Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1d7e1471-9d25-3a62-a434-f22e9e6f4b9a.roa
File: 1d7e1471-9d25-3a62-a434-f22e9e6f4b9a.roa (raw, json)
Hash identifier: MW2kYNDIvOMe+n08RL1Dx8VxzJYz3n8ZPTqiMA0yC2o=
Subject key identifier: A0:2F:FE:FD:79:E4:6A:53:0A:50:3C:D6:9A:51:F1:1F:24:69:02:DE
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584917DC1BF98B0B8A01AEC9B7C8
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1d7e1471-9d25-3a62-a434-f22e9e6f4b9a.roa
Signing time: Thu 06 Mar 2025 02:00:39 +0000
ROA not before: Thu 06 Mar 2025 02:00:39 +0000
ROA not after: Wed 04 Jun 2025 01:00:39 +0000
asID: 13335
IP address blocks: 2606:4700:3000::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:17:dc:1b:f9:8b:0b:8a:01:ae:c9:b7:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Mar 6 02:00:39 2025 GMT
Not After : Jun 4 01:00:39 2025 GMT
Subject: CN=2f21d5c8-a05a-416e-b887-9057b80feae1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:b4:3f:ba:c4:3b:e5:22:8f:03:08:2b:1e:68:
1c:b4:b1:59:6d:bf:d9:e9:8b:56:7e:fe:80:3a:9d:
9a:10:46:1b:ee:92:22:c7:41:f5:48:fd:f2:aa:fe:
59:9e:72:f9:8e:84:f8:02:61:48:0f:b1:3c:fb:27:
78:64:2d:64:29:c0:ff:d6:0a:99:4c:6e:d7:00:2e:
01:02:8f:0e:83:f2:27:64:6e:4c:49:29:44:b8:d1:
77:c0:0c:38:a4:c1:ce:7a:98:b9:c3:fd:8f:66:ba:
5a:bc:a9:61:37:33:56:54:73:5f:f4:7c:7f:0a:3e:
d4:5f:c9:4f:40:d6:b4:bd:e1:3f:da:1d:20:6c:21:
dc:28:34:c0:20:55:13:1c:d5:ef:42:c0:e0:cb:40:
42:a6:d9:5d:59:b0:8d:63:97:08:85:b8:a7:05:bb:
3f:a7:ed:3f:fc:a8:6c:2c:71:94:c8:1a:45:e0:ef:
26:b9:4a:73:60:ce:81:a4:81:87:ab:10:dd:a2:09:
58:fd:b3:40:cd:46:26:cb:41:29:d7:62:1e:ec:8e:
03:e0:01:24:de:cb:95:80:8c:63:2d:d9:99:7a:9f:
f9:85:e5:ce:f6:7e:9c:e4:66:da:91:84:41:06:77:
e6:a1:a0:5c:ee:14:1d:aa:5f:be:e6:f9:5a:d9:e7:
ae:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:2F:FE:FD:79:E4:6A:53:0A:50:3C:D6:9A:51:F1:1F:24:69:02:DE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1d7e1471-9d25-3a62-a434-f22e9e6f4b9a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv6:
2606:4700:3000::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
68:46:3c:cf:fb:bb:4e:d8:03:ca:cd:47:6a:20:94:23:a2:ad:
0b:69:9f:71:8d:98:93:93:b8:cc:8d:19:09:07:38:a1:fb:b6:
81:1c:13:5e:44:4c:1d:83:36:1d:44:52:25:e5:76:ba:fc:0f:
bc:5d:c7:ad:da:27:2d:a2:ea:08:d9:23:81:39:64:5f:b7:30:
45:51:9a:93:f3:14:6d:cf:0e:b8:8d:28:6b:c1:67:ee:22:d7:
65:39:a3:ea:10:10:ca:cc:a3:55:32:45:a4:ca:f9:aa:83:16:
0a:85:de:b7:be:17:26:05:28:07:2b:79:f5:36:02:9c:8a:d1:
75:53:bc:f0:01:4b:81:ff:d0:5e:30:01:a8:ff:42:6b:91:fc:
c2:47:8c:9f:d3:24:70:33:44:bc:1d:14:5d:a1:d2:5c:43:e4:
ef:1a:3e:0a:d2:fb:f9:40:be:f8:e3:8b:11:2e:77:96:e4:1a:
27:05:6d:ac:e5:1c:e3:4f:18:87:5f:f1:f4:a4:c4:b5:0f:78:
71:73:7e:a4:63:b3:9e:7c:80:63:83:99:30:bb:02:a2:12:43:
aa:17:b5:bf:b5:ae:ea:71:82:30:06:1e:46:66:0b:67:00:92:
eb:06:c8:4a:c6:0a:e2:82:88:df:63:e2:17:dd:01:53:47:29:
d9:3d:00:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:49:38 2025 by rpki-client