Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/a7244564-9404-3b6d-a87c-23f016c7e4c6.roa
File: a7244564-9404-3b6d-a87c-23f016c7e4c6.roa (raw, json)
Hash identifier: X9xHnapyPu8B7DtoDj4SBrju+95tXvmGRam6DyaqMc0=
Subject key identifier: 12:AA:A0:2C:00:84:57:19:12:EF:AA:96:A9:97:80:FE:8A:08:83:6E
Certificate issuer: /CN=2890f390-5e53-4d08-aa52-1de5ce7ffb85
Certificate serial: 010D0C9F4328584950F9655C264B336F30B0F440
Authority key identifier: 5E:73:23:98:FC:2B:64:32:AE:9C:D7:6C:D6:1F:5B:C0:7A:14:38:1A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/a7244564-9404-3b6d-a87c-23f016c7e4c6.roa
Signing time: Wed 26 Mar 2025 13:00:53 +0000
ROA not before: Wed 26 Mar 2025 13:00:53 +0000
ROA not after: Tue 24 Jun 2025 13:00:53 +0000
asID: 46432
IP address blocks: 2602:fe59:30::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:50:f9:65:5c:26:4b:33:6f:30:b0:f4:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2890f390-5e53-4d08-aa52-1de5ce7ffb85
Validity
Not Before: Mar 26 13:00:53 2025 GMT
Not After : Jun 24 13:00:53 2025 GMT
Subject: CN=f5ec2b2b-8bce-4ae2-b5af-596857473548
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:30:50:33:c0:25:61:be:71:5c:41:1e:97:7d:
5e:f3:d0:d3:08:03:1f:ce:67:52:c5:79:51:82:38:
fa:2f:34:19:2c:f3:2c:e2:51:9e:55:6f:ef:4f:13:
eb:4d:67:2b:31:59:e0:69:5c:28:26:6a:c2:f3:0a:
ca:a3:97:24:7f:1c:a0:db:6b:69:8c:66:41:d8:60:
f0:cd:06:bb:78:36:86:e2:60:e1:d9:cb:2a:00:42:
94:34:d0:7c:7a:c6:b9:a8:40:ad:f6:60:3f:30:6e:
be:bb:b7:82:46:88:6b:71:54:ab:44:f8:d5:43:8e:
ee:ac:ae:66:8f:d0:b7:ff:f5:64:0a:7b:7d:4e:e9:
98:3d:2d:b1:58:20:83:92:f4:44:5e:ec:c0:34:5d:
be:33:15:7d:1c:97:d3:d5:a1:91:26:cc:b4:f1:11:
7e:af:77:a0:25:1a:f0:8a:87:f0:39:8c:42:5c:92:
08:a3:fd:83:eb:09:6c:db:4c:1d:f0:1d:e2:67:e7:
34:3e:23:c6:39:72:31:59:cc:4c:9d:fc:d5:38:bc:
e7:00:dc:da:bd:9b:ad:e3:72:15:69:74:73:9d:18:
9c:28:dd:ab:77:40:62:77:86:2d:ba:68:99:8b:44:
9b:dc:a3:1e:bc:61:40:50:21:0e:34:96:8a:8d:9c:
5b:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:AA:A0:2C:00:84:57:19:12:EF:AA:96:A9:97:80:FE:8A:08:83:6E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/a7244564-9404-3b6d-a87c-23f016c7e4c6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/2890f390-5e53-4d08-aa52-1de5ce7ffb85.crl
X509v3 Authority Key Identifier:
keyid:5E:73:23:98:FC:2B:64:32:AE:9C:D7:6C:D6:1F:5B:C0:7A:14:38:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:fe59:30::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
37:b3:0a:06:30:91:10:59:3d:89:95:37:d2:22:0d:d6:6b:32:
53:6a:50:d6:28:54:9b:da:e2:04:aa:5f:6f:83:53:3e:cc:aa:
53:1d:f3:a2:65:bd:63:9c:52:34:4d:89:86:5a:bf:3c:6d:4d:
94:d5:62:dc:4e:12:90:49:85:40:19:1b:d0:fc:44:f6:1b:c1:
27:42:26:7a:21:0a:af:7b:81:36:1e:58:80:a8:ce:d9:ee:a4:
dc:b7:ad:1f:de:39:6e:b6:27:94:66:11:30:fc:29:f7:1f:08:
35:f2:ed:ee:8e:6d:ed:ca:15:9e:fa:08:19:e4:fb:38:c2:0d:
9b:f8:a7:97:d3:75:d8:27:08:f8:58:6b:e8:e7:fc:eb:c0:83:
25:dc:a3:e0:3c:37:8c:e4:d6:8c:e9:5b:2d:33:91:68:43:7e:
b8:e5:b6:f2:a2:23:67:f5:ac:da:2c:af:67:e0:96:67:66:40:
fe:07:21:a5:2b:86:80:29:b1:13:df:9e:99:03:c0:2c:58:02:
a9:c3:26:ed:c2:93:c0:79:f4:6f:d2:b2:e2:90:a7:df:45:bd:
c8:fc:d9:d7:c8:4e:6a:41:f2:44:54:18:3b:cd:38:cd:51:d4:
e8:ec:5e:7c:f9:4c:e3:57:27:9f:5b:69:73:ea:23:ef:29:52:
30:5a:2d:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:24:56 2025 by rpki-client