Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/443e93d6-47f3-4dff-a7d2-d7de4a2a04ce/38aa2871-1127-35de-be08-5b917c38fae4.roa
File: 38aa2871-1127-35de-be08-5b917c38fae4.roa (raw, json)
Hash identifier: XjDaookVIA3GsmvL7Fy5I0K69z32ri0DWqbR69mIgS8=
Subject key identifier: 5F:08:CC:23:8F:4E:32:FB:14:15:61:06:27:C2:07:91:6F:48:1E:16
Certificate issuer: /CN=443e93d6-47f3-4dff-a7d2-d7de4a2a04ce
Certificate serial: 010D0C9F43285848EF61396EAADD61D116E26D80
Authority key identifier: A0:76:4E:8D:13:F2:EB:39:E7:16:02:EC:C0:26:5D:8A:D5:93:E2:5B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/443e93d6-47f3-4dff-a7d2-d7de4a2a04ce.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/443e93d6-47f3-4dff-a7d2-d7de4a2a04ce/38aa2871-1127-35de-be08-5b917c38fae4.roa
Signing time: Wed 19 Feb 2025 14:00:52 +0000
ROA not before: Wed 19 Feb 2025 14:00:52 +0000
ROA not after: Tue 20 May 2025 13:00:52 +0000
asID: 16509
IP address blocks: 2602:2df::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ef:61:39:6e:aa:dd:61:d1:16:e2:6d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=443e93d6-47f3-4dff-a7d2-d7de4a2a04ce
Validity
Not Before: Feb 19 14:00:52 2025 GMT
Not After : May 20 13:00:52 2025 GMT
Subject: CN=abf2f6fb-c845-45d3-bf45-3c0c0514b1ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:64:ea:72:d8:b3:90:a1:94:ba:6f:38:75:49:
1a:b0:e1:4e:d0:4d:f7:3d:0b:80:9d:42:c0:74:66:
08:11:6d:ce:0b:27:04:4f:b0:04:02:ec:ba:1e:b5:
c5:c8:f9:77:af:7f:0f:2f:29:8e:b8:68:d2:86:1a:
bf:b3:80:9f:3e:21:68:e3:98:ee:57:6e:6f:3c:0a:
97:0d:79:2a:96:8a:a0:9c:b0:53:91:60:79:a4:6b:
cf:3f:bf:9f:79:57:e8:e2:00:82:4a:10:20:01:3c:
58:cd:3c:34:88:d0:0c:c8:34:86:8a:e7:c2:c7:9d:
16:d3:a3:de:8b:55:65:31:e3:52:29:92:1c:e0:95:
76:fe:8a:ac:fb:ae:43:94:66:fd:a2:16:e9:8f:0f:
02:81:86:a0:9d:6b:e5:3b:d8:19:04:4d:2b:c6:d0:
53:6c:c1:7d:9c:27:59:0d:f6:59:17:d0:62:f6:b8:
48:51:2f:06:16:41:16:54:87:be:fb:82:1b:65:05:
34:c4:c8:a4:48:04:07:52:06:78:59:04:0d:ca:22:
87:d1:c7:c9:f5:27:b1:99:81:c7:00:eb:65:f4:78:
b4:e2:0e:02:63:24:32:bc:63:47:76:87:cd:11:9d:
2a:15:fb:92:5b:1f:98:11:c9:7d:45:ea:62:d0:f4:
cf:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:08:CC:23:8F:4E:32:FB:14:15:61:06:27:C2:07:91:6F:48:1E:16
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/443e93d6-47f3-4dff-a7d2-d7de4a2a04ce/38aa2871-1127-35de-be08-5b917c38fae4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/443e93d6-47f3-4dff-a7d2-d7de4a2a04ce/443e93d6-47f3-4dff-a7d2-d7de4a2a04ce.crl
X509v3 Authority Key Identifier:
keyid:A0:76:4E:8D:13:F2:EB:39:E7:16:02:EC:C0:26:5D:8A:D5:93:E2:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/443e93d6-47f3-4dff-a7d2-d7de4a2a04ce.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:2df::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5b:30:1b:33:2e:1a:78:5c:6b:fa:f4:66:e7:26:44:86:fb:08:
7f:96:94:5e:0a:01:89:44:9b:07:6a:5c:b8:12:53:e9:6a:9a:
7b:d8:ab:c5:d7:fc:94:4e:34:24:e8:4f:7b:ac:8a:fc:18:f3:
4b:c7:68:6e:22:ec:b0:13:3b:c7:7d:2f:b1:ee:f9:60:3a:a1:
26:21:8e:7d:1c:e5:29:6b:6c:ef:7c:a7:b8:50:ba:1c:53:4f:
39:b7:53:ca:d0:60:2e:a9:5b:93:f1:f5:1c:d2:ba:22:30:62:
4f:16:cc:b6:07:e4:28:aa:83:a2:76:fc:a6:27:17:aa:96:9f:
72:92:b6:8e:2b:c9:1d:e5:2c:aa:fd:54:f7:f6:6c:ee:94:19:
70:e6:93:6f:ff:42:01:e1:5c:69:d3:77:a2:bc:eb:3a:9d:8f:
24:6c:f8:20:6e:27:0a:d7:10:89:38:88:b7:26:8c:9f:60:a4:
e9:d8:7b:90:e5:94:c2:f8:1b:5e:ed:7a:2a:f0:6f:eb:94:ab:
1c:dc:48:fe:14:4c:4e:79:80:af:42:e9:62:1e:6b:0a:27:c7:
73:04:cb:a3:51:e6:f4:2e:c9:d5:ed:a4:30:48:4a:8a:69:3b:
1a:ef:64:4a:9c:cc:1a:c6:99:e5:c1:a8:c7:85:e6:91:04:f0:
7c:a1:5e:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:05:33 2025 by rpki-client