Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/0ec5dc92-60dd-3a61-b89c-f705dbad6162.roa
File: 0ec5dc92-60dd-3a61-b89c-f705dbad6162.roa (raw, json)
Hash identifier: lDk1gnPoDKoNRmNdVtdlwiGg5c4PylEnXMgD7SWg/2M=
Subject key identifier: 1A:D2:80:F9:2C:58:B2:FB:A9:37:78:4E:CC:71:FB:7C:0F:F9:54:5D
Certificate issuer: /CN=4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf
Certificate serial: 010D0C9F43285848B4C0D0C929557AABA53F6680
Authority key identifier: D8:2B:96:CD:C2:38:E4:0E:17:FA:7A:F5:14:C2:56:60:9D:D2:71:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/0ec5dc92-60dd-3a61-b89c-f705dbad6162.roa
Signing time: Wed 29 Jan 2025 14:00:51 +0000
ROA not before: Wed 29 Jan 2025 14:00:51 +0000
ROA not after: Tue 29 Apr 2025 13:00:51 +0000
asID: 4213
IP address blocks: 2604:4040::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b4:c0:d0:c9:29:55:7a:ab:a5:3f:66:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf
Validity
Not Before: Jan 29 14:00:51 2025 GMT
Not After : Apr 29 13:00:51 2025 GMT
Subject: CN=bca7cb8a-310f-443d-9897-85e9b77ef9da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:5c:f1:e1:e2:82:9f:29:0b:4e:19:8d:30:00:
68:34:0f:61:32:2a:9c:41:ec:d5:cf:4e:9a:4d:ec:
be:e3:27:3d:04:fa:36:9e:26:42:b7:5a:eb:86:65:
b1:bc:f2:2f:9e:f2:38:14:ba:7d:a5:fb:34:e4:4d:
59:1d:29:c7:07:fd:cf:b4:8c:d1:b1:2f:80:22:33:
ff:f5:de:eb:7a:3f:4a:a9:43:c7:38:c1:b5:3c:cd:
dc:1f:ad:17:6d:d1:a1:bb:48:d2:27:a1:b4:db:d3:
24:66:6a:66:b0:0f:97:c9:3e:d4:3d:57:82:5f:25:
09:71:c2:ef:08:bb:2a:9a:8e:d1:7c:a3:24:e4:60:
55:60:04:2b:e3:59:c0:8b:8a:a8:06:99:4d:89:bd:
e0:15:23:a8:67:fa:67:cb:25:80:78:b7:69:39:5e:
c2:d4:3f:a4:96:2d:b2:68:aa:fe:87:2a:e0:b1:9d:
aa:58:75:fc:9e:9a:78:74:96:8c:03:e3:77:9b:3e:
fc:e4:33:83:f0:3b:29:bd:df:07:81:98:68:b6:14:
8d:df:69:57:8a:43:3f:c1:5b:01:80:50:a3:1a:25:
c9:fe:e0:02:4e:7c:d4:ee:f6:7f:35:aa:87:54:fb:
eb:cb:71:66:06:55:9f:e8:c5:5c:f0:cb:ac:3d:48:
a7:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:D2:80:F9:2C:58:B2:FB:A9:37:78:4E:CC:71:FB:7C:0F:F9:54:5D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/0ec5dc92-60dd-3a61-b89c-f705dbad6162.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.crl
X509v3 Authority Key Identifier:
keyid:D8:2B:96:CD:C2:38:E4:0E:17:FA:7A:F5:14:C2:56:60:9D:D2:71:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:4040::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0f:75:2d:8c:d4:20:92:66:0f:4e:08:90:a7:17:94:84:9e:ad:
5d:23:7f:17:79:13:0c:c4:03:c6:af:f1:3e:e7:6e:fe:ef:cc:
2d:88:5d:39:39:43:3d:df:25:6b:96:01:c9:77:50:6c:44:f7:
33:52:ef:86:61:d9:58:bf:33:de:46:8b:12:bb:1c:3c:c2:01:
29:a9:d5:25:23:29:67:af:5e:10:09:83:40:e7:ff:30:9e:86:
fc:ef:67:06:51:2c:21:f6:9f:2e:72:2d:e6:b6:8b:b2:5c:43:
3b:91:1f:55:c9:9b:92:25:02:ed:54:29:0b:a1:1b:c1:b4:4a:
61:96:0d:8d:e8:24:d7:ed:44:d4:a6:12:4a:13:cd:eb:1f:60:
7c:7e:c0:a4:a8:4b:a1:c0:9f:42:af:0e:fa:43:0c:18:5e:f2:
cf:f6:c9:b9:df:6f:7e:ae:94:f9:fe:65:ed:e2:ba:40:e6:3c:
48:9e:a2:d7:77:63:de:05:69:f9:b4:d0:c3:0d:af:e4:6c:06:
9a:0f:2f:5e:81:35:8e:0c:94:cc:38:3b:78:9a:e3:7a:10:89:
3c:b7:da:4c:38:94:3c:b7:47:6e:bf:07:e1:3f:cb:04:82:75:
bf:0b:ab:23:5c:ed:88:96:5b:32:52:f0:00:dc:1d:df:95:d7:
90:b0:f4:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 05:24:58 2025 by rpki-client