Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/31b6ec7d-ca2d-4cdb-9e0b-9fc4a6b63047/3aa84767-460c-349d-872b-57420ab5927b.roa
File: 3aa84767-460c-349d-872b-57420ab5927b.roa (raw, json)
Hash identifier: kvaeSp4bg4b4QpT1VB6RsqF5yx66G7amvHJungMg1EM=
Subject key identifier: AD:7F:F7:E6:E9:F5:8F:F8:E2:C4:E9:D5:B5:31:CF:0E:FE:BF:3E:81
Certificate issuer: /CN=31b6ec7d-ca2d-4cdb-9e0b-9fc4a6b63047
Certificate serial: 010D0C9F432858480215038B450C9BE417102740
Authority key identifier: B5:D1:02:5E:55:81:34:30:8A:B5:B3:94:6B:F4:64:16:5E:04:FA:56
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/31b6ec7d-ca2d-4cdb-9e0b-9fc4a6b63047.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/31b6ec7d-ca2d-4cdb-9e0b-9fc4a6b63047/3aa84767-460c-349d-872b-57420ab5927b.roa
Signing time: Tue 26 Nov 2024 14:00:39 +0000
ROA not before: Tue 26 Nov 2024 14:00:39 +0000
ROA not after: Mon 24 Feb 2025 14:00:39 +0000
asID: 40216
IP address blocks: 2620:12f:e000::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:02:15:03:8b:45:0c:9b:e4:17:10:27:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31b6ec7d-ca2d-4cdb-9e0b-9fc4a6b63047
Validity
Not Before: Nov 26 14:00:39 2024 GMT
Not After : Feb 24 14:00:39 2025 GMT
Subject: CN=3e6d294b-9629-4b9e-888d-35c13f8ec7ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:47:85:2c:1c:84:cf:a4:db:da:5f:64:f0:37:
df:d4:78:98:3e:a5:21:1c:34:6d:82:2a:a9:5f:9c:
b2:10:01:69:56:3e:3c:6c:d4:60:cf:25:f7:df:a9:
d6:8f:5a:7d:72:e4:23:c2:f9:c4:f9:62:9f:5e:53:
75:69:d5:86:b8:13:9c:11:46:4c:59:ac:50:82:20:
d6:f5:90:65:70:7d:51:48:1f:80:83:a6:73:9a:68:
b4:13:39:9f:0e:55:58:06:20:69:18:6a:17:f9:a0:
35:76:bb:54:6f:4d:f1:58:6f:b6:59:c5:c9:82:88:
f9:47:36:98:e1:e9:ec:16:65:89:e5:46:60:d8:fd:
e3:8d:49:84:7a:74:de:fd:6b:06:24:0b:ca:13:5a:
29:5f:18:05:5c:97:e9:9f:1f:a8:da:67:fb:e8:6a:
2b:27:38:2a:74:01:95:9b:69:23:a1:dd:1a:ef:47:
d4:3b:da:5d:2e:ff:3b:7a:00:e8:6d:4a:e9:3c:24:
33:51:7a:ee:25:54:f0:d0:be:d5:99:1a:4c:57:bd:
3a:7f:5f:72:88:79:b9:3e:bc:41:85:2e:4c:c9:a7:
87:33:76:4a:28:5a:db:8b:6e:cb:f4:2d:ad:0f:90:
85:67:ce:08:0a:12:a3:d4:03:b9:ee:d0:b3:9b:73:
7e:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:7F:F7:E6:E9:F5:8F:F8:E2:C4:E9:D5:B5:31:CF:0E:FE:BF:3E:81
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/31b6ec7d-ca2d-4cdb-9e0b-9fc4a6b63047/3aa84767-460c-349d-872b-57420ab5927b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/31b6ec7d-ca2d-4cdb-9e0b-9fc4a6b63047/31b6ec7d-ca2d-4cdb-9e0b-9fc4a6b63047.crl
X509v3 Authority Key Identifier:
keyid:B5:D1:02:5E:55:81:34:30:8A:B5:B3:94:6B:F4:64:16:5E:04:FA:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/31b6ec7d-ca2d-4cdb-9e0b-9fc4a6b63047.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:12f:e000::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3c:d8:8a:26:78:c1:fe:93:c8:2a:b6:a4:91:75:05:7e:84:27:
62:f4:6e:a5:de:8f:d7:1d:67:65:c7:78:7e:fa:36:ca:3b:f4:
8a:ac:ce:ec:ec:78:35:e1:d2:9b:66:be:a1:d1:49:89:7b:70:
66:05:6a:33:af:6f:e1:62:a0:cc:0d:0f:6a:ca:d7:db:f1:f4:
65:ec:6f:99:6c:1f:9b:03:36:25:4f:6d:a8:5b:9a:66:5f:20:
2b:01:4c:2b:36:84:45:57:0c:17:58:17:91:33:0d:a1:0c:f2:
35:8a:b3:f0:b7:d8:ec:62:d6:c8:d6:2f:23:07:e3:21:a0:fe:
b8:f0:87:75:53:e3:f5:30:d2:e3:23:2d:c0:05:ca:73:ea:61:
d0:34:61:3d:97:62:9b:b8:c6:a8:ec:b4:9e:44:37:a6:b2:b2:
e4:10:27:f1:10:24:3d:a5:bf:87:e3:d2:bc:dd:84:95:bf:a9:
0f:53:07:4f:6f:9c:33:66:f0:c6:eb:44:4d:14:de:3e:8d:b2:
6e:b8:e5:15:db:f1:1d:b4:42:c5:b7:41:ef:4b:ff:80:a3:3c:
95:28:95:85:31:f8:61:07:38:10:1a:ad:5c:4f:fc:f2:72:33:
71:8b:cf:cb:8a:8a:b2:66:c2:9f:d7:a7:90:28:20:b2:dc:8d:
ec:b3:1a:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:44:26 2025 by rpki-client