Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/2167c9e7-1234-3e0b-b041-6f7965c9ae79.roa
File: 2167c9e7-1234-3e0b-b041-6f7965c9ae79.roa (raw, json)
Hash identifier: eiOPSZOx/o+B2p1p+fKS28OABqoYfvWwnGtxoSahLVA=
Subject key identifier: 49:0C:A2:60:6F:0E:F7:2F:38:90:C9:7F:5E:EA:1D:91:3B:9D:D0:2D
Certificate issuer: /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
Certificate serial: 010D0C9F4328584824FA8F7BA43096F3EEA1ABF0
Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/2167c9e7-1234-3e0b-b041-6f7965c9ae79.roa
Signing time: Mon 09 Dec 2024 02:00:40 +0000
ROA not before: Mon 09 Dec 2024 02:00:40 +0000
ROA not after: Sun 09 Mar 2025 02:00:40 +0000
asID: 397423
IP address blocks: 2606:f180::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:24:fa:8f:7b:a4:30:96:f3:ee:a1:ab:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
Validity
Not Before: Dec 9 02:00:40 2024 GMT
Not After : Mar 9 02:00:40 2025 GMT
Subject: CN=580d0000-940c-4a05-a199-f335323a8f6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:c9:4e:3e:40:5a:57:c3:ab:7a:9a:72:17:6d:
1c:98:d4:1e:26:2e:e2:17:70:dc:fa:7f:4b:61:0f:
22:46:cd:aa:a7:63:ab:b7:88:41:9c:7c:40:bd:07:
21:14:8d:f5:0a:3f:33:7b:71:d7:09:fd:83:42:3f:
8f:af:11:ad:8c:8a:af:e4:6c:30:17:9b:bd:d1:40:
ae:9e:6e:5c:44:46:b9:9e:07:49:48:d4:b2:53:47:
01:d4:96:00:b6:08:a7:2d:c4:1d:ff:62:71:26:b6:
5d:e5:cd:20:ad:ff:ed:ba:03:7e:5e:67:9b:73:ec:
18:48:c6:7c:28:e9:d7:69:6b:32:35:99:48:49:31:
3e:6e:67:57:e3:83:a9:34:ca:f9:f0:4e:d8:ca:26:
c0:3b:c7:43:dc:8c:ce:43:2e:e3:3c:a8:98:26:54:
db:0e:4d:ac:26:1c:a1:4b:17:a5:56:bb:17:8b:2c:
89:f8:c6:98:22:bd:84:e5:94:7e:18:7b:6c:c9:5e:
03:cc:b4:70:e9:84:6c:34:49:07:1b:5d:b6:0f:3c:
44:2e:5f:2f:7e:84:c3:3f:c1:38:d4:11:0e:c4:ff:
95:47:b6:0a:af:9a:5e:d5:fb:d1:0e:47:b8:46:30:
3e:ba:8c:bb:78:5d:09:a4:cd:d0:75:fb:e0:85:46:
e7:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:0C:A2:60:6F:0E:F7:2F:38:90:C9:7F:5E:EA:1D:91:3B:9D:D0:2D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/2167c9e7-1234-3e0b-b041-6f7965c9ae79.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl
X509v3 Authority Key Identifier:
keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
sbgp-ipAddrBlock: critical
IPv6:
2606:f180::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
29:e8:b1:fa:b7:3d:2d:b7:6a:8b:25:3c:73:28:86:cf:c5:d2:
dc:03:d5:d6:88:08:7e:17:d9:20:a9:2d:ed:27:52:ef:53:9e:
74:0f:e0:2d:6b:cc:48:a4:a1:48:a2:c5:10:44:eb:12:6e:52:
1c:0b:c7:48:3f:b9:f8:50:5a:d3:07:bf:a7:8d:67:19:4e:67:
47:9a:3d:d2:67:03:d1:22:b9:d9:68:f9:77:b0:5a:a2:32:a6:
a5:cf:91:c5:cc:01:9a:36:d3:c1:08:42:27:f7:fa:1e:9c:98:
93:9d:cd:0e:a1:60:da:89:5b:95:31:11:44:67:32:90:4a:5b:
06:7b:12:f9:61:69:22:2b:93:66:94:a4:e6:c0:06:b2:d3:01:
61:de:49:6c:a4:64:2f:0c:2d:71:24:7e:39:c6:33:02:89:25:
fc:17:6d:a0:e8:82:66:9d:09:82:8c:7f:e2:4a:c2:f8:dd:de:
9b:de:7c:41:97:77:3b:f2:29:dd:8b:44:5f:81:a3:82:ca:e8:
66:d6:c9:54:30:10:9f:68:74:74:76:b6:3c:01:43:54:36:d9:
53:dd:1b:a4:32:03:da:af:95:7e:3e:98:da:7f:f0:20:03:96:
ba:8c:55:2d:6a:73:10:74:ef:b5:e9:aa:92:e9:89:88:bf:b7:
85:d7:a9:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:28:40 2025 by rpki-client