Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/1849bc6d-da2c-377f-9bd4-ff6dc638837c.roa
File: 1849bc6d-da2c-377f-9bd4-ff6dc638837c.roa (raw, json)
Hash identifier: bCSZOmchPXj6GYgLAb1yDTLAjtrB8zoVCjtLgxI2H8c=
Subject key identifier: 98:3D:FB:FD:BF:2B:63:4E:4C:FC:E4:55:3D:79:A5:EE:6A:B8:D3:29
Certificate issuer: /CN=8ac31463-974b-4676-9328-200202ae4d6e
Certificate serial: 010D0C9F432858487A20861C01E96DB9789CF980
Authority key identifier: 66:4A:CF:7A:87:80:2E:D5:96:69:93:6E:0E:BD:6C:EA:41:57:66:F6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/1849bc6d-da2c-377f-9bd4-ff6dc638837c.roa
Signing time: Wed 08 Jan 2025 14:00:51 +0000
ROA not before: Wed 08 Jan 2025 14:00:51 +0000
ROA not after: Tue 08 Apr 2025 13:00:51 +0000
asID: 33211
IP address blocks: 2606:ca40::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7a:20:86:1c:01:e9:6d:b9:78:9c:f9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ac31463-974b-4676-9328-200202ae4d6e
Validity
Not Before: Jan 8 14:00:51 2025 GMT
Not After : Apr 8 13:00:51 2025 GMT
Subject: CN=6ef0ef0f-fad3-4103-b01c-aef9bb93a6e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:4a:5f:0c:3a:50:54:4f:21:ce:91:4b:1e:ea:
0d:e2:0e:37:82:87:29:ea:70:77:b6:7e:ac:65:12:
ac:12:b6:8e:15:bf:d4:5b:0a:1c:45:da:42:17:17:
f1:93:46:bc:c7:eb:d6:1e:71:84:d5:62:5a:20:16:
05:74:b2:bd:cb:7a:2d:38:a1:a8:22:38:7a:1f:20:
53:a8:7b:b5:fa:90:e5:24:05:17:18:b6:d2:6a:98:
fa:70:0c:a1:79:45:67:0c:a7:fa:34:d2:a1:9f:1b:
bc:9d:91:fd:9f:a5:bb:ff:1b:b5:f5:ba:68:a6:26:
e4:53:7c:4d:ec:5c:56:e9:03:47:fd:32:94:a0:b0:
6b:b3:6d:ce:19:f0:46:6b:7b:80:2a:43:47:46:0c:
d8:45:63:4f:80:e5:6a:29:53:58:07:a5:a3:7d:84:
06:cc:7f:d4:5f:f0:b4:b1:2a:da:b3:c4:43:76:c3:
e5:93:3f:e0:af:21:87:95:85:c9:0e:c2:93:47:72:
e2:ed:46:0c:6e:01:1a:2c:57:e7:e1:6f:43:5e:38:
48:cf:38:32:de:9b:52:15:08:9c:e7:7c:07:53:3c:
ef:32:91:5e:58:9e:ed:08:07:95:b4:52:31:97:1d:
a8:16:c4:98:94:a4:24:5c:65:c4:9e:a6:2b:00:b8:
f7:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:3D:FB:FD:BF:2B:63:4E:4C:FC:E4:55:3D:79:A5:EE:6A:B8:D3:29
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/1849bc6d-da2c-377f-9bd4-ff6dc638837c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/8ac31463-974b-4676-9328-200202ae4d6e.crl
X509v3 Authority Key Identifier:
keyid:66:4A:CF:7A:87:80:2E:D5:96:69:93:6E:0E:BD:6C:EA:41:57:66:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e.cer
sbgp-ipAddrBlock: critical
IPv6:
2606:ca40::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
22:5f:fd:fd:f8:9d:96:71:d1:8b:3f:0c:3a:06:0d:8d:a5:dd:
57:04:d7:7a:06:5b:57:2d:31:5b:8e:b9:ee:95:72:7d:8e:98:
70:cb:3e:47:74:14:bc:0a:28:90:b8:fb:8f:21:06:48:ca:f1:
a7:2f:08:9b:6a:10:fe:81:74:e6:5d:31:17:81:46:a9:ca:df:
3a:5b:dd:71:58:21:98:ee:8d:12:b8:a1:18:fc:9c:d7:15:5b:
b0:89:70:8f:d4:88:2b:d9:a3:8d:5b:fe:43:21:d2:fb:95:bd:
72:c7:e7:4c:2b:45:50:7d:7c:7f:0b:7e:be:a9:31:b8:a4:01:
85:7a:0d:be:7a:d7:70:d7:28:0a:32:68:35:82:ec:0d:94:0a:
1c:c8:b3:e9:d8:0c:59:35:47:fc:30:2b:7e:c7:bf:c1:49:29:
ee:30:be:6d:9c:be:8c:df:4e:6d:8c:d5:c8:8d:c0:0e:ca:5d:
8c:c6:80:73:7a:f7:ae:77:f4:c0:dd:1f:4d:88:b1:8b:bd:a0:
cb:a9:aa:71:f3:60:d8:00:f9:11:71:d7:cb:da:77:3a:40:d3:
19:87:85:80:f9:c8:cf:f1:63:3f:3c:e9:78:d0:19:2b:22:d4:
db:81:60:61:e0:e3:12:d6:0c:e4:40:90:26:ba:f6:0c:15:86:
be:6e:97:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:17:48 2025 by rpki-client