Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fd37bf6-6955-4ed5-8347-2896767afab0/44efe0da-db17-3e9c-964b-6dc2afa39cff.roa
File: 44efe0da-db17-3e9c-964b-6dc2afa39cff.roa (raw, json)
Hash identifier: m0QJrELpAuP63E794ilqNFNiJ5io9RgVUv/5jI75kkk=
Subject key identifier: 9D:3A:64:DE:9C:A9:EA:48:94:E1:A6:1F:6D:48:78:DE:F6:64:F4:9D
Certificate issuer: /CN=3fd37bf6-6955-4ed5-8347-2896767afab0
Certificate serial: 010D0C9F432858488F107E7EFED82669ED106600
Authority key identifier: 2C:DA:ED:C1:B2:77:C1:C9:C1:4F:A9:F9:F3:3D:2C:EE:A5:59:DB:2E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fd37bf6-6955-4ed5-8347-2896767afab0.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fd37bf6-6955-4ed5-8347-2896767afab0/44efe0da-db17-3e9c-964b-6dc2afa39cff.roa
Signing time: Thu 16 Jan 2025 02:00:39 +0000
ROA not before: Thu 16 Jan 2025 02:00:39 +0000
ROA not after: Wed 16 Apr 2025 01:00:39 +0000
asID: 40545
IP address blocks: 2606:380::/32 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:8f:10:7e:7e:fe:d8:26:69:ed:10:66:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd37bf6-6955-4ed5-8347-2896767afab0
Validity
Not Before: Jan 16 02:00:39 2025 GMT
Not After : Apr 16 01:00:39 2025 GMT
Subject: CN=af8735ab-e6e8-46bb-a669-f9c90776604a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:60:c4:43:56:d6:64:70:ed:a1:90:81:8b:39:
09:ba:a7:72:e1:a6:6f:f2:ba:3d:ec:ea:89:cb:9d:
e4:de:8d:b2:92:0c:f3:13:53:ae:54:79:b3:0f:e0:
27:06:23:5a:16:0d:ac:a1:94:1f:b6:97:ac:62:72:
99:0f:b2:f7:76:46:ed:f4:03:84:32:1a:40:cb:a7:
bd:ae:01:c7:eb:f7:a5:40:6e:f0:57:81:d5:8b:d3:
aa:0e:92:d6:6d:74:6b:43:cc:7a:25:65:e7:3e:77:
30:e6:e3:a8:e8:14:9a:29:4a:fd:c0:c6:39:bc:03:
76:73:0d:06:a0:af:cb:63:ee:7d:18:1c:c7:24:03:
1e:ad:ef:95:09:d5:8f:e7:83:74:a7:9b:14:53:6d:
39:09:9a:4e:82:ef:2b:f3:aa:7f:07:93:44:2c:f1:
27:f4:86:ec:19:d2:12:db:29:b6:4b:d4:27:9e:4e:
9a:97:50:55:47:1d:21:c1:52:9f:5a:73:34:fb:48:
1d:0e:3a:b8:04:36:c8:cf:cb:29:56:0c:fa:20:a7:
88:de:17:fe:22:ad:61:b9:7f:61:6d:d4:f3:2a:45:
64:70:60:a9:b0:09:ab:2c:54:76:36:e1:62:4c:74:
2e:cd:7c:40:08:a4:78:b2:ba:1b:44:42:8c:45:9f:
1c:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:3A:64:DE:9C:A9:EA:48:94:E1:A6:1F:6D:48:78:DE:F6:64:F4:9D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fd37bf6-6955-4ed5-8347-2896767afab0/44efe0da-db17-3e9c-964b-6dc2afa39cff.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fd37bf6-6955-4ed5-8347-2896767afab0/3fd37bf6-6955-4ed5-8347-2896767afab0.crl
X509v3 Authority Key Identifier:
keyid:2C:DA:ED:C1:B2:77:C1:C9:C1:4F:A9:F9:F3:3D:2C:EE:A5:59:DB:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fd37bf6-6955-4ed5-8347-2896767afab0.cer
sbgp-ipAddrBlock: critical
IPv6:
2606:380::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
32:11:e3:c4:fd:b8:5f:eb:b2:3e:85:2c:a0:13:a7:d2:93:06:
ac:84:18:74:59:39:9b:46:56:68:19:0c:37:6e:c9:d2:7c:f6:
c4:f2:42:d7:71:39:9a:56:00:b9:8e:2c:54:22:3f:5c:7a:74:
91:c2:76:ff:ea:3b:23:84:ce:ff:c0:77:1f:c2:35:b2:1f:d7:
05:5b:71:b1:89:40:e9:58:2c:af:31:ca:d6:7e:e1:6b:46:22:
05:83:6a:20:33:fd:bc:ae:d2:04:12:c8:7f:39:9f:e9:b0:ca:
3a:42:75:da:d8:cd:96:2f:7f:3c:81:25:9c:cf:72:9b:d5:f5:
a8:cf:c1:a2:5d:dc:0c:39:23:6c:1d:17:35:de:b3:1d:9c:5d:
a7:2d:da:ef:23:01:be:46:44:85:35:a7:4f:b9:0c:b9:26:18:
f8:9b:4e:0a:83:88:1d:57:5d:6e:04:9e:c0:68:4e:15:ce:29:
06:f4:2c:48:91:a6:01:ac:c2:97:44:c7:4b:f8:81:df:8c:e0:
6b:ef:9f:ba:b6:86:24:cc:9f:bf:0c:38:c9:0f:00:c4:ce:7f:
68:f0:65:bc:06:d4:90:61:db:23:9b:b8:bb:1d:a0:7a:6f:4d:
47:c1:c6:0c:8b:a3:9f:02:8c:df:6c:52:38:c2:8a:ae:51:df:
a4:1b:64:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:37:39 2025 by rpki-client