Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/04dbe57b-abe5-37c5-9c22-633c31b5d406.roa
File: 04dbe57b-abe5-37c5-9c22-633c31b5d406.roa (raw, json)
Hash identifier: cickDtT650dL/1my/iQrGdaFcNkgdnxsZGBFGDjJWXw=
Subject key identifier: 8E:96:3D:38:F5:5C:60:D7:16:AE:A3:A5:EB:00:F8:B7:83:B6:95:2A
Certificate issuer: /CN=f4f85718-cda0-442f-9727-709a536e1e27
Certificate serial: 010D0C9F43285848EF6155A03431E639D5633F80
Authority key identifier: 6B:6F:E0:BB:23:06:E8:21:A5:FF:2D:4F:6F:9F:5C:35:AF:3B:42:7F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/04dbe57b-abe5-37c5-9c22-633c31b5d406.roa
Signing time: Wed 19 Feb 2025 14:00:52 +0000
ROA not before: Wed 19 Feb 2025 14:00:52 +0000
ROA not after: Tue 20 May 2025 13:00:52 +0000
asID: 6639
IP address blocks: 2606:600::/32 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ef:61:55:a0:34:31:e6:39:d5:63:3f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4f85718-cda0-442f-9727-709a536e1e27
Validity
Not Before: Feb 19 14:00:52 2025 GMT
Not After : May 20 13:00:52 2025 GMT
Subject: CN=26900ad4-ccab-4a48-8d7b-7c1b079057a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:ac:8e:e2:2a:b8:d9:38:01:04:70:bc:16:bf:
7e:6f:f5:99:10:43:4f:70:8f:02:c5:24:64:77:28:
c2:f6:b4:3a:20:c3:1f:87:1e:e6:30:3f:5a:93:06:
8a:02:ba:c4:9b:ce:cd:0b:0e:43:01:fd:de:08:d6:
f0:fb:17:ef:3e:9b:39:88:f0:4f:b2:bd:bf:7d:86:
c7:97:d0:da:d5:31:28:1f:ac:b5:69:de:38:57:cc:
64:90:d7:dc:92:2a:98:7e:1a:d0:54:f6:d6:a1:b3:
bc:4b:86:c0:9e:49:d1:da:28:85:77:59:73:29:31:
4f:73:6d:6c:bc:b8:aa:65:82:5e:4e:ea:5a:22:e7:
9f:3e:cb:94:3f:70:e3:1e:86:93:f0:2b:4b:11:fe:
b4:cc:9b:fc:49:0e:42:18:b0:92:e2:51:b7:7b:15:
0c:d4:6e:59:51:83:ac:6a:cf:45:42:5b:33:94:8d:
04:fe:8a:66:07:4b:de:0f:81:eb:e5:f4:66:a0:17:
ea:13:a7:8d:12:8f:aa:d3:00:0f:16:46:21:47:a8:
67:e8:97:ff:24:8e:eb:51:76:9a:c8:81:58:af:04:
ff:48:89:d3:fd:fe:fa:0f:35:0e:18:79:c4:04:62:
cf:95:8e:4b:7c:9a:12:24:f1:76:65:30:2a:b2:90:
81:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:96:3D:38:F5:5C:60:D7:16:AE:A3:A5:EB:00:F8:B7:83:B6:95:2A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/04dbe57b-abe5-37c5-9c22-633c31b5d406.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/f4f85718-cda0-442f-9727-709a536e1e27.crl
X509v3 Authority Key Identifier:
keyid:6B:6F:E0:BB:23:06:E8:21:A5:FF:2D:4F:6F:9F:5C:35:AF:3B:42:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27.cer
sbgp-ipAddrBlock: critical
IPv6:
2606:600::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4e:b5:4f:33:a1:d2:ff:00:17:ff:a1:ab:2d:e7:e9:af:21:a3:
ec:41:5b:e2:01:22:43:cd:6a:2e:22:08:05:41:10:13:7d:05:
d3:3a:f4:85:48:6f:c9:27:77:54:ab:13:b1:51:62:c0:7e:e6:
1c:0d:8d:a3:1d:c3:7e:73:95:52:81:58:49:eb:ab:5b:e2:6a:
42:30:cd:ae:b9:c5:ef:d5:e6:e6:ee:7c:07:84:1f:c2:be:40:
20:d5:8d:dc:90:e0:c6:b0:fe:a3:c3:b8:8a:b5:50:15:3d:18:
1e:4e:8a:d8:0e:73:0a:cc:10:f2:ce:1d:12:65:cf:46:c0:90:
63:a4:cc:1b:ed:a3:d8:eb:92:11:5e:c0:3c:dd:2c:17:a1:aa:
f5:02:8f:96:51:4d:cc:d1:69:c4:97:2a:c2:e5:57:0a:27:cf:
e6:0d:d9:66:6c:83:f5:ba:82:40:59:b9:43:42:84:de:cc:6b:
ca:a6:83:e0:72:87:31:15:00:04:fd:b4:93:6e:01:6b:30:09:
f5:9f:d6:99:86:07:69:f1:62:a2:c5:b5:0e:33:73:b0:46:39:
a9:6d:8a:e6:83:59:6a:8e:d0:ae:2a:99:7c:7e:df:24:59:c8:
e3:e2:5c:bc:04:ea:7e:71:0e:95:d4:f6:82:b2:2f:a7:3b:65:
5a:77:5d:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:38:20 2025 by rpki-client