Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/646c2563-2115-31ff-a20b-29fb4944a248.roa
File: 646c2563-2115-31ff-a20b-29fb4944a248.roa (raw, json)
Hash identifier: uUyCf/nuH2Oevw8OwO7u7YWoiYFQoq+uPnoy65Gf+J8=
Subject key identifier: AC:A9:0A:2A:09:DB:7C:5D:B1:34:76:24:A6:E0:75:5F:FA:62:0D:83
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584910E17C459BD0B886D9F2B400
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/646c2563-2115-31ff-a20b-29fb4944a248.roa
Signing time: Mon 03 Mar 2025 14:00:53 +0000
ROA not before: Mon 03 Mar 2025 14:00:53 +0000
ROA not after: Sun 01 Jun 2025 13:00:53 +0000
asID: 13335
IP address blocks: 2606:4700:a8::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:10:e1:7c:45:9b:d0:b8:86:d9:f2:b4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Mar 3 14:00:53 2025 GMT
Not After : Jun 1 13:00:53 2025 GMT
Subject: CN=695286b8-2d79-441d-b2fc-3b10b458e8b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:31:0d:a0:09:97:c8:09:3d:eb:1a:51:28:f4:
b1:d4:84:89:5b:fb:0d:1b:74:6e:4d:f0:c6:14:f3:
fa:c1:46:0d:ec:67:34:da:d1:b7:5c:d0:e5:8b:66:
56:af:d7:a5:bc:96:5b:d2:83:c0:3d:a3:e9:6d:cf:
6d:5a:0a:c4:46:d9:13:62:a7:98:c2:f0:9d:18:53:
e8:48:ef:15:85:f6:63:6e:9e:ae:32:af:d3:8f:25:
57:85:aa:49:e9:91:0c:0b:06:52:7d:ef:de:72:fb:
56:76:51:81:10:3a:86:44:fa:ae:c1:1c:1b:1d:90:
56:ec:97:64:7b:03:a8:ab:1f:8a:41:10:25:03:48:
4e:09:11:c2:08:3f:97:40:62:70:3b:c8:97:87:07:
5d:37:de:04:eb:ed:0f:7a:77:16:d2:86:31:a9:b4:
cb:d5:fd:9f:52:e7:dd:e0:24:1b:38:42:96:0f:f9:
48:76:5e:fc:5c:46:bd:ca:bb:16:9f:25:b1:e3:48:
10:7a:27:d7:39:ce:a2:ee:d3:05:79:78:d0:c9:d0:
c0:6b:d9:53:41:27:62:54:eb:e9:f7:58:14:91:79:
01:c1:1b:0d:6c:c0:6c:26:6d:75:0d:3d:4b:9e:26:
26:50:aa:e2:2a:13:ca:49:04:68:54:14:a7:0c:20:
07:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:A9:0A:2A:09:DB:7C:5D:B1:34:76:24:A6:E0:75:5F:FA:62:0D:83
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/646c2563-2115-31ff-a20b-29fb4944a248.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv6:
2606:4700:a8::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
94:22:58:01:f2:ce:12:be:4a:dd:3c:3e:89:a9:f0:a1:66:a8:
76:ec:46:5c:a2:9b:a1:ed:f0:02:79:02:f5:af:dc:28:e1:b5:
a2:67:65:4b:c4:e1:ac:96:13:39:ce:fc:e4:ab:fa:02:7c:cf:
dc:a9:21:74:3c:63:0a:90:0f:07:62:ef:b5:3e:9a:43:13:8f:
61:f0:46:7e:96:0d:33:0d:59:11:6f:ed:c9:be:a1:67:6f:6e:
70:f7:e7:8f:33:dd:3c:51:7c:7b:35:9b:8b:80:ae:c2:23:fa:
bd:89:19:72:2c:92:c9:98:77:cd:5f:df:96:ce:05:93:76:46:
85:b2:26:59:a7:52:33:5e:98:cb:02:53:d4:93:08:f0:e5:f8:
c6:a3:3a:44:19:b6:6f:05:14:1a:34:b7:ec:24:56:30:35:cf:
f5:d2:6e:6b:17:37:2e:3c:c1:f4:c1:e2:ad:d8:75:af:f9:a8:
f9:30:0f:7d:44:c8:6b:20:99:b3:43:01:4c:ed:3c:b6:90:ce:
b5:78:88:40:2a:50:c5:3b:22:67:4b:b8:b0:22:53:5f:8b:be:
55:ab:b2:4f:94:15:6f:fe:d9:65:f8:a5:74:a7:7f:bd:0d:48:
90:f5:4a:ce:ea:b6:f1:1c:7d:81:65:43:a4:5f:61:56:1b:3f:
21:d3:c0:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:09:17 2025 by rpki-client