Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/79353f45-382e-3f7b-8ee9-d418323d6524.roa
File: 79353f45-382e-3f7b-8ee9-d418323d6524.roa (raw, json)
Hash identifier: nef9F09xUDpB6eAhSW+VFJAaZwa0pxZiCsPmgd6w5BA=
Subject key identifier: 81:8C:E0:0A:2F:5A:E7:A3:F8:20:8F:11:BA:F0:6F:9A:5F:51:1D:54
Certificate issuer: /CN=1ae9796a-5f3d-4f47-b117-42360a213e37
Certificate serial: 010D0C9F432858493C0920B33BF2E0BD4BA65DC0
Authority key identifier: 4E:CB:3A:FE:5F:05:1E:AC:06:DD:59:CE:47:A6:DE:B3:29:7F:41:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/79353f45-382e-3f7b-8ee9-d418323d6524.roa
Signing time: Wed 19 Mar 2025 01:00:40 +0000
ROA not before: Wed 19 Mar 2025 01:00:40 +0000
ROA not after: Tue 17 Jun 2025 01:00:40 +0000
asID: 13627
IP address blocks: 2602:fba3::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:3c:09:20:b3:3b:f2:e0:bd:4b:a6:5d:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ae9796a-5f3d-4f47-b117-42360a213e37
Validity
Not Before: Mar 19 01:00:40 2025 GMT
Not After : Jun 17 01:00:40 2025 GMT
Subject: CN=24eea292-71a4-4fc9-ba23-239bae2e7876
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:c7:8b:90:c2:e9:d7:67:8c:d3:cc:5c:21:50:
15:76:af:26:5e:65:ea:e0:96:e3:d4:33:ea:c1:1b:
06:56:be:8a:c6:72:cc:70:f8:14:ee:d3:d1:a6:c5:
02:ad:f0:a7:c5:5b:6e:1f:6d:43:9d:bf:9f:8b:fd:
6b:dd:33:46:c8:cb:36:04:98:ba:f7:8b:8a:87:14:
72:26:49:c0:39:be:e0:d7:28:d9:dd:27:4c:37:a4:
96:18:0e:dd:85:2b:0c:b3:27:ac:d4:a1:b8:4c:ec:
24:7e:a9:3d:75:e7:d1:50:bd:1e:bf:70:2d:33:7a:
a2:14:46:3b:c0:95:65:5f:e2:91:9c:2a:67:06:92:
54:90:49:dc:e4:06:7d:d6:7f:fc:46:f3:e7:3c:76:
5d:b8:38:6c:e5:b3:1e:89:9d:64:72:26:1b:58:ca:
b1:c0:6e:d1:d5:e5:36:ce:ce:70:ac:08:b2:40:23:
b7:33:34:9e:ba:05:2d:dc:6f:d6:70:ee:97:20:1f:
aa:80:bf:57:36:31:36:a7:66:b1:e5:65:42:c1:fe:
99:6d:48:c9:80:e9:cd:d6:2f:5e:42:e5:ca:8e:11:
95:52:a0:be:e7:b9:f2:99:43:78:20:39:a0:f2:5d:
b7:1a:9c:72:8e:51:0f:3b:1f:28:5d:b3:dd:e9:84:
4d:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:8C:E0:0A:2F:5A:E7:A3:F8:20:8F:11:BA:F0:6F:9A:5F:51:1D:54
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/79353f45-382e-3f7b-8ee9-d418323d6524.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/1ae9796a-5f3d-4f47-b117-42360a213e37.crl
X509v3 Authority Key Identifier:
keyid:4E:CB:3A:FE:5F:05:1E:AC:06:DD:59:CE:47:A6:DE:B3:29:7F:41:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:fba3::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1a:08:83:02:de:9b:07:96:90:3e:c1:84:dc:5e:73:c0:a7:0b:
8f:de:f7:03:eb:6b:2b:e9:3a:70:ad:85:c8:c6:b0:0e:c5:92:
0f:0d:d5:37:09:73:ce:ff:39:31:be:56:17:fc:13:9c:00:16:
78:12:00:f9:21:81:2b:dc:23:0a:ac:61:88:f5:61:81:a8:a7:
2d:9f:48:3a:85:72:b0:4e:a7:ca:16:65:b7:ed:18:c6:75:5b:
77:d6:1f:9e:24:02:f5:cb:7b:c2:32:67:59:72:3a:80:38:ec:
c4:49:3f:a0:29:99:bf:5a:1c:c0:c2:1c:93:87:67:f8:df:52:
f4:0b:58:b1:cc:44:ef:98:21:00:c4:35:92:a7:53:6d:95:fa:
c4:af:ea:79:c0:b5:e2:f3:d4:28:a0:0b:ec:bf:a4:89:a9:90:
e7:49:b9:fe:7b:13:a7:4c:1f:ad:2e:b4:2f:b1:d7:1b:0e:cc:
70:04:30:d6:de:d5:2f:cc:f3:08:6f:fe:02:0f:ab:b8:f6:87:
92:4d:6e:3c:06:75:16:fd:b7:49:bb:c4:41:77:72:04:2f:35:
35:2b:b6:df:0c:30:02:89:cf:e0:01:5a:c7:02:7c:a6:8d:eb:
4a:fe:72:b2:a8:7e:e8:58:41:e1:58:25:14:6e:8e:9d:d0:a0:
06:bf:60:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:39:39 2025 by rpki-client