Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2ccef7a6-b8db-4753-b71f-dd2e40d58081/9465f03a-4a7a-309d-88aa-da4fc03e089e.roa
File: 9465f03a-4a7a-309d-88aa-da4fc03e089e.roa (raw, json)
Hash identifier: 6d5FwoXxm5ajPhnjpzyNaJ5uHJLQC7GUaqP6PSfnztw=
Subject key identifier: 41:EA:FB:C2:33:7A:85:05:15:AB:1B:7F:03:EC:9F:95:F3:02:72:21
Certificate issuer: /CN=2ccef7a6-b8db-4753-b71f-dd2e40d58081
Certificate serial: 010D0C9F43285848A29B458D972BC8141E0D0E00
Authority key identifier: E2:C2:CF:84:93:6A:CB:B4:7D:66:12:04:5C:13:88:E7:23:E3:F0:9D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2ccef7a6-b8db-4753-b71f-dd2e40d58081.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2ccef7a6-b8db-4753-b71f-dd2e40d58081/9465f03a-4a7a-309d-88aa-da4fc03e089e.roa
Signing time: Thu 23 Jan 2025 02:00:40 +0000
ROA not before: Thu 23 Jan 2025 02:00:40 +0000
ROA not after: Wed 23 Apr 2025 01:00:40 +0000
asID: 31786
IP address blocks: 2606:fc40:4001::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a2:9b:45:8d:97:2b:c8:14:1e:0d:0e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ccef7a6-b8db-4753-b71f-dd2e40d58081
Validity
Not Before: Jan 23 02:00:40 2025 GMT
Not After : Apr 23 01:00:40 2025 GMT
Subject: CN=31b0f638-8878-4218-864f-b3f54f647661
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:df:10:58:30:44:5a:dd:b8:02:e2:bc:d2:41:
d1:15:fd:84:c6:14:da:d1:1b:45:70:1e:fc:70:b4:
f8:f0:19:d5:97:b4:46:b6:9c:24:77:f9:7a:c5:4d:
aa:0b:d4:76:8f:32:38:ba:a9:0b:6d:81:96:4d:56:
db:9a:df:2b:06:53:14:07:ac:cf:10:f1:f0:e7:a3:
a0:f8:69:3c:d6:fd:a5:43:f5:3d:7e:bf:cf:2a:97:
d4:4b:ce:17:f9:03:fa:74:6a:c1:76:a7:04:4a:b2:
e9:1b:09:3c:6b:7a:f1:68:5e:10:c1:ea:52:60:c2:
3d:45:50:e6:f5:1b:77:6b:b3:2b:3d:9e:25:20:93:
68:77:6e:ea:87:20:be:99:94:1f:a7:8a:7a:ef:19:
f9:ed:aa:cf:d5:85:23:fa:66:75:0a:87:78:52:21:
9d:81:81:09:4f:fc:33:60:4c:49:95:c3:db:6d:0b:
fa:99:bc:8d:5d:21:4f:fd:be:99:ea:09:55:99:0b:
ef:99:23:d5:a6:4d:81:4a:8e:ee:ab:c0:cd:5e:40:
f4:64:89:33:fc:70:f8:ff:f9:ca:3a:2c:93:d9:eb:
82:84:88:dc:3c:d6:e3:dc:98:67:2f:1c:2f:cb:d3:
e0:26:d5:a7:d6:59:42:1a:a5:29:ca:3b:d7:a7:06:
15:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:EA:FB:C2:33:7A:85:05:15:AB:1B:7F:03:EC:9F:95:F3:02:72:21
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2ccef7a6-b8db-4753-b71f-dd2e40d58081/9465f03a-4a7a-309d-88aa-da4fc03e089e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2ccef7a6-b8db-4753-b71f-dd2e40d58081/2ccef7a6-b8db-4753-b71f-dd2e40d58081.crl
X509v3 Authority Key Identifier:
keyid:E2:C2:CF:84:93:6A:CB:B4:7D:66:12:04:5C:13:88:E7:23:E3:F0:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2ccef7a6-b8db-4753-b71f-dd2e40d58081.cer
sbgp-ipAddrBlock: critical
IPv6:
2606:fc40:4001::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
20:73:69:6f:0a:20:58:59:67:17:a4:74:f6:87:47:0a:21:df:
a0:0d:7b:12:78:cd:7b:59:11:4a:e6:a1:9d:a6:d9:45:c9:87:
48:08:b6:3f:c0:3a:d5:5f:b9:73:77:05:22:11:3b:13:cf:2e:
d3:87:e7:ad:4f:66:02:21:47:1e:2e:22:b1:8c:b1:30:77:81:
e5:84:e2:fd:24:ee:c6:4a:8c:a6:e9:88:36:3e:ac:d0:2c:87:
8c:b9:9d:55:b9:c6:b5:35:f9:22:d8:23:1b:56:45:b6:d2:8f:
c7:8a:f9:89:65:f1:6d:40:c6:f4:15:59:24:6f:99:e7:e3:79:
1e:52:ac:e7:e9:40:f3:1f:79:5f:df:89:3f:38:43:8d:2c:9c:
c0:17:a7:3e:ec:67:9b:f7:c4:98:30:c6:74:8d:d0:5b:eb:33:
a1:4e:7c:e0:48:ef:3e:2f:b5:29:85:f7:c1:be:00:ab:b4:a5:
d8:fb:ad:c2:a7:64:6a:68:24:e9:4b:3e:95:e0:79:ed:63:0e:
4f:e5:52:fc:a6:a2:ed:71:52:d3:d2:b2:1a:10:df:dd:e8:e4:
5a:67:f8:9c:40:8e:f6:52:9f:42:31:be:de:8f:94:1f:a2:de:
c9:09:53:71:7b:73:d8:a1:26:18:81:92:5d:6b:21:95:ec:ca:
0b:b1:79:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:15:57 2025 by rpki-client