Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/1dba0f14-dad9-34cb-a232-c6cb22a53113.roa
File: 1dba0f14-dad9-34cb-a232-c6cb22a53113.roa (raw, json)
Hash identifier: dLTfUn53D6LcZhGNK6Rrsx/Bc5lKfqelr4u8z9tFMo4=
Subject key identifier: F0:88:08:D3:D3:CF:35:0A:79:52:48:2B:4B:9A:95:39:CB:E8:D1:59
Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial: 010D0C9F43285848530AF1755604AC9904706380
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/1dba0f14-dad9-34cb-a232-c6cb22a53113.roa
Signing time: Wed 25 Dec 2024 14:00:52 +0000
ROA not before: Wed 25 Dec 2024 14:00:52 +0000
ROA not after: Tue 25 Mar 2025 13:00:52 +0000
asID: 7861
IP address blocks: 2001:56b:f00::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:53:0a:f1:75:56:04:ac:99:04:70:63:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Validity
Not Before: Dec 25 14:00:52 2024 GMT
Not After : Mar 25 13:00:52 2025 GMT
Subject: CN=66fe8746-6a43-418f-8e9f-8765481c444e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:f6:16:f9:94:bc:cb:92:e4:c6:a0:2a:19:e7:
3f:da:f5:d8:bb:b1:55:e5:4c:5f:d1:fd:f7:ef:47:
bf:95:a3:f0:bd:86:5f:72:55:e1:18:af:f0:df:d6:
d3:0f:ec:62:5a:b7:1c:d2:a6:19:ff:d0:25:a7:80:
1d:3d:7a:04:e7:27:1f:8e:72:bf:4f:c5:d3:e5:c9:
16:a9:b1:8a:27:3c:e2:7b:c3:de:3f:9d:a5:b0:53:
90:b4:be:1a:18:9c:8b:5e:c4:87:47:c7:9f:34:69:
97:e2:22:29:08:35:85:f7:4c:19:3d:d0:4d:95:27:
7a:3a:05:8b:5e:11:76:a2:66:23:bf:61:0b:0c:0d:
82:6d:68:e7:af:0a:7f:8f:56:ae:f0:05:f7:0b:12:
7e:69:f9:7b:45:d8:38:d1:01:ce:9e:2a:4c:e7:34:
c4:4b:25:71:9f:63:54:37:db:27:9a:bb:e4:35:dd:
39:2d:5a:65:a4:04:96:84:ea:33:24:5e:ee:4e:71:
52:ed:0f:27:e2:e2:44:b3:99:7f:5d:e3:8c:81:bd:
ef:6b:84:e9:3c:9d:08:fb:f9:58:0a:a9:0f:47:96:
4f:4a:2b:a1:4b:61:0b:24:f5:9c:15:65:59:88:0f:
b7:15:c7:e0:c7:c0:d4:a3:60:84:e5:63:1a:60:15:
a6:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:88:08:D3:D3:CF:35:0A:79:52:48:2B:4B:9A:95:39:CB:E8:D1:59
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/1dba0f14-dad9-34cb-a232-c6cb22a53113.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
X509v3 Authority Key Identifier:
keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:56b:f00::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
39:7e:13:00:e6:ad:38:2a:66:99:6e:38:cb:56:b0:4f:d6:46:
ad:ab:91:35:73:5d:56:5e:52:4d:2e:08:b3:f7:a4:45:ee:d2:
57:60:27:3d:d8:39:b5:e6:e0:15:d3:bd:f7:5e:a8:10:ec:db:
81:96:68:47:49:25:54:ab:b9:5a:0d:4e:bc:5b:d0:f7:3c:b9:
40:2c:64:b5:33:8b:dc:97:f7:28:40:a0:ba:25:6c:26:5c:4f:
18:01:09:f1:8f:21:98:b0:bd:03:7f:02:02:e3:0e:a6:27:9b:
23:01:0a:63:c4:94:a0:1d:21:66:72:5e:70:ae:83:1f:f3:b2:
ec:14:5c:a5:3b:40:e2:b0:3d:b6:ec:c0:bd:75:c5:cf:a7:61:
c1:f1:bb:73:5b:98:49:9c:34:06:e2:7b:88:76:0d:f8:6f:90:
33:d7:67:13:c4:a0:ee:f2:6d:b9:55:89:c0:82:f1:0b:c6:c0:
73:ed:2e:a0:af:4a:7e:c9:79:e7:15:92:10:b2:48:7f:e3:ee:
a0:99:b4:62:33:65:3f:fb:a3:0e:d2:17:9a:dc:4d:2a:97:5d:
4c:ed:68:d8:fe:64:15:c1:90:f0:b6:fd:35:f1:ef:47:e1:a1:
c6:ec:c9:a5:87:cd:9d:0a:d8:11:8f:2c:ea:d7:53:ad:58:8a:
a4:9f:a6:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:43:20 2025 by rpki-client