Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/afb6f95f-c73b-3106-9e81-78a0419514c1.roa
File: afb6f95f-c73b-3106-9e81-78a0419514c1.roa (raw, json)
Hash identifier: 72/ySqXGMcYnaGo4B4lnD2T5neFTsTPGLD1Qd78Lx4E=
Subject key identifier: B8:4B:E0:6E:62:D3:93:1F:28:4F:B4:93:4A:72:FD:70:8A:5E:BB:27
Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial: 010D0C9F432858497114350361AC969F6DD15500
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/afb6f95f-c73b-3106-9e81-78a0419514c1.roa
Signing time: Mon 07 Apr 2025 01:00:47 +0000
ROA not before: Mon 07 Apr 2025 01:00:47 +0000
ROA not after: Sun 06 Jul 2025 01:00:47 +0000
asID: 7843
IP address blocks: 2600:c010:100::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:71:14:35:03:61:ac:96:9f:6d:d1:55:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Validity
Not Before: Apr 7 01:00:47 2025 GMT
Not After : Jul 6 01:00:47 2025 GMT
Subject: CN=6a054cca-3017-4963-8022-d8129bb65a20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:0c:23:ba:41:65:82:f4:f2:00:3c:65:49:76:
f7:2b:52:03:0d:cb:c2:da:fc:28:0a:00:28:d5:0c:
4a:35:a1:33:53:3a:e7:12:b4:7d:6a:b5:cf:18:d1:
65:a1:33:0f:2d:f3:f4:aa:77:24:79:17:93:d6:49:
fc:11:a2:65:fa:cc:be:71:83:53:9b:7d:7b:c6:d4:
66:0b:fe:d8:5a:2a:40:7a:43:fe:df:23:df:56:90:
34:e9:61:00:f0:43:e9:34:66:a2:8c:37:9a:37:9c:
cc:80:95:b7:82:cd:4b:17:24:8d:91:54:12:62:45:
32:36:1f:69:cc:3c:33:ec:36:bf:8f:51:b5:34:50:
44:b6:63:01:9a:c2:e6:e8:f6:23:bb:d3:f7:ee:c0:
46:88:fa:b8:9d:79:06:07:99:68:4c:cf:29:03:ac:
08:a2:36:9f:30:f3:e2:12:b0:c9:74:b1:9c:8b:0d:
48:6e:94:7f:ba:a5:29:99:f9:b1:ec:fc:08:08:93:
f8:aa:7d:cc:e0:be:b7:a5:51:14:36:7f:c1:40:74:
0e:99:45:dc:e4:2a:f5:4a:ee:1a:fa:80:03:37:db:
f8:f3:4a:69:8a:2b:98:26:8f:80:40:66:13:47:4b:
4e:ca:9e:a2:1b:ad:93:8c:41:a5:8e:48:65:32:36:
bc:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:4B:E0:6E:62:D3:93:1F:28:4F:B4:93:4A:72:FD:70:8A:5E:BB:27
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/afb6f95f-c73b-3106-9e81-78a0419514c1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
X509v3 Authority Key Identifier:
keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:c010:100::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
51:71:0d:ad:f0:c7:60:2c:3e:ad:48:8e:8f:c2:f5:9f:fc:e9:
77:62:f9:59:37:4a:d2:8e:f6:a6:8e:bf:3a:aa:d0:88:c8:85:
2e:97:f7:1e:f1:06:92:78:08:3e:50:e5:a0:8a:78:e4:b3:83:
35:54:93:7d:13:b9:5b:05:32:e9:b1:da:4f:f7:da:9f:7c:bc:
c9:0d:50:e3:e2:70:67:04:2a:24:95:08:4b:f7:ce:f2:ab:72:
de:80:6c:26:48:ad:3b:01:3d:28:21:78:32:f1:3c:0e:f9:41:
ae:67:08:33:aa:a7:29:b7:2c:9d:c4:60:dd:39:55:30:72:9b:
52:34:4b:b2:35:5d:41:85:6d:d9:ce:3b:15:2a:6d:70:65:d7:
63:28:73:6b:f7:eb:42:a2:df:28:b4:75:d9:7c:da:cb:cb:83:
67:58:32:bb:7c:ac:ce:6e:73:0e:49:14:87:aa:84:57:59:17:
fa:27:79:bc:7d:04:31:f1:3a:b8:f3:d3:b8:6c:7e:9c:b2:0b:
16:19:91:e8:18:f6:a7:01:d7:fc:44:fe:06:c8:b8:a1:63:9a:
c1:97:3b:c7:7f:6c:67:f1:76:ba:e2:12:a7:33:ae:84:f1:aa:
bf:25:e5:59:0a:c4:8c:32:18:f9:0c:66:17:03:1f:f8:86:51:
7f:ef:96:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 13:59:21 2025 by rpki-client on console.sobornost.net