Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3d8631d3-712e-3ef8-a387-91cdde0b67ea.roa
File: 3d8631d3-712e-3ef8-a387-91cdde0b67ea.roa (raw, json)
Hash identifier: jk7K+hWC4Cmn3r/x+7EiDQAW77++AEAt/u7mkYLtHGo=
Subject key identifier: FF:9B:F3:1A:79:31:EA:25:5F:0B:04:9E:31:AF:4F:49:BD:57:ED:FC
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584917DC23CC9C845872C7773230
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3d8631d3-712e-3ef8-a387-91cdde0b67ea.roa
Signing time: Thu 06 Mar 2025 02:00:39 +0000
ROA not before: Thu 06 Mar 2025 02:00:39 +0000
ROA not after: Wed 04 Jun 2025 01:00:39 +0000
asID: 395747
IP address blocks: 2606:4700:2001::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:17:dc:23:cc:9c:84:58:72:c7:77:32:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Mar 6 02:00:39 2025 GMT
Not After : Jun 4 01:00:39 2025 GMT
Subject: CN=6d98bda8-771d-463d-a2ab-35691fde0c19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:3b:2e:03:2c:4f:b9:2a:36:54:11:15:d4:1c:
54:1a:93:12:0b:b0:9a:3a:b2:6e:bb:9a:75:ee:7d:
23:73:cc:75:c9:a7:a6:22:9e:fc:11:f2:12:a5:ca:
3c:ac:56:60:b8:2d:c6:de:fa:b2:f0:b9:cf:b3:18:
d8:60:a7:23:d5:cc:1e:14:28:10:0a:8c:f9:95:5b:
14:f8:60:ff:ba:f6:2a:0c:90:2d:a9:98:b7:f9:31:
01:7e:bf:7c:a3:10:87:e3:a7:a3:16:ff:43:a7:2f:
e3:c8:b1:20:7a:39:d0:c0:48:6b:9a:39:c5:1c:16:
38:fc:65:03:19:82:21:35:99:91:61:7a:fd:6d:18:
69:b1:90:49:e9:ec:73:29:79:61:8e:ca:e0:1d:e3:
d9:92:5e:bc:a8:e6:5f:e0:c6:19:a0:6d:d3:00:dc:
d0:a9:4c:c6:69:cd:99:e4:51:02:ad:56:07:1f:ad:
d1:48:91:a5:f1:d0:bf:8e:bb:94:21:9f:96:4f:11:
5e:85:2c:66:4f:bd:0f:9f:ab:12:b9:ee:86:d1:3b:
80:d9:66:84:40:32:1c:e8:80:b1:30:61:55:ee:91:
07:1c:d1:9a:71:05:0d:bc:1a:3e:e3:76:fc:fc:1d:
5e:9a:38:1b:81:21:a2:b8:86:5c:37:3a:8c:1b:b1:
40:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:9B:F3:1A:79:31:EA:25:5F:0B:04:9E:31:AF:4F:49:BD:57:ED:FC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3d8631d3-712e-3ef8-a387-91cdde0b67ea.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv6:
2606:4700:2001::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
15:49:b0:68:f7:73:d5:96:c1:fb:4e:80:bc:e6:62:9f:d5:67:
65:f1:17:77:ce:7a:50:59:9c:85:25:fc:a5:10:54:28:c5:58:
55:3e:ce:ef:d7:ea:c3:25:ff:15:de:40:78:39:43:45:4e:da:
fc:c5:5f:5b:7b:39:3d:11:dd:2b:13:27:e3:d2:68:aa:89:cf:
c8:c1:3f:27:91:36:6b:21:cd:fe:8d:5c:2b:ae:d8:43:03:45:
43:41:d8:7d:24:d7:21:c7:c9:c1:03:2b:8c:b4:0a:a8:14:2f:
c8:b9:4c:08:ac:50:26:e4:d3:d3:79:2a:03:0b:84:7b:1e:42:
32:e6:8b:52:f4:b1:b6:41:ba:4c:8f:d4:5e:4c:21:c3:64:73:
f5:1c:06:f9:58:08:a4:b9:91:6b:d9:77:9d:c3:7b:6d:4f:41:
0c:da:3f:08:97:da:9d:01:38:db:4d:a7:f3:ac:1a:67:7d:78:
31:eb:07:9e:f2:1d:6d:b4:ff:55:bd:40:24:bb:84:52:bf:d9:
01:13:77:e2:49:1d:e4:86:f9:d7:31:36:ff:e3:4d:5a:55:4a:
9f:4b:e4:d6:79:f0:ad:65:a3:31:9d:43:a8:1b:66:91:59:f6:
0c:15:43:d6:04:b6:90:e5:18:f3:0e:d1:67:7c:e4:da:9a:ca:
7b:32:53:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 12:58:16 2025 by rpki-client