Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2ccef7a6-b8db-4753-b71f-dd2e40d58081/0aefb46e-9d26-38f5-b6d1-39b4960a1cec.roa
File: 0aefb46e-9d26-38f5-b6d1-39b4960a1cec.roa (raw, json)
Hash identifier: lPTslayGwueu5eWJiVa4Bx8HEgVMm2jbAIRxM5zuF7Y=
Subject key identifier: CA:7A:A1:B6:54:17:C5:E6:04:C8:FB:50:2F:D6:42:B3:FD:71:DC:31
Certificate issuer: /CN=2ccef7a6-b8db-4753-b71f-dd2e40d58081
Certificate serial: 010D0C9F4328584882808C69FFAE5C05D7351100
Authority key identifier: E2:C2:CF:84:93:6A:CB:B4:7D:66:12:04:5C:13:88:E7:23:E3:F0:9D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2ccef7a6-b8db-4753-b71f-dd2e40d58081.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2ccef7a6-b8db-4753-b71f-dd2e40d58081/0aefb46e-9d26-38f5-b6d1-39b4960a1cec.roa
Signing time: Sat 11 Jan 2025 14:00:52 +0000
ROA not before: Sat 11 Jan 2025 14:00:52 +0000
ROA not after: Fri 11 Apr 2025 13:00:52 +0000
asID: 398395
IP address blocks: 2606:fc40:40::/42 maxlen: 42
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:82:80:8c:69:ff:ae:5c:05:d7:35:11:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ccef7a6-b8db-4753-b71f-dd2e40d58081
Validity
Not Before: Jan 11 14:00:52 2025 GMT
Not After : Apr 11 13:00:52 2025 GMT
Subject: CN=f73d8eb1-5517-4900-8731-a40100092faa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:1e:3e:fd:38:cc:4f:40:cc:cc:7f:6f:39:9f:
e5:68:1d:2d:39:8a:57:e2:1b:6e:8b:e4:f6:43:e9:
1f:56:10:d6:f8:5a:7b:bd:ee:be:a7:b2:dd:0d:43:
f1:fb:54:9d:70:04:4b:59:8b:96:c3:71:28:37:e7:
10:28:dc:a8:ef:2d:bb:69:7d:80:17:ae:f2:41:e4:
39:a3:9a:ce:0c:4c:49:64:81:bb:06:c7:1b:8d:07:
9c:ae:70:12:67:7a:ba:ce:b4:cf:8a:43:08:f6:a9:
d2:f2:ea:6f:df:51:23:15:75:75:40:bc:33:33:d3:
bb:63:54:18:f0:ed:12:1b:5f:f0:1f:d1:07:31:22:
3c:fa:7c:b0:4a:63:e9:c9:aa:34:7e:bd:57:1d:0c:
da:7b:32:60:34:bc:7b:bd:e6:b0:88:2b:5a:1b:73:
28:10:e1:d3:bf:78:7a:8b:e7:ce:84:c0:70:a9:9f:
be:24:3a:a4:be:f8:bc:82:f2:c0:76:fe:db:9a:7d:
aa:21:d9:0e:dc:29:4e:25:05:a6:c2:0f:1f:3d:2d:
1b:78:25:87:28:79:26:0e:40:5f:f9:66:04:24:90:
c8:e8:03:4b:85:0f:bb:bf:ee:c3:f4:e3:5e:1e:84:
aa:82:6d:73:6c:62:6e:90:d3:98:ed:03:63:e1:c5:
16:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:7A:A1:B6:54:17:C5:E6:04:C8:FB:50:2F:D6:42:B3:FD:71:DC:31
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2ccef7a6-b8db-4753-b71f-dd2e40d58081/0aefb46e-9d26-38f5-b6d1-39b4960a1cec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2ccef7a6-b8db-4753-b71f-dd2e40d58081/2ccef7a6-b8db-4753-b71f-dd2e40d58081.crl
X509v3 Authority Key Identifier:
keyid:E2:C2:CF:84:93:6A:CB:B4:7D:66:12:04:5C:13:88:E7:23:E3:F0:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2ccef7a6-b8db-4753-b71f-dd2e40d58081.cer
sbgp-ipAddrBlock: critical
IPv6:
2606:fc40:40::/42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
77:61:fd:65:c1:81:e0:2c:61:1e:ff:09:07:e4:6b:b5:ef:16:
b9:a5:ba:4d:2c:7d:7a:88:6c:67:25:59:b2:9c:e6:3d:68:d1:
22:2a:bd:ed:8a:5c:8c:a7:48:7f:fe:3a:c7:d7:6b:8b:f2:09:
a7:c0:de:2a:f7:07:21:6a:4e:b8:9a:19:ec:60:62:84:56:9f:
06:8d:93:c5:e6:00:fe:ff:f5:df:58:bd:fb:2e:84:b1:07:6d:
fe:c7:f6:38:af:bb:63:61:0f:71:2a:4d:34:d4:e0:07:c2:ca:
92:90:a3:4f:f5:12:05:22:ce:47:7d:09:9b:9f:0c:43:35:e5:
01:84:d2:35:3e:9e:1d:cc:0a:89:63:2d:3e:2d:24:ac:61:7c:
ed:56:eb:ef:79:3a:61:98:9f:2b:f0:59:61:35:5d:b0:8b:08:
ca:bf:0f:d3:21:09:e2:5c:5b:df:6a:43:ea:1f:cf:c2:aa:4d:
47:97:20:05:51:91:e8:aa:61:34:59:91:05:3a:04:22:1a:d8:
e6:e0:16:de:30:d7:10:37:71:19:42:d3:35:75:93:94:df:99:
d4:23:b7:e5:a9:38:b5:4f:39:43:be:64:fa:b3:14:c3:15:c1:
8b:b7:fc:62:a1:8c:1f:99:3c:29:4d:1b:1e:52:96:15:79:3a:
75:df:df:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:39:40 2025 by rpki-client