Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/cd5e6486-a763-3219-a63e-d2e3d03f2b0b.roa
File: cd5e6486-a763-3219-a63e-d2e3d03f2b0b.roa (raw, json)
Hash identifier: zF71sG9d1mhekvUvGRICz574rUBkBIUxjtAwBuQ+da0=
Subject key identifier: 54:4E:7A:EE:CC:A4:B2:06:25:EC:89:4A:62:8E:0B:6F:33:69:81:2D
Certificate issuer: /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
Certificate serial: 010D0C9F43285848EF61463DD7B5DF4EAB603480
Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/cd5e6486-a763-3219-a63e-d2e3d03f2b0b.roa
Signing time: Wed 19 Feb 2025 14:00:52 +0000
ROA not before: Wed 19 Feb 2025 14:00:52 +0000
ROA not after: Tue 20 May 2025 13:00:52 +0000
asID: 16696
IP address blocks: 2606:4280::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ef:61:46:3d:d7:b5:df:4e:ab:60:34:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
Validity
Not Before: Feb 19 14:00:52 2025 GMT
Not After : May 20 13:00:52 2025 GMT
Subject: CN=3dd75c94-c9cf-4ede-b701-f326bf4f4dfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fe:e5:ed:11:8b:65:e0:d2:2b:df:a2:b3:04:7a:
13:2f:99:bd:0d:eb:ba:bd:9d:01:46:29:b6:5d:30:
7d:59:8f:e7:48:05:fc:4b:95:7f:d2:9b:f9:21:5c:
52:3f:24:c7:55:77:d6:93:6b:51:09:20:5e:b3:ef:
e0:6b:2d:32:87:bf:39:fb:cf:58:6d:e7:51:fc:a3:
43:ce:8f:4e:14:55:88:9f:75:2a:59:38:32:25:91:
ec:b5:b7:8e:c7:77:ab:03:7a:63:b9:e2:25:4a:67:
7f:88:76:fe:11:da:15:f0:24:61:de:84:c5:f4:95:
c5:77:76:84:15:c6:9e:3f:36:70:3c:88:4e:d8:98:
ba:2b:0d:48:aa:10:18:f7:76:a9:c6:9b:10:fa:4a:
b9:77:09:31:22:46:2d:0c:33:1b:88:87:c5:80:c4:
e9:85:d6:4f:4f:65:d3:49:81:6d:cb:63:a2:64:b5:
76:01:c2:a0:c8:46:71:f5:ba:3b:7d:70:81:18:55:
b6:0a:14:02:70:b0:e9:7d:3b:bd:c0:be:2a:95:07:
c6:2c:cb:0e:57:11:99:d5:51:04:7b:5d:c3:3f:a9:
91:03:cc:2c:61:cf:3c:da:70:12:34:43:d6:22:9c:
9f:cd:c1:ef:55:19:64:39:02:68:a0:dd:bb:f1:08:
db:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:4E:7A:EE:CC:A4:B2:06:25:EC:89:4A:62:8E:0B:6F:33:69:81:2D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/cd5e6486-a763-3219-a63e-d2e3d03f2b0b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl
X509v3 Authority Key Identifier:
keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
sbgp-ipAddrBlock: critical
IPv6:
2606:4280::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
85:5f:b9:da:75:36:99:61:28:fe:14:95:b5:28:72:d9:ce:d6:
37:dd:82:1b:ee:33:e7:7b:74:4e:d2:2b:95:4b:b9:ef:72:b3:
e0:31:5e:49:23:cf:d8:7b:3c:11:e5:45:42:59:a8:60:27:ec:
b2:a2:5c:7d:72:01:07:e2:8d:d9:7b:94:77:fb:fa:63:34:e1:
2a:3c:66:5c:31:45:5d:ed:71:ae:67:fc:00:ce:14:eb:3a:cb:
d4:64:b2:bd:55:d2:4e:06:df:53:0b:73:90:26:37:0b:d4:31:
42:29:24:40:66:6e:03:80:68:67:09:a6:ad:1d:b9:9a:b9:8d:
55:f1:9c:e9:7a:46:d2:43:94:80:d2:11:5a:14:1e:30:9e:6c:
11:85:2f:48:f5:f5:8f:ff:48:7d:78:c1:92:13:bb:3d:21:e5:
6a:50:25:d3:64:c7:f1:6c:ea:5b:4e:75:b8:b0:b7:47:f0:6d:
09:71:d3:c8:0e:f1:e8:b6:2a:c5:24:2f:20:a4:6a:85:80:bb:
d5:d0:c4:c4:e1:db:be:93:84:13:59:c1:34:fa:dd:26:ed:31:
c7:7c:8a:26:61:88:24:b0:57:ee:e1:6a:2b:94:77:45:a2:6a:
16:3b:9b:37:0d:58:1f:5c:e9:bc:55:d5:9f:00:83:64:9c:27:
0d:c3:5b:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 02:27:29 2025 by rpki-client