:ed:08:09:60:a6:21:38:dd:ee:3c:ae:e8:20:3d:b0:18:35:
8c:8f:02:31:06:b5:15:5a:94:43:80:b7:ff:23:9d:d2:5e:08:
c4:95:5d:f1:31:cf:69:db:08:dc:15:ec:0c:9e:57:f6:71:1e:
86:66:8d:63:85:07:4c:95:02:f5:3e:bc:d3:77:e2:5f:34:84:
6f:1e:dc:ac:52:10:b2:1f:78:31:e4:72:f2:0f:fa:64:2b:e6:
92:94:45:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:19:49 2025 by rpki-client