Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/85f2ee15-c93c-36b9-b51d-dba0e55b61b1.roa
File: 85f2ee15-c93c-36b9-b51d-dba0e55b61b1.roa (raw, json)
Hash identifier: EUYsDaLpXVHJy1WPd6liAmtpGUj3X35iHFr2BS+w9qc=
Subject key identifier: EE:EE:74:27:4D:6D:45:7F:FA:1E:B5:A3:57:BA:B2:2E:1F:62:EA:5D
Certificate issuer: /CN=ab1101f4-a527-459b-8c16-d78b261e6de3
Certificate serial: 010D0C9F43285848DEA1197EEE3C23E40CBFA580
Authority key identifier: 99:9C:57:D9:0E:30:4E:74:DA:78:4A:5B:D2:9C:67:1E:DE:7A:6E:33
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/85f2ee15-c93c-36b9-b51d-dba0e55b61b1.roa
Signing time: Thu 13 Feb 2025 14:00:50 +0000
ROA not before: Thu 13 Feb 2025 14:00:50 +0000
ROA not after: Wed 14 May 2025 13:00:50 +0000
asID: 16509
IP address blocks: 2602:277:d00::/47 maxlen: 56
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:de:a1:19:7e:ee:3c:23:e4:0c:bf:a5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab1101f4-a527-459b-8c16-d78b261e6de3
Validity
Not Before: Feb 13 14:00:50 2025 GMT
Not After : May 14 13:00:50 2025 GMT
Subject: CN=aae40211-7e8a-4e8b-858b-7be25159575e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:7c:91:b9:7d:25:1a:b5:f5:56:36:4a:86:97:
98:b3:5b:5d:38:c6:34:5f:1b:05:c1:a8:dd:55:55:
65:57:11:e8:50:33:0e:f2:71:40:db:f8:16:a0:70:
14:cc:7e:21:b5:53:21:0f:78:3e:ee:62:5f:41:7b:
c8:8e:42:97:d2:74:51:68:45:37:a1:c4:b5:d1:79:
fc:2f:30:a3:ef:91:79:02:8b:69:dd:63:58:a5:f8:
b7:b0:b4:64:b7:bc:aa:9a:bb:b2:ab:9d:c9:16:53:
82:25:c4:02:16:60:a7:a3:3e:4e:2c:02:e5:43:fa:
e9:bb:27:59:20:f6:ec:89:a7:a6:3b:41:9d:8b:27:
2f:55:1a:4f:7a:2e:14:d9:62:be:9c:f7:63:38:0d:
44:c5:be:75:d8:0d:35:f1:f9:b2:58:1d:5d:c4:f1:
78:97:61:5a:a2:95:99:4b:45:9c:c8:d9:7a:06:ab:
1e:62:82:53:f5:a0:0a:03:d9:4d:38:82:2e:76:db:
ff:6d:78:70:47:8d:86:7d:50:f2:fe:b0:7e:1e:de:
61:4a:53:a4:95:9c:30:9a:67:2c:7d:17:e3:25:a0:
89:56:9c:1a:d9:4c:c4:8b:5a:aa:0b:e5:de:5d:db:
f0:1b:93:5c:8b:6c:40:67:fa:b8:37:a5:28:25:10:
97:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:EE:74:27:4D:6D:45:7F:FA:1E:B5:A3:57:BA:B2:2E:1F:62:EA:5D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/85f2ee15-c93c-36b9-b51d-dba0e55b61b1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/ab1101f4-a527-459b-8c16-d78b261e6de3.crl
X509v3 Authority Key Identifier:
keyid:99:9C:57:D9:0E:30:4E:74:DA:78:4A:5B:D2:9C:67:1E:DE:7A:6E:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:277:d00::/47
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
30:4e:ce:bd:1b:f1:fc:12:30:ca:a9:0e:6f:bc:49:95:92:91:
37:3d:3d:5e:7c:dd:1d:ed:20:79:24:cf:4d:ba:82:ef:c6:b2:
54:d7:0e:ce:65:4d:47:1d:57:d1:a5:1b:57:06:4d:0d:b2:ad:
f7:d1:c1:14:14:31:b6:87:42:15:d2:85:7f:9a:c8:ab:16:74:
a0:29:52:d8:d2:cc:49:3f:f7:26:96:d1:01:61:3a:e0:42:1d:
95:80:0d:88:5d:f2:84:a4:37:01:f4:70:8e:33:3d:57:38:71:
6b:02:c0:29:3a:c6:59:41:4e:14:83:4c:a9:10:8a:47:6e:51:
83:ef:9e:64:09:33:a7:a0:28:47:d5:97:b0:6a:e7:f2:ef:51:
32:86:8e:b3:bd:1d:70:de:fa:77:79:8b:71:a7:3d:7c:7e:49:
f3:92:18:94:f4:93:d2:6d:e7:fe:99:e4:18:15:23:4f:1e:c6:
bf:13:9d:1a:f1:eb:c7:d5:f9:39:38:f3:f4:cb:06:96:3c:a6:
08:49:e1:4e:72:ef:90:4f:37:40:fa:00:a1:03:41:28:2b:37:
12:8d:1e:9a:6d:c6:78:cf:90:be:cd:4f:1c:04:15:aa:0c:ff:
5e:fe:de:a8:66:39:d2:99:78:94:4a:ea:a5:f8:bc:f0:6b:d7:
d5:8b:f0:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:50:14 2025 by rpki-client