Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d/38c92b34-27ea-31bd-8d00-e98cefb06ca8.roa
File: 38c92b34-27ea-31bd-8d00-e98cefb06ca8.roa (raw, json)
Hash identifier: d5bdgv+Uh4CGMuIn5RHFQYxijGuIcgDPN8lLm6r5Yqc=
Subject key identifier: 40:86:1A:4A:09:A1:29:40:A5:78:E9:64:DC:7E:B3:9B:BA:CB:33:93
Certificate issuer: /CN=df5adac7-ed86-4b24-911d-716f2c94711d
Certificate serial: 010D0C9F432858483062AE648B1FD1D3FC906380
Authority key identifier: 65:84:C0:FB:8B:8E:95:4C:39:8B:05:24:6C:9B:F7:2A:F6:14:EE:42
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d/38c92b34-27ea-31bd-8d00-e98cefb06ca8.roa
Signing time: Fri 13 Dec 2024 04:04:31 +0000
ROA not before: Fri 13 Dec 2024 04:04:31 +0000
ROA not after: Thu 13 Mar 2025 03:04:31 +0000
asID: 40929
IP address blocks: 2602:f92a:ff0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:30:62:ae:64:8b:1f:d1:d3:fc:90:63:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df5adac7-ed86-4b24-911d-716f2c94711d
Validity
Not Before: Dec 13 04:04:31 2024 GMT
Not After : Mar 13 03:04:31 2025 GMT
Subject: CN=f6aa6709-663b-4340-b121-6e9650517ecf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ce:df:ae:20:fc:9a:05:d6:73:4b:a9:92:4e:
6c:cb:0d:e9:d8:04:20:dd:4f:30:52:5a:ad:29:ce:
69:91:dd:29:0c:54:90:d6:41:3c:04:66:f1:70:ae:
e6:ca:e7:8a:25:dd:a1:a4:e4:ce:fa:35:3c:3d:ed:
a1:89:89:73:e6:0d:84:0a:66:59:b3:37:1e:3d:f0:
19:82:1a:f1:ef:d6:a4:cb:76:a8:1a:c5:41:66:b6:
00:fe:e8:f7:22:e7:70:18:e5:8d:34:b0:75:a4:dc:
ca:e6:7a:f0:99:53:b7:45:89:df:af:d4:fd:f2:bb:
1c:d7:cb:17:98:02:73:ef:6d:80:21:49:b5:1d:34:
ac:e2:40:d6:a5:48:f2:20:3d:13:2f:e2:85:96:d5:
d9:21:6e:34:ee:1a:e8:42:40:f9:23:5a:36:49:70:
40:bf:63:d2:81:99:23:b3:50:60:16:66:d6:c5:97:
be:20:b4:0b:3f:6b:52:b4:4b:50:08:48:e1:1c:2a:
2d:a4:59:3f:7a:10:c6:eb:53:56:62:23:79:3e:cf:
17:5e:19:43:20:5a:0f:5d:a8:18:aa:73:fd:da:e2:
ed:70:c2:a6:90:aa:5c:e8:07:33:bc:48:15:f3:8c:
cc:ee:b5:6f:ac:6a:da:89:77:67:65:b2:18:4d:6b:
71:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:86:1A:4A:09:A1:29:40:A5:78:E9:64:DC:7E:B3:9B:BA:CB:33:93
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d/38c92b34-27ea-31bd-8d00-e98cefb06ca8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d/df5adac7-ed86-4b24-911d-716f2c94711d.crl
X509v3 Authority Key Identifier:
keyid:65:84:C0:FB:8B:8E:95:4C:39:8B:05:24:6C:9B:F7:2A:F6:14:EE:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:f92a:ff0::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
42:9d:a4:55:9b:b1:67:03:eb:3b:19:8e:b7:e4:59:a2:76:22:
13:70:a4:1c:15:af:12:dd:ac:05:15:b4:8e:8f:b2:50:0b:a8:
64:bd:0c:b3:75:09:32:79:ca:ec:68:95:a6:1a:78:a2:cc:65:
a2:da:97:71:83:71:74:3b:8c:b2:7b:2a:fb:44:f3:ad:7a:5d:
18:79:e7:42:ff:3e:cb:fa:4f:e9:62:8a:05:a6:6c:14:03:d3:
de:57:99:13:25:46:bd:09:ef:d1:71:af:e9:13:2c:50:1a:0b:
d6:8e:d3:30:d4:8d:4d:6b:75:a1:6b:45:c4:c1:6c:0a:0a:e0:
12:ab:c6:97:39:80:ed:a1:c7:82:59:4a:db:da:23:cb:09:54:
c8:98:73:d5:8f:d4:5c:e6:f7:a9:b2:27:96:b0:69:cd:e7:7c:
44:69:52:42:15:eb:04:0c:40:63:2a:35:46:d8:65:88:8b:82:
28:92:59:38:58:c4:57:73:46:83:70:d2:4b:65:42:23:24:27:
42:90:b1:bc:dd:83:81:46:76:ef:47:b3:50:35:cb:08:71:64:
3c:4f:fb:25:4f:9b:78:5f:49:f6:bd:13:f1:98:0c:fc:3d:00:
99:fc:87:49:fb:e8:a6:da:69:ea:f1:f2:0b:db:29:05:1f:ae:
d4:56:d7:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:02:57 2025 by rpki-client