Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d/99b9b4c9-5e10-308b-87ae-62a9b3ef195b.roa
File: 99b9b4c9-5e10-308b-87ae-62a9b3ef195b.roa (raw, json)
Hash identifier: lPB/i14V0E06ih6Zr94gSqKRAPkuFEayKpmDiIuDSnM=
Subject key identifier: 77:26:DA:0B:E0:25:4D:55:88:99:23:FE:44:61:E9:99:6F:05:B8:31
Certificate issuer: /CN=cc0eb2de-e5e8-4108-870e-8cbbff39885d
Certificate serial: 010D0C9F43285848828080943208B28DB6FEEE80
Authority key identifier: 6C:28:11:4B:C2:E3:4A:9C:81:97:DA:33:48:7B:1E:AF:4E:77:F4:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d/99b9b4c9-5e10-308b-87ae-62a9b3ef195b.roa
Signing time: Sat 11 Jan 2025 14:00:52 +0000
ROA not before: Sat 11 Jan 2025 14:00:52 +0000
ROA not after: Fri 11 Apr 2025 13:00:52 +0000
asID: 153371
IP address blocks: 2602:2db:ffe::/48 maxlen: 48
2602:2db:fff::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:82:80:80:94:32:08:b2:8d:b6:fe:ee:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc0eb2de-e5e8-4108-870e-8cbbff39885d
Validity
Not Before: Jan 11 14:00:52 2025 GMT
Not After : Apr 11 13:00:52 2025 GMT
Subject: CN=3a7712d2-a528-46e2-a65d-ac329cef8bc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:f6:69:c2:87:0c:b8:65:af:7a:42:84:35:b4:
15:bf:1b:ba:11:56:33:78:1d:0f:50:f2:c4:cd:d3:
aa:d3:a4:02:cd:2d:95:46:e0:24:22:ff:78:d5:93:
b4:f8:e6:a9:ed:44:19:bd:4f:6e:91:9e:ef:3f:cd:
fe:b2:83:39:43:61:e7:0b:85:64:76:8f:57:a7:4f:
cd:78:45:fc:6c:d4:53:7c:02:e4:fc:27:5e:fd:be:
b5:f7:38:2b:3e:b3:8d:ce:df:a7:74:ce:ad:1f:f4:
d8:40:5c:b3:8d:a1:ed:a9:59:76:e0:44:d1:ba:69:
00:b3:76:c1:23:cd:98:bf:de:bc:b4:d0:53:da:9d:
b8:9f:f4:59:ef:f2:80:15:0b:e1:f5:16:36:16:ee:
f3:52:2d:0c:a8:e8:c7:b8:bf:9a:9a:c4:6a:b4:21:
2a:b1:70:cb:05:cb:9b:8f:51:ac:0e:2d:db:73:4e:
18:14:a0:0f:d0:0a:7d:6d:d0:5a:83:ff:b3:3f:04:
01:95:2b:d8:10:d2:49:18:55:e0:cd:6d:97:f3:c4:
6a:77:7f:ae:4c:63:f6:a3:95:97:ee:7d:a3:70:93:
f5:36:f3:98:89:15:7f:8f:17:f6:c6:7d:9c:37:31:
9b:b6:94:f2:a0:77:85:a6:b5:79:14:7d:ff:f1:b8:
30:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:26:DA:0B:E0:25:4D:55:88:99:23:FE:44:61:E9:99:6F:05:B8:31
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d/99b9b4c9-5e10-308b-87ae-62a9b3ef195b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d/cc0eb2de-e5e8-4108-870e-8cbbff39885d.crl
X509v3 Authority Key Identifier:
keyid:6C:28:11:4B:C2:E3:4A:9C:81:97:DA:33:48:7B:1E:AF:4E:77:F4:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:2db:ffe::/47
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3a:aa:2a:ba:65:7b:57:0a:71:42:a5:8a:f6:27:58:15:c5:19:
34:af:0d:4e:16:5e:ba:1b:eb:d1:ea:20:ac:9b:a8:e3:4a:ab:
46:a9:f4:10:42:3b:21:35:84:12:06:fa:a0:68:73:c8:26:e7:
17:1d:2c:a2:6c:fd:65:0b:7b:b3:48:97:f0:87:f4:21:91:2c:
8b:dc:ce:79:39:3f:52:e2:ce:e2:ee:11:e0:00:22:91:e5:ca:
a4:cd:77:2d:d0:3a:a2:13:67:25:e8:a6:56:cf:61:08:3c:16:
e3:15:0b:0f:bd:9f:8e:0b:44:1b:fa:25:b3:86:84:5c:f4:7f:
1a:84:ab:85:82:c8:21:f3:11:7a:d1:39:77:6d:c4:b9:f5:57:
8d:fa:d8:92:3b:1c:27:d1:db:c0:74:fa:75:de:e8:e4:bd:b7:
2d:7a:29:66:5c:b6:a1:dc:84:d9:c5:cd:4e:76:20:6b:1e:de:
d7:ba:df:aa:c4:6c:77:64:dc:3a:eb:88:2f:f8:58:81:87:ef:
0b:3d:40:cf:d1:5b:58:f0:d1:7a:97:44:4e:af:7b:50:56:4d:
f9:0d:ab:3a:81:a7:24:50:35:37:74:ca:de:d0:f5:3e:d4:d6:
bf:7d:d8:0b:59:bd:f1:f7:7a:af:9a:da:8d:76:39:80:9c:50:
10:c3:ec:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:42:35 2025 by rpki-client