Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/c733dc09-d02d-3a61-84c0-81f6e8142032.roa
File: c733dc09-d02d-3a61-84c0-81f6e8142032.roa (raw, json)
Hash identifier: YqJkS1MLzoxliVJ/V2ykRH9yIXbKdtxTtOYaUqCieCc=
Subject key identifier: CB:08:9C:A0:C8:20:F6:04:7C:AB:4D:E1:0F:88:C3:7C:2E:D0:91:E2
Certificate issuer: /CN=ab1101f4-a527-459b-8c16-d78b261e6de3
Certificate serial: 010D0C9F4328584944693ADF3B68810CB9353100
Authority key identifier: 99:9C:57:D9:0E:30:4E:74:DA:78:4A:5B:D2:9C:67:1E:DE:7A:6E:33
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/c733dc09-d02d-3a61-84c0-81f6e8142032.roa
Signing time: Sat 22 Mar 2025 01:00:40 +0000
ROA not before: Sat 22 Mar 2025 01:00:40 +0000
ROA not after: Fri 20 Jun 2025 01:00:40 +0000
asID: 16509
IP address blocks: 2602:277:3ee::/48 maxlen: 56
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:44:69:3a:df:3b:68:81:0c:b9:35:31:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab1101f4-a527-459b-8c16-d78b261e6de3
Validity
Not Before: Mar 22 01:00:40 2025 GMT
Not After : Jun 20 01:00:40 2025 GMT
Subject: CN=0ad66461-52dc-4047-8eeb-cd9f84a1b211
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:a9:a1:1f:78:21:ff:93:8f:fb:8e:e2:04:d3:
7f:05:e1:83:8e:36:32:dc:02:a5:05:8a:7d:41:23:
4c:52:47:42:f7:e0:08:ee:70:74:cd:01:20:4a:aa:
04:ae:da:99:95:1a:91:5a:22:20:d1:44:d3:18:6d:
21:4e:ca:93:4b:01:7b:ac:a0:0b:7f:67:91:09:72:
72:4c:42:be:de:32:0a:fa:cb:8f:d4:6c:91:1b:a9:
46:01:e1:6b:88:6f:c7:80:1e:4b:71:a6:36:11:4a:
15:94:cf:b7:6f:53:e5:1d:c7:32:4d:50:a3:5b:55:
23:f8:f0:f9:e3:2f:a6:e0:95:22:03:db:48:8b:40:
b2:9c:88:90:3d:63:e8:52:cb:c6:d1:3d:eb:dd:6b:
5a:69:e3:2d:41:4a:ce:31:6b:53:aa:6f:2a:b6:46:
02:4d:99:a2:3d:88:54:8b:1a:7b:50:45:10:42:8a:
f9:e1:d5:34:69:f0:50:9c:6a:1a:32:69:42:f7:55:
f7:bb:11:69:06:c2:3e:8f:cb:d7:4e:7c:5f:40:54:
11:25:f8:18:91:2e:a7:c6:f5:eb:71:2e:6c:44:9c:
54:04:1a:86:09:14:69:38:91:3c:96:0e:11:5b:6d:
83:73:b7:40:b5:9a:95:c2:fc:4f:24:d4:37:4a:60:
9a:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:08:9C:A0:C8:20:F6:04:7C:AB:4D:E1:0F:88:C3:7C:2E:D0:91:E2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/c733dc09-d02d-3a61-84c0-81f6e8142032.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/ab1101f4-a527-459b-8c16-d78b261e6de3.crl
X509v3 Authority Key Identifier:
keyid:99:9C:57:D9:0E:30:4E:74:DA:78:4A:5B:D2:9C:67:1E:DE:7A:6E:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:277:3ee::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
35:b9:30:07:65:8b:42:b8:d1:6e:15:50:c3:9d:39:9e:f0:a6:
b3:0d:4b:64:9d:bf:d8:ba:ad:a4:c1:10:2b:87:60:73:92:e4:
54:6f:f3:3b:24:f9:32:f7:50:b3:34:2c:0d:ef:f1:c9:d3:61:
26:35:2e:78:f7:99:d4:8f:e9:fb:d9:82:e6:7b:7b:96:c8:f5:
44:1c:d1:13:b9:54:cd:3b:27:7e:be:0a:f6:7f:66:0f:b3:8f:
c8:2f:54:ae:0a:4d:ed:00:03:41:cd:b9:88:f0:54:ab:e1:95:
1c:97:3c:e6:c9:d4:cb:90:bb:d4:b1:32:23:82:95:9e:ad:d0:
58:c6:ad:b0:62:01:88:d6:38:14:82:ce:33:a4:72:26:ae:1e:
82:33:04:39:04:ea:81:cf:42:f2:80:be:12:1a:99:91:11:de:
0d:22:5f:0e:4c:1e:3d:4f:84:b2:12:be:33:28:df:ad:29:d3:
e6:2e:99:9e:b4:96:a6:fa:f0:14:89:87:e3:26:d1:17:db:7a:
89:d6:5b:e4:06:1c:bc:7f:2c:dd:65:ae:99:02:85:cf:4d:ae:
86:f5:e7:0b:17:ec:03:a2:f8:ba:2b:8b:ac:1a:75:ed:55:05:
da:1b:b7:46:00:c3:1e:6c:38:c8:ac:7b:5d:35:04:a0:8a:5d:
97:89:01:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:03:17 2025 by rpki-client