Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/14ee329f-6a96-44cb-8cc5-222e0fec8c3a/acfe93c1-0f81-3c52-bb6f-b9ce7a09e1ba.roa
File: acfe93c1-0f81-3c52-bb6f-b9ce7a09e1ba.roa (raw, json)
Hash identifier: pgG0DmN9h2Ua+32wOq81+FH9IQY7ZWSerZfkBHCrdGY=
Subject key identifier: 8A:E8:F6:A1:CA:34:D2:27:E1:AA:AE:3E:DE:4A:97:2C:6B:35:29:EF
Certificate issuer: /CN=14ee329f-6a96-44cb-8cc5-222e0fec8c3a
Certificate serial: 010D0C9F432858488AE09F20286B3FB9F339E900
Authority key identifier: AE:48:23:F9:A1:EA:C3:0A:1E:7A:D0:58:AA:D4:EA:78:AF:C1:EC:1A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/14ee329f-6a96-44cb-8cc5-222e0fec8c3a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/14ee329f-6a96-44cb-8cc5-222e0fec8c3a/acfe93c1-0f81-3c52-bb6f-b9ce7a09e1ba.roa
Signing time: Tue 14 Jan 2025 14:00:51 +0000
ROA not before: Tue 14 Jan 2025 14:00:51 +0000
ROA not after: Mon 14 Apr 2025 13:00:51 +0000
asID: 209453
IP address blocks: 2604:3400:dc3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:8a:e0:9f:20:28:6b:3f:b9:f3:39:e9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14ee329f-6a96-44cb-8cc5-222e0fec8c3a
Validity
Not Before: Jan 14 14:00:51 2025 GMT
Not After : Apr 14 13:00:51 2025 GMT
Subject: CN=a1da1fd4-c391-41a4-b377-f107d6c8537f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:e1:c3:2a:dc:7f:a5:a9:a4:cc:19:1a:2d:81:
ff:42:39:cc:21:aa:5a:e6:ff:bb:6d:d7:ca:5d:50:
c2:f2:a1:49:f9:5c:41:ec:0e:03:ab:ae:c2:29:10:
84:69:2d:60:97:e4:be:d8:13:38:0b:d7:8a:19:19:
a4:90:02:37:cf:06:fd:85:a9:c6:f3:28:74:d3:e2:
2f:46:dd:ad:a7:0a:fb:f4:e1:0d:8f:ca:20:c5:4f:
0d:d2:49:d7:96:07:83:0a:54:c0:8f:06:96:0b:cf:
f1:90:81:6c:59:e1:b1:ff:5a:f4:d1:4b:f6:f0:6c:
e9:ad:90:d2:6e:12:08:e4:e5:88:f5:31:3a:4f:42:
8a:92:bd:92:39:70:79:6d:7a:9a:fc:43:b6:65:5a:
8c:18:e7:86:be:e4:fc:17:ea:87:06:ce:91:5c:17:
93:d3:e3:8d:5c:93:db:aa:3f:c4:4c:33:95:14:c8:
df:51:d6:1b:c8:da:3b:68:01:32:24:37:66:60:94:
cb:b2:9f:36:21:95:40:76:74:3e:ca:51:c6:ad:8f:
11:cd:ac:b7:d0:05:cf:01:b5:97:ee:88:b4:d5:4b:
84:8f:64:d3:75:8a:89:d1:a5:a7:37:54:2d:d9:b0:
54:e6:51:aa:d4:84:db:76:fd:5a:33:04:00:54:bb:
4e:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:E8:F6:A1:CA:34:D2:27:E1:AA:AE:3E:DE:4A:97:2C:6B:35:29:EF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/14ee329f-6a96-44cb-8cc5-222e0fec8c3a/acfe93c1-0f81-3c52-bb6f-b9ce7a09e1ba.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/14ee329f-6a96-44cb-8cc5-222e0fec8c3a/14ee329f-6a96-44cb-8cc5-222e0fec8c3a.crl
X509v3 Authority Key Identifier:
keyid:AE:48:23:F9:A1:EA:C3:0A:1E:7A:D0:58:AA:D4:EA:78:AF:C1:EC:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/14ee329f-6a96-44cb-8cc5-222e0fec8c3a.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:3400:dc3::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
43:ef:4d:e5:04:52:43:af:69:a2:7d:bc:e3:61:98:a8:3b:53:
8f:a4:83:e0:28:3b:07:3e:f4:b7:5a:43:9a:7d:91:27:59:d4:
59:36:4b:7e:ad:0c:f5:4e:5c:19:6b:45:9c:be:4a:50:4a:e3:
43:42:c3:b0:8a:f7:2c:c9:55:bf:f8:cb:2a:49:d7:eb:43:00:
65:3d:3e:a4:b6:1e:9d:9a:0a:03:c7:13:ed:cf:d0:ce:81:26:
35:ac:af:98:7a:22:e9:d2:fe:44:86:37:b0:c4:ef:2d:c9:40:
d7:54:46:5a:8b:11:1f:de:8c:9b:5d:89:f2:09:e6:7d:2b:2c:
8e:ac:b7:3b:30:8e:5c:ab:1e:87:25:0a:e2:2a:b7:13:2b:ae:
0b:78:f1:33:5a:ee:46:2b:00:e8:24:1d:29:5c:53:5b:a8:be:
5c:d2:88:cf:7c:ca:9e:53:99:1a:66:04:45:47:07:85:ed:5e:
79:ff:66:81:7a:b9:01:b5:b0:dc:01:6e:f3:4c:76:0d:76:d0:
fb:fb:54:67:2d:20:98:9a:89:cd:c0:1c:4f:02:d1:e8:6e:e5:
1c:75:ea:2d:de:22:73:f8:cd:75:27:4a:dc:a7:c9:df:ce:59:
e1:67:e9:fd:6e:78:ac:af:aa:2e:87:bb:70:08:be:c0:9e:49:
7b:94:cf:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:42:09 2025 by rpki-client