Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9f9f8692-a65b-4699-996f-10ad41fccc8e/11400b5d-f7cd-36e7-a620-4a293525a0c2.roa
File: 11400b5d-f7cd-36e7-a620-4a293525a0c2.roa (raw, json)
Hash identifier: ABtznXkXja8XTrPiYbzuLxHrJzbYNOUfQdawIhGGLMQ=
Subject key identifier: 26:F4:20:8A:6F:B1:8D:C3:83:E2:AB:30:7A:AE:A0:D0:3E:89:F8:86
Certificate issuer: /CN=9f9f8692-a65b-4699-996f-10ad41fccc8e
Certificate serial: 010D0C9F432858446E647822197788E0D682BC00
Authority key identifier: 3C:D9:E1:49:D9:F4:73:93:AF:63:C7:69:9B:A7:83:C2:EF:73:4C:1B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9f9f8692-a65b-4699-996f-10ad41fccc8e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9f9f8692-a65b-4699-996f-10ad41fccc8e/11400b5d-f7cd-36e7-a620-4a293525a0c2.roa
Signing time: Wed 03 Jan 2024 14:00:21 +0000
ROA not before: Wed 03 Jan 2024 14:00:21 +0000
ROA not after: Tue 02 Apr 2024 13:00:21 +0000
asID: 396982
IP address blocks: 2604:b040:11::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:6e:64:78:22:19:77:88:e0:d6:82:bc:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f9f8692-a65b-4699-996f-10ad41fccc8e
Validity
Not Before: Jan 3 14:00:21 2024 GMT
Not After : Apr 2 13:00:21 2024 GMT
Subject: CN=5d6972d8-8cea-4344-a313-298fe0bed9e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:14:5d:42:34:fb:71:72:8b:b3:8e:c9:e9:e0:
36:a7:e1:a2:b4:fc:59:c1:86:3b:e7:20:3c:f8:0e:
b1:39:18:35:0f:1f:1b:e3:77:95:cc:ca:43:ba:14:
61:7d:1a:c5:1b:87:23:9f:c1:4a:61:f0:94:a5:49:
a1:0a:ab:cf:44:22:52:64:e2:fe:9e:1a:44:75:ad:
81:0f:72:d0:0f:fa:53:65:ac:d6:70:c7:0e:f0:20:
85:57:a0:40:1a:90:a2:8c:3e:36:ba:ca:a0:9d:60:
a0:d3:4e:39:70:04:7b:fe:2f:13:bf:31:3a:01:9c:
3c:90:64:45:e9:dd:15:e5:c5:ba:15:d9:58:11:d3:
f7:d7:52:b1:e2:23:3e:dc:08:51:19:61:c2:58:3d:
ff:86:e7:fa:4f:6c:cc:5e:2d:02:fe:0a:9d:85:fd:
92:0b:b4:fe:16:97:fc:97:4e:db:55:90:2e:0e:3a:
c5:c0:df:2e:1f:0b:13:a1:cb:1f:05:de:8c:b4:52:
60:b7:93:65:ec:05:1e:7a:9c:aa:e6:5a:b4:21:30:
03:a3:df:ad:e8:18:b8:34:d1:7c:4d:b8:66:1c:c6:
79:64:05:eb:a3:bc:d7:fd:5b:56:4a:c2:98:15:24:
fe:ac:7f:12:13:e9:9b:65:70:d6:f7:0d:cf:d8:c1:
6a:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:F4:20:8A:6F:B1:8D:C3:83:E2:AB:30:7A:AE:A0:D0:3E:89:F8:86
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9f9f8692-a65b-4699-996f-10ad41fccc8e/11400b5d-f7cd-36e7-a620-4a293525a0c2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9f9f8692-a65b-4699-996f-10ad41fccc8e/9f9f8692-a65b-4699-996f-10ad41fccc8e.crl
X509v3 Authority Key Identifier:
keyid:3C:D9:E1:49:D9:F4:73:93:AF:63:C7:69:9B:A7:83:C2:EF:73:4C:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9f9f8692-a65b-4699-996f-10ad41fccc8e.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:b040:11::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3c:51:41:b4:ba:58:99:11:98:20:e2:fb:d3:7b:f8:b2:a1:70:
e5:6e:24:09:40:02:d0:a9:8c:f8:7e:d2:e4:2c:8c:9b:c5:f2:
73:92:88:22:8c:ad:5b:9b:94:84:66:0c:81:1c:21:07:63:1b:
a0:85:1f:53:ba:c1:22:db:94:a4:68:9b:93:4b:d3:28:c4:f5:
84:36:bc:77:f4:b2:5c:27:9c:69:1a:a2:9e:8b:13:7d:32:96:
70:fb:c4:b8:ed:4e:9d:09:31:cd:b7:a1:90:9a:f8:2b:4b:19:
5d:81:50:b6:e7:e5:9b:59:ee:dc:e4:74:eb:50:12:e2:83:7e:
c6:c3:88:09:18:0b:0f:b9:97:36:8d:fb:a6:3b:43:f4:bc:53:
e7:f5:46:f6:62:e3:b7:cb:22:0f:bd:e7:9e:e9:c2:34:e9:8e:
eb:81:10:e6:dd:4e:5a:77:d3:73:26:d7:37:dd:eb:ec:c9:d5:
d1:dc:6d:60:d1:b8:97:6e:25:63:d9:46:9d:60:cd:16:46:81:
34:85:21:89:19:68:45:a0:81:3e:34:08:91:45:1a:4b:33:72:
93:05:f1:f2:0c:09:2d:e5:a9:d9:d4:aa:b5:31:af:a0:fb:a2:
f3:72:c6:2b:8e:67:46:32:26:89:60:f4:59:52:e4:9a:b2:b9:
da:cf:16:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:42:57 2025 by rpki-client