Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d8a0f176-b4a2-4e32-8a98-4e12e07d8996/4f0fe6e7-b8ab-3dac-9155-001ac64dc382.roa
File: 4f0fe6e7-b8ab-3dac-9155-001ac64dc382.roa (raw, json)
Hash identifier: Jlv6uQBRtx0pocgwZXc45OxBzsyv3rkpBsjnfzxXVgM=
Subject key identifier: 04:2F:E3:0B:89:4B:68:B4:B3:34:19:1E:67:E9:E0:20:EC:87:85:FE
Certificate issuer: /CN=d8a0f176-b4a2-4e32-8a98-4e12e07d8996
Certificate serial: 010D0C9F43285848854B5065275F68B99F633640
Authority key identifier: DC:75:7C:13:7E:A8:82:8E:7C:F9:53:75:19:D0:B1:85:4E:C5:3F:F6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d8a0f176-b4a2-4e32-8a98-4e12e07d8996.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d8a0f176-b4a2-4e32-8a98-4e12e07d8996/4f0fe6e7-b8ab-3dac-9155-001ac64dc382.roa
Signing time: Sun 12 Jan 2025 14:00:53 +0000
ROA not before: Sun 12 Jan 2025 14:00:53 +0000
ROA not after: Sat 12 Apr 2025 13:00:53 +0000
asID: 16509
IP address blocks: 2600:400:ff00::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:85:4b:50:65:27:5f:68:b9:9f:63:36:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8a0f176-b4a2-4e32-8a98-4e12e07d8996
Validity
Not Before: Jan 12 14:00:53 2025 GMT
Not After : Apr 12 13:00:53 2025 GMT
Subject: CN=00f09046-35ed-40f0-b91f-64e977d3854b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:bf:d9:fa:09:05:db:bd:76:00:34:71:e3:24:
a7:b2:9c:fb:65:f3:d5:a7:87:b8:59:20:e5:a5:52:
6d:f3:f1:a1:0a:b2:78:b6:7c:a4:fa:98:5f:9b:5d:
34:de:83:44:9e:19:82:88:6c:db:4b:19:f8:c9:37:
3e:96:c5:10:f5:2d:6d:b7:0a:c8:07:c8:ef:77:42:
0e:80:f5:b1:fa:c1:7a:a1:63:69:8f:1f:de:c7:83:
67:2e:f3:12:6f:60:20:99:43:84:b2:33:86:43:71:
79:f5:b6:52:f3:33:fc:5f:82:2c:c2:9e:27:dd:94:
91:3e:29:23:10:f0:bb:b3:dd:00:c2:f4:cf:40:b2:
8b:37:f8:60:51:8c:53:e5:7b:e6:25:ee:58:3b:2d:
ef:29:ff:79:d8:b1:91:c3:c0:8f:bc:cf:69:25:9e:
a7:38:e3:fc:dc:30:91:20:3c:f5:a8:7e:99:cc:35:
53:01:c7:85:b9:4a:5a:d5:3a:2e:45:61:13:08:72:
9d:ed:1b:7a:bb:da:eb:db:99:b8:dd:a8:da:bc:17:
71:91:4c:39:86:48:c1:57:0b:a5:21:82:1e:1a:0f:
2b:d0:4d:8a:6a:81:01:42:d8:47:d5:37:8d:57:f7:
ab:6f:12:c2:cf:27:76:a8:1e:d3:93:71:da:37:70:
b5:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:2F:E3:0B:89:4B:68:B4:B3:34:19:1E:67:E9:E0:20:EC:87:85:FE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d8a0f176-b4a2-4e32-8a98-4e12e07d8996/4f0fe6e7-b8ab-3dac-9155-001ac64dc382.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d8a0f176-b4a2-4e32-8a98-4e12e07d8996/d8a0f176-b4a2-4e32-8a98-4e12e07d8996.crl
X509v3 Authority Key Identifier:
keyid:DC:75:7C:13:7E:A8:82:8E:7C:F9:53:75:19:D0:B1:85:4E:C5:3F:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d8a0f176-b4a2-4e32-8a98-4e12e07d8996.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:400:ff00::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
19:4d:9e:91:1c:55:ad:52:99:1b:23:63:b1:d3:45:32:dd:2f:
0e:9a:4f:d4:3b:b1:5e:26:5f:99:b9:49:60:e8:5f:49:a3:b5:
24:b4:f4:ec:ee:b6:d4:a8:09:c7:86:ab:e3:82:90:09:09:ed:
dc:1a:73:0b:8b:aa:45:e1:d7:bb:8f:ce:80:0d:68:31:c9:f2:
ef:56:b6:3d:8b:87:e6:53:5c:d8:43:d1:52:bf:44:5f:d2:7f:
70:ad:8e:47:80:64:44:24:db:66:55:34:36:c2:2e:ad:8a:f3:
82:bf:39:38:91:3f:a1:86:0c:aa:f7:3a:7e:e8:75:50:fc:cd:
ba:d6:68:79:af:17:34:3d:70:83:a7:ca:ad:5b:7d:c9:09:e0:
d5:f8:75:4c:d0:dd:16:79:b6:a3:96:6a:1c:b0:8e:ac:9e:49:
30:2e:23:0e:e1:8b:8d:30:ed:61:6f:32:30:b5:93:f2:ad:fc:
9b:a1:ee:36:4c:da:58:9a:3f:4f:19:77:d7:d9:40:de:64:f0:
18:c3:cd:39:5f:0b:66:99:8d:a7:76:95:c3:fb:41:c9:04:4f:
39:5c:e8:67:7e:c5:fe:86:c8:23:a9:31:a3:80:25:d8:de:28:
f6:dd:d6:d1:f9:25:e3:37:83:9b:fc:8b:fc:64:4d:69:a4:31:
d7:48:43:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:17:53 2025 by rpki-client