Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/af0f6408-7633-3df8-87c2-0cc333e66c3a.roa
File: af0f6408-7633-3df8-87c2-0cc333e66c3a.roa (raw, json)
Hash identifier: Vhc1GdJpdSh5GQG370ZITYJzBhBf/YSVoZ2o/hv7uv8=
Subject key identifier: DB:01:82:E9:BE:82:D1:01:D7:EA:71:7D:69:32:6F:A0:D5:47:CE:DC
Certificate issuer: /CN=1ae9796a-5f3d-4f47-b117-42360a213e37
Certificate serial: 010D0C9F432858493C0920A0D5CE3AACB7445D80
Authority key identifier: 4E:CB:3A:FE:5F:05:1E:AC:06:DD:59:CE:47:A6:DE:B3:29:7F:41:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/af0f6408-7633-3df8-87c2-0cc333e66c3a.roa
Signing time: Wed 19 Mar 2025 01:00:40 +0000
ROA not before: Wed 19 Mar 2025 01:00:40 +0000
ROA not after: Tue 17 Jun 2025 01:00:40 +0000
asID: 13627
IP address blocks: 2602:fba3:100::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:3c:09:20:a0:d5:ce:3a:ac:b7:44:5d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ae9796a-5f3d-4f47-b117-42360a213e37
Validity
Not Before: Mar 19 01:00:40 2025 GMT
Not After : Jun 17 01:00:40 2025 GMT
Subject: CN=e73b9455-2d6a-4acb-b3e7-64724219e159
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:30:dd:a2:81:c8:fa:b0:9e:58:ce:ea:92:0e:
e3:6d:e2:64:34:4f:d2:e2:74:84:36:e0:63:81:22:
b5:15:0c:a9:b9:c9:87:0d:6e:19:12:d6:22:e1:52:
da:2a:c4:e8:f9:40:2a:c4:34:e0:3c:40:cb:0e:40:
18:05:2e:cd:ed:ce:1f:d6:89:b8:5d:02:3c:65:28:
21:21:6c:ae:ce:df:ff:87:0b:a4:5d:7d:17:96:da:
62:44:32:4e:b6:f5:65:e9:66:11:be:5f:c4:00:b5:
24:09:2f:89:81:28:bc:f2:17:5c:82:26:ba:48:44:
03:52:97:ee:2b:7f:f6:3f:71:50:54:7d:29:c3:83:
45:4e:6c:b6:2f:2d:2f:63:f9:17:75:e6:59:17:20:
a4:a8:19:9a:8c:2b:fb:31:5b:62:a6:57:fc:eb:bb:
24:19:c7:da:13:cd:6f:45:e5:d7:55:7d:fc:47:2d:
d7:3e:38:ee:1c:ac:e6:72:a0:cc:a0:f7:12:f6:83:
15:4c:37:d9:da:02:e7:fa:27:78:a2:e9:1c:1c:f8:
69:a1:7e:f2:db:dc:0c:0e:8c:ca:93:6e:92:45:9c:
06:f5:dc:e4:57:25:e0:f0:27:73:94:69:45:b5:a6:
b2:3f:ea:82:7f:ea:64:e8:32:ec:ac:c6:c2:fe:85:
44:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:01:82:E9:BE:82:D1:01:D7:EA:71:7D:69:32:6F:A0:D5:47:CE:DC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/af0f6408-7633-3df8-87c2-0cc333e66c3a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/1ae9796a-5f3d-4f47-b117-42360a213e37.crl
X509v3 Authority Key Identifier:
keyid:4E:CB:3A:FE:5F:05:1E:AC:06:DD:59:CE:47:A6:DE:B3:29:7F:41:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:fba3:100::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2b:a1:41:90:be:3b:a2:81:f5:44:ff:b6:56:7a:7b:88:58:bf:
fa:31:dc:8e:60:27:22:67:4e:0f:1b:95:e5:48:1e:71:a2:ec:
be:2b:b6:fa:45:31:1d:8c:9f:f3:d9:87:81:02:bd:4b:76:51:
2a:df:6a:b1:d7:13:c7:df:12:8a:08:9e:e1:1a:b4:01:dd:85:
4e:af:a2:55:0b:ab:bc:72:63:d0:81:91:db:f9:1a:6d:91:b7:
83:0f:66:ec:87:da:2e:9b:85:35:4d:b4:7c:eb:37:33:53:b5:
36:17:42:dd:92:2a:6e:0f:df:c9:b8:c4:2d:ac:43:a7:29:dd:
4b:67:66:72:2f:a9:28:e9:21:34:ec:9b:41:2b:17:4b:4a:a1:
bf:78:55:97:18:f8:95:de:73:5a:8e:e5:30:23:3a:ec:44:d4:
94:3f:a3:f7:f2:a8:76:47:bf:57:e2:a7:11:12:1e:d3:a2:9e:
5f:d6:b0:48:f2:3a:89:33:5c:b2:f6:42:70:1c:d9:17:c6:09:
4a:5e:c5:a6:74:40:0e:8e:af:cb:f9:6c:15:1a:37:f3:43:94:
e7:ad:e2:e0:5c:6a:9b:01:d4:f3:0d:57:74:bf:f9:f7:28:05:
84:fc:d0:33:44:d6:72:7e:f9:a0:4a:16:30:3d:c6:b2:ee:ef:
c0:c2:7c:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:18:51 2025 by rpki-client