Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862/49d683be-66f8-377d-a186-a8dd9c3ad5c5.roa
File: 49d683be-66f8-377d-a186-a8dd9c3ad5c5.roa (raw, json)
Hash identifier: ZXMjYp33WpzR5hy+EwaPxPCl2mjp3M8+sFKKsTBEd78=
Subject key identifier: 1F:9A:7F:8D:D1:3A:26:FE:8B:07:60:AB:5D:60:44:C1:A8:35:7D:FF
Certificate issuer: /CN=d9f29a16-e7b1-40c8-87bc-34e2c5624862
Certificate serial: 010D0C9F43285849088175F797302EB53BADF4B0
Authority key identifier: DB:FA:83:FE:6D:96:CD:CC:6C:DE:3A:15:B4:20:98:9D:63:D7:B6:33
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862/49d683be-66f8-377d-a186-a8dd9c3ad5c5.roa
Signing time: Fri 28 Feb 2025 14:00:52 +0000
ROA not before: Fri 28 Feb 2025 14:00:52 +0000
ROA not after: Thu 29 May 2025 13:00:52 +0000
asID: 14618
IP address blocks: 2606:3dc0:2000::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:08:81:75:f7:97:30:2e:b5:3b:ad:f4:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f29a16-e7b1-40c8-87bc-34e2c5624862
Validity
Not Before: Feb 28 14:00:52 2025 GMT
Not After : May 29 13:00:52 2025 GMT
Subject: CN=eb1c82f9-a51b-4176-8eef-96b3e1aacec1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:c0:de:92:63:3c:0e:9b:ed:74:58:3c:8c:15:
d8:e3:63:3e:81:2c:7a:6e:2c:02:32:50:23:bf:c8:
ab:d6:77:4e:65:2f:e5:d5:49:fd:4b:df:f4:db:5f:
a2:c3:9c:77:fd:55:66:33:d3:1e:04:c9:7c:3e:63:
91:66:54:2d:34:6d:80:73:7e:81:60:59:a9:d7:c6:
fe:3a:69:d9:80:ec:9a:a9:46:9e:b9:7b:f4:5e:78:
6a:de:f8:8c:4b:ac:ca:e2:be:4b:77:6c:b7:fb:95:
a3:d4:0c:44:00:e5:30:96:a6:ac:1d:14:89:49:6d:
7b:ce:8a:b1:83:a1:eb:fc:62:55:b8:82:97:c0:7e:
46:2a:0f:c9:86:37:23:4c:76:de:cc:6f:dc:56:74:
4f:cf:7b:71:ac:90:23:30:01:68:ec:39:56:86:6e:
ad:4c:9f:f7:3b:bd:df:f5:07:40:26:59:3d:d5:d4:
e5:e6:49:8b:2d:c6:1f:31:6f:ab:27:2b:79:b4:20:
04:3d:b5:a6:d6:8f:04:84:75:53:26:a1:77:b2:d7:
58:20:1a:48:4a:84:4a:f5:56:e5:46:eb:77:b9:5d:
19:1b:2c:56:68:a3:4f:34:53:75:c0:0b:95:3e:c9:
c6:92:01:83:dd:c3:1f:21:c9:85:6c:c7:69:68:23:
38:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:9A:7F:8D:D1:3A:26:FE:8B:07:60:AB:5D:60:44:C1:A8:35:7D:FF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862/49d683be-66f8-377d-a186-a8dd9c3ad5c5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862/d9f29a16-e7b1-40c8-87bc-34e2c5624862.crl
X509v3 Authority Key Identifier:
keyid:DB:FA:83:FE:6D:96:CD:CC:6C:DE:3A:15:B4:20:98:9D:63:D7:B6:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862.cer
sbgp-ipAddrBlock: critical
IPv6:
2606:3dc0:2000::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bc:13:f6:0c:d7:a1:24:cb:28:31:32:57:01:5b:0d:79:c3:c0:
db:b2:d0:5d:8c:99:55:1d:e4:38:92:f0:49:fe:2e:ab:b0:3e:
0d:f2:ea:a7:8d:59:d7:37:d3:57:ba:f5:6a:79:ab:ea:54:3e:
13:0d:f9:14:f5:98:fe:d4:94:96:9b:a7:af:9f:31:35:c5:d4:
89:4c:45:7c:56:71:ec:6d:a8:30:6f:ff:3f:e7:eb:ac:b7:0b:
af:fd:f5:e2:3b:31:10:c0:dd:22:24:5d:a5:72:47:79:af:d9:
1b:0d:1d:38:63:c9:e9:4e:0f:0d:88:be:60:cb:d7:34:2d:a0:
42:ce:dc:9a:88:f8:63:25:16:3a:f3:ff:74:69:fe:69:31:c5:
ca:d4:8e:4b:51:8e:6d:e1:43:a4:48:c0:a3:99:1f:a7:36:f2:
d8:51:b9:fa:92:33:de:49:17:e9:07:11:fa:54:5c:3c:02:e4:
07:96:1d:36:95:7e:61:2f:f9:ea:25:3a:71:1a:3e:f8:6a:c1:
b8:e4:19:e5:21:d6:ec:1c:f9:dc:d0:6e:38:00:66:7e:9f:ce:
45:c4:50:09:32:dc:a2:cd:c4:4e:a5:59:6c:52:7c:89:5c:02:
88:dd:ca:81:8a:7c:da:a7:23:a9:eb:3d:f8:68:0c:8a:ff:77:
11:26:dc:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:34:01 2025 by rpki-client