Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2ccef7a6-b8db-4753-b71f-dd2e40d58081/2ce61bfe-617a-3793-bc07-8c6b6862525e.roa
File: 2ce61bfe-617a-3793-bc07-8c6b6862525e.roa (raw, json)
Hash identifier: oXsFcCYDLYRMvDY5i2DIpeq4Su9XsM5xaQskhtgu4J4=
Subject key identifier: 7F:78:F7:F9:40:0A:20:91:71:54:6D:BF:2B:61:69:06:91:A7:38:A5
Certificate issuer: /CN=2ccef7a6-b8db-4753-b71f-dd2e40d58081
Certificate serial: 010D0C9F432858487516C57D7AFC72295450D000
Authority key identifier: E2:C2:CF:84:93:6A:CB:B4:7D:66:12:04:5C:13:88:E7:23:E3:F0:9D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2ccef7a6-b8db-4753-b71f-dd2e40d58081.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2ccef7a6-b8db-4753-b71f-dd2e40d58081/2ce61bfe-617a-3793-bc07-8c6b6862525e.roa
Signing time: Mon 06 Jan 2025 18:42:21 +0000
ROA not before: Mon 06 Jan 2025 18:42:21 +0000
ROA not after: Sun 06 Apr 2025 17:42:21 +0000
asID: 26042
IP address blocks: 2606:fc40:4010::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:75:16:c5:7d:7a:fc:72:29:54:50:d0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ccef7a6-b8db-4753-b71f-dd2e40d58081
Validity
Not Before: Jan 6 18:42:21 2025 GMT
Not After : Apr 6 17:42:21 2025 GMT
Subject: CN=ca1398c7-cd82-4cef-a0b3-6684cafa49d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:72:c2:e3:eb:52:cc:74:35:c2:1d:16:4f:f9:
3f:1c:3d:06:c3:e8:25:35:27:3e:bc:aa:b1:cb:56:
66:67:1a:0f:a2:4d:bb:eb:96:eb:73:0c:57:fd:61:
ad:2d:05:8b:b4:4f:bd:ab:a5:85:36:ac:44:20:a9:
85:91:0a:61:84:e5:1b:3f:d8:c4:b9:72:75:75:31:
7d:0f:8e:3c:d5:1e:09:e4:ee:58:16:f6:d8:35:3a:
00:c8:9b:20:72:53:5c:11:31:51:e0:6d:6c:fd:ab:
c9:83:c1:f8:ce:64:75:11:95:1b:51:f5:d6:46:dd:
25:68:e6:53:9c:43:8e:e0:bb:67:c0:46:6b:45:39:
9c:31:a3:79:ea:34:41:fd:63:f0:31:bd:57:8d:c3:
63:f5:7e:5f:58:96:91:d7:1d:6b:b2:50:77:95:f4:
51:a7:1f:06:a5:ab:38:a2:65:42:10:fa:3a:81:59:
a0:bc:62:c4:04:35:94:9b:2c:d9:7c:00:5c:26:de:
d7:5b:9d:7d:21:86:db:fb:19:77:36:a2:29:53:3d:
69:1e:e0:66:07:d2:19:4d:65:0f:0e:9f:cc:84:ea:
78:a3:60:a0:8c:a1:f0:21:de:f6:54:21:97:f8:28:
87:0c:a6:d7:f0:e6:d1:9d:49:60:74:39:9c:8f:cc:
39:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:78:F7:F9:40:0A:20:91:71:54:6D:BF:2B:61:69:06:91:A7:38:A5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2ccef7a6-b8db-4753-b71f-dd2e40d58081/2ce61bfe-617a-3793-bc07-8c6b6862525e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2ccef7a6-b8db-4753-b71f-dd2e40d58081/2ccef7a6-b8db-4753-b71f-dd2e40d58081.crl
X509v3 Authority Key Identifier:
keyid:E2:C2:CF:84:93:6A:CB:B4:7D:66:12:04:5C:13:88:E7:23:E3:F0:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2ccef7a6-b8db-4753-b71f-dd2e40d58081.cer
sbgp-ipAddrBlock: critical
IPv6:
2606:fc40:4010::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0c:48:39:77:18:7f:6f:a7:36:a1:e9:dc:da:64:e5:d3:8a:7f:
de:b7:3b:45:38:4e:23:25:06:a1:70:6e:2c:ad:fa:46:c2:3a:
1c:05:71:1e:09:0b:ee:9a:55:0d:e8:84:09:6b:64:7d:d5:d9:
c9:b3:40:2e:40:87:bf:97:c8:ac:3d:42:54:39:15:16:6a:06:
9f:a5:20:0a:56:40:7a:6d:63:dd:6a:bf:af:d3:f4:bf:01:b6:
1b:90:7b:aa:77:c3:3a:de:ad:0c:aa:b7:51:d6:f0:9b:29:c9:
23:8a:0a:a3:35:18:6a:ba:27:bc:45:63:da:be:de:9f:f5:2d:
da:12:d0:fd:32:f4:62:b3:86:c9:f8:86:7b:40:48:6d:f3:ab:
4b:9f:28:7e:e9:4c:9f:e4:04:fa:6b:02:cc:14:4e:4e:a6:c4:
9a:8f:50:cc:de:7c:20:b5:8b:7e:3b:cc:fb:b2:4e:7b:79:ef:
a9:81:9f:85:b7:4b:f7:a6:28:6c:81:64:7a:36:d7:8d:36:74:
c1:42:a4:e1:d9:c1:40:1c:db:4e:86:bf:f2:cf:50:5b:58:a9:
bb:7f:40:1a:03:f1:d8:9a:be:9b:6f:3a:5d:cb:a8:c3:40:44:
1e:aa:4f:dc:04:43:80:95:61:8c:9a:a2:6c:1f:f9:7b:4a:05:
24:02:9c:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:18:11 2025 by rpki-client