Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/cafbf9d6-fd0b-3826-b135-bb285fa61823.roa
File: cafbf9d6-fd0b-3826-b135-bb285fa61823.roa (raw, json)
Hash identifier: Y29k4JhVIhdva+XT/mN0EgNKz1l19nnqeux3gcbn7p8=
Subject key identifier: 45:03:DB:3C:41:F5:72:C6:80:BD:0C:72:ED:96:9A:CB:3A:F1:CC:AF
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F432858491941728670875E6C78753520
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/cafbf9d6-fd0b-3826-b135-bb285fa61823.roa
Signing time: Thu 06 Mar 2025 14:00:52 +0000
ROA not before: Thu 06 Mar 2025 14:00:52 +0000
ROA not after: Wed 04 Jun 2025 13:00:52 +0000
asID: 13335
IP address blocks: 2606:4700:4000::/45 maxlen: 45
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:19:41:72:86:70:87:5e:6c:78:75:35:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Mar 6 14:00:52 2025 GMT
Not After : Jun 4 13:00:52 2025 GMT
Subject: CN=346ff1fa-8fec-4eb1-8671-35c35bcf7c78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e0:35:e0:d4:fa:54:a1:6f:c9:5f:d2:c4:ec:
76:82:a6:6e:20:dd:a3:2e:fd:ef:c6:62:71:e6:aa:
47:e7:c8:d5:45:c8:6c:fb:03:4a:72:6b:44:8a:d9:
3a:ef:ab:2d:91:03:ee:71:b3:51:75:a3:83:78:2a:
c6:22:f5:41:25:01:5a:5a:47:18:8c:cc:2b:04:59:
e2:22:9b:d3:53:ad:92:56:ff:56:56:44:0a:6b:2b:
c9:84:f8:88:23:2c:c9:8b:13:d9:b3:0e:a1:d4:c5:
12:a9:d6:5b:c6:d1:aa:8c:4a:0d:a3:bd:c7:3c:99:
c3:d8:4f:34:a7:b1:31:83:54:c3:be:e3:d6:3e:18:
e8:a7:58:88:3a:0b:77:a8:59:9c:4b:39:78:b3:cc:
b4:87:19:55:cc:b2:74:ff:d7:66:ef:46:24:e7:ff:
25:d4:b9:e8:4a:6f:43:5b:a9:e4:7d:c4:cf:42:59:
e4:a7:c9:a8:c4:02:13:01:13:99:63:46:57:72:96:
a3:7b:be:cf:5c:95:dd:e3:d5:e3:5e:98:d2:f5:83:
52:8c:89:6c:af:10:6f:26:51:2b:b0:9b:af:44:a1:
ac:39:ab:23:54:b4:3b:e8:21:58:43:9f:8d:74:e7:
3d:0d:4c:2f:bd:e1:b8:66:53:bb:76:51:16:03:55:
eb:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:03:DB:3C:41:F5:72:C6:80:BD:0C:72:ED:96:9A:CB:3A:F1:CC:AF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/cafbf9d6-fd0b-3826-b135-bb285fa61823.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv6:
2606:4700:4000::/45
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
48:00:8b:f4:4b:ec:ce:02:9f:fa:f9:4a:ff:52:80:a4:19:73:
c1:26:3e:b8:e8:da:8c:7c:90:8c:1b:94:2f:ac:66:cd:c0:83:
88:c2:e2:f0:7f:e8:f3:40:25:ff:71:77:7c:cc:0c:e6:8b:fb:
c0:a8:e4:87:5c:83:17:e5:26:13:5f:c0:9a:40:5f:41:da:31:
a8:45:e0:df:e1:69:67:19:89:b3:81:8f:ac:9c:d0:af:fa:dd:
a0:66:a8:80:ac:42:ae:42:d4:91:9e:12:3b:fc:16:72:7a:aa:
10:a4:d8:8c:94:72:c6:e1:00:e9:cb:0b:12:9a:15:dd:3c:a8:
f0:bf:3b:7a:80:59:6e:42:4b:5a:ac:45:fb:90:a2:75:78:64:
61:08:32:d4:94:d1:82:71:40:28:ec:57:87:d9:f8:99:d0:82:
9f:c2:c2:62:95:24:8f:9f:a9:09:4d:e4:1c:b4:72:02:9d:be:
bf:3f:90:a0:44:59:d4:2a:7e:fe:69:b7:5c:45:39:e9:2f:77:
ab:06:69:38:1f:43:29:94:8f:1b:77:09:55:df:f1:1e:f1:cc:
5b:77:87:3c:f5:2b:7a:a5:6b:77:da:07:d9:fa:8e:15:ca:50:
56:51:f2:34:70:89:ea:85:ac:b9:c5:28:45:84:a7:d1:7a:af:
90:59:9a:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:59:41 2025 by rpki-client