Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2ccef7a6-b8db-4753-b71f-dd2e40d58081/9e25c4e6-05c1-31d1-b829-91b12de0d6ec.roa
File: 9e25c4e6-05c1-31d1-b829-91b12de0d6ec.roa (raw, json)
Hash identifier: ImkvwgVaBpSUscRsQwQ7dWg513NWKFivmp9C1Vr28wc=
Subject key identifier: 7C:4D:B5:5D:00:B3:14:CA:B4:64:25:E0:FC:62:D8:7E:D4:B4:2F:F1
Certificate issuer: /CN=2ccef7a6-b8db-4753-b71f-dd2e40d58081
Certificate serial: 010D0C9F43285847C344877BB0C0B1ACD4F46260
Authority key identifier: E2:C2:CF:84:93:6A:CB:B4:7D:66:12:04:5C:13:88:E7:23:E3:F0:9D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2ccef7a6-b8db-4753-b71f-dd2e40d58081.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2ccef7a6-b8db-4753-b71f-dd2e40d58081/9e25c4e6-05c1-31d1-b829-91b12de0d6ec.roa
Signing time: Mon 04 Nov 2024 02:00:36 +0000
ROA not before: Mon 04 Nov 2024 02:00:36 +0000
ROA not after: Sun 02 Feb 2025 02:00:36 +0000
asID: 14315
IP address blocks: 2606:fc40:4000::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:c3:44:87:7b:b0:c0:b1:ac:d4:f4:62:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ccef7a6-b8db-4753-b71f-dd2e40d58081
Validity
Not Before: Nov 4 02:00:36 2024 GMT
Not After : Feb 2 02:00:36 2025 GMT
Subject: CN=9fbfef33-1ae6-4a88-aa12-a931b29d1faf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:66:ab:eb:6e:0f:d7:63:f7:95:08:00:77:76:
93:17:f3:c0:6e:60:d4:8d:8d:39:f6:5c:7b:75:30:
7e:08:05:d1:78:5a:dd:63:8e:5f:40:39:55:cb:ec:
83:a9:e8:45:33:84:b7:41:b1:59:2c:3a:fd:c0:4b:
41:31:22:38:ef:67:69:2b:c6:c4:7e:f5:f6:77:87:
64:3e:01:e5:a2:8c:9d:af:b8:c1:b9:9c:42:ae:e0:
89:9a:2e:de:47:a2:fb:2b:79:a3:ff:10:77:f1:e9:
f5:e1:44:4a:ba:4b:a1:7b:ce:cd:f1:67:92:e5:83:
e6:e2:dd:25:5a:37:bd:5d:5b:77:a0:44:e8:74:35:
65:d6:6d:c8:5f:31:d3:84:06:eb:39:64:b8:e1:21:
1e:e0:b3:28:21:fb:b3:1a:02:b8:5f:6a:09:1d:9b:
4b:04:ff:ac:a0:8d:6e:6e:3d:0e:e8:33:a1:94:3f:
30:84:e6:76:00:ea:e0:76:67:bf:b2:15:59:a9:a9:
c0:3a:5d:d6:7e:fb:16:25:3b:98:64:df:c2:b4:48:
e6:62:d4:d8:cb:52:23:b9:25:8e:98:24:6a:b2:a3:
82:fd:dd:c4:6e:93:c4:95:eb:b3:b3:dd:c0:33:06:
b9:b0:74:56:8b:ce:18:08:b0:2a:ad:13:f5:c6:f8:
d7:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:4D:B5:5D:00:B3:14:CA:B4:64:25:E0:FC:62:D8:7E:D4:B4:2F:F1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2ccef7a6-b8db-4753-b71f-dd2e40d58081/9e25c4e6-05c1-31d1-b829-91b12de0d6ec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2ccef7a6-b8db-4753-b71f-dd2e40d58081/2ccef7a6-b8db-4753-b71f-dd2e40d58081.crl
X509v3 Authority Key Identifier:
keyid:E2:C2:CF:84:93:6A:CB:B4:7D:66:12:04:5C:13:88:E7:23:E3:F0:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2ccef7a6-b8db-4753-b71f-dd2e40d58081.cer
sbgp-ipAddrBlock: critical
IPv6:
2606:fc40:4000::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
59:00:c8:42:14:9b:a8:f6:91:c7:42:9a:4a:8f:d8:83:81:e8:
19:4d:0b:6d:5e:cb:db:4a:04:2a:f3:76:4e:a2:1e:71:c4:04:
be:94:80:09:1f:87:0a:68:1e:02:54:5a:eb:22:0c:da:81:9d:
05:34:ef:aa:aa:f2:6c:de:fb:21:9b:7f:7e:d7:cb:3c:d6:05:
d0:9e:50:fa:ad:6c:bb:d2:c8:8d:26:17:43:37:95:36:f7:5a:
df:e4:08:67:be:2e:62:0f:96:0e:dd:d4:eb:2e:4c:95:09:33:
33:23:c8:fe:c8:b6:db:e7:86:6c:a6:8b:3c:e7:dd:a5:e2:44:
e0:ea:f3:26:d0:13:e9:6a:e0:d7:dd:37:77:2f:3b:d7:71:9d:
7b:e2:05:25:d5:e6:d1:fa:62:54:a8:f7:9e:47:c0:10:44:c6:
7c:3f:82:23:92:0c:84:17:0d:c8:09:ce:20:60:2e:59:7e:3d:
3d:86:d5:9d:22:c5:36:05:4d:d1:c9:b6:b3:57:77:67:a8:2a:
25:0f:83:ea:c9:b6:fa:bf:59:77:d0:5e:00:2b:6a:23:4f:bf:
18:f8:6e:42:fd:ff:06:79:bd:c4:64:f7:64:06:e5:be:64:1b:
3f:53:46:c1:c2:8f:c7:b5:8d:27:8d:29:3c:21:e6:69:12:97:
ec:ba:40:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 19:04:17 2024 by rpki-client on console.sobornost.net