Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/43a59a46-c115-3889-8c22-deae7fcbc88e.roa
File: 43a59a46-c115-3889-8c22-deae7fcbc88e.roa (raw, json)
Hash identifier: Hd+VzI/W+hcvy2sR1KiQZxmHHGileNvDC7e2lU0Ax3k=
Subject key identifier: 63:8A:DE:4A:A1:C5:E0:6D:BF:BF:E9:59:B5:E2:92:94:DE:E6:AE:91
Certificate issuer: /CN=ab1101f4-a527-459b-8c16-d78b261e6de3
Certificate serial: 010D0C9F432858491246B4F90A79A9221D67FA00
Authority key identifier: 99:9C:57:D9:0E:30:4E:74:DA:78:4A:5B:D2:9C:67:1E:DE:7A:6E:33
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/43a59a46-c115-3889-8c22-deae7fcbc88e.roa
Signing time: Tue 04 Mar 2025 02:00:40 +0000
ROA not before: Tue 04 Mar 2025 02:00:40 +0000
ROA not after: Mon 02 Jun 2025 01:00:40 +0000
asID: 16509
IP address blocks: 2602:277:d02::/47 maxlen: 56
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:12:46:b4:f9:0a:79:a9:22:1d:67:fa:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab1101f4-a527-459b-8c16-d78b261e6de3
Validity
Not Before: Mar 4 02:00:40 2025 GMT
Not After : Jun 2 01:00:40 2025 GMT
Subject: CN=159a11e9-1f7e-478f-b6f6-089f4a6618bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:64:7b:88:15:40:f6:f7:98:3b:e4:38:16:96:
04:22:23:0f:28:0f:64:19:43:4a:1a:81:59:26:ea:
1b:b0:ac:43:20:b0:18:97:d6:7c:17:3b:e9:73:16:
fc:13:8f:59:1d:e8:8c:77:2f:e9:e8:5a:2a:80:56:
18:56:41:b9:0b:ed:4f:90:b1:01:e6:47:ab:75:d2:
e7:d3:46:15:4d:bb:6b:c7:4b:83:7a:bd:f0:c0:23:
a8:c7:67:77:48:48:ea:7e:96:87:32:ef:d1:69:b0:
c7:b8:48:20:73:25:37:41:1d:81:a8:61:50:a8:8d:
f0:78:f3:5b:2d:27:08:ff:66:62:09:01:01:0f:aa:
4d:83:80:0f:ef:db:19:04:ca:60:e9:b1:29:4d:87:
2a:da:b8:3b:77:bc:50:ce:f8:7e:e3:1d:20:d9:68:
00:e9:4a:f3:eb:73:4e:e7:68:1d:72:c3:7a:e4:ed:
5e:b0:ef:9f:48:6c:0c:09:41:82:29:5e:7b:da:c9:
24:dc:43:99:d0:d1:68:71:27:c0:15:6c:4b:b4:71:
5b:79:a6:28:93:dc:93:df:f5:a0:df:6b:f6:13:0a:
00:be:1b:5e:ec:79:e2:b9:dd:f7:ec:46:e4:1e:19:
1d:de:30:43:cb:e6:3c:e7:33:8e:24:d0:29:de:78:
af:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:8A:DE:4A:A1:C5:E0:6D:BF:BF:E9:59:B5:E2:92:94:DE:E6:AE:91
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/43a59a46-c115-3889-8c22-deae7fcbc88e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/ab1101f4-a527-459b-8c16-d78b261e6de3.crl
X509v3 Authority Key Identifier:
keyid:99:9C:57:D9:0E:30:4E:74:DA:78:4A:5B:D2:9C:67:1E:DE:7A:6E:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:277:d02::/47
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
14:59:29:f2:fa:45:bb:ff:ab:fc:4a:41:cd:3c:d0:ab:f8:e7:
50:55:b4:b1:62:55:6f:44:8c:43:f2:da:a1:ed:b4:fc:e6:44:
6c:e0:15:d1:5b:f4:ae:d0:36:08:b9:0c:4e:9b:5b:ed:85:0c:
bc:c1:7b:d3:93:aa:13:8c:a9:14:d5:d8:62:d0:bf:c9:42:16:
78:eb:1c:0c:c5:0e:10:50:4e:64:b2:2a:6f:93:27:48:72:d9:
44:61:df:cb:14:e9:96:e5:e1:13:79:aa:08:28:8e:a6:f5:77:
6a:0f:06:d6:dd:7f:6e:81:c2:f1:1e:e4:fa:19:92:e3:e4:5c:
1b:df:d9:e5:4b:41:19:0b:0b:c8:1d:8c:f3:ba:55:19:35:9a:
c7:85:8f:cb:56:45:e5:bc:59:da:44:b7:70:af:41:76:4a:9e:
4a:c1:2f:a8:84:d5:79:76:36:37:49:41:84:d4:c5:c4:b2:00:
40:f9:d1:31:82:8d:40:7f:c5:00:ee:54:47:43:32:5b:92:e6:
37:33:bd:70:b7:8a:9b:b9:23:54:60:da:14:b8:8d:dd:ed:65:
2c:bb:94:ef:be:8a:2a:77:4d:cf:58:04:2b:fa:84:b7:01:46:
66:09:5d:85:31:5b:a0:ff:ae:ca:eb:50:bd:be:10:07:ae:06:
a9:58:75:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:10:01 2025 by rpki-client