Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd/2060d590-d888-3d05-a157-277fca0b7579.roa
File: 2060d590-d888-3d05-a157-277fca0b7579.roa (raw, json)
Hash identifier: e7s3QboJLQXXfzMOBfnwbGF5ABd4j2XAbKscULL9Mn8=
Subject key identifier: F9:5D:29:39:03:C0:6D:2C:C1:40:8F:42:DB:74:DB:23:D2:56:5A:35
Certificate issuer: /CN=a42c5795-954d-468f-9deb-7f3ab63c11dd
Certificate serial: 010D0C9F432858491A008D25ADBBAE854C8D3A80
Authority key identifier: 85:0F:43:17:4E:E3:DC:C6:CF:1E:7A:58:D6:7C:8B:82:F1:17:DC:70
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd/2060d590-d888-3d05-a157-277fca0b7579.roa
Signing time: Thu 06 Mar 2025 20:25:57 +0000
ROA not before: Thu 06 Mar 2025 20:25:57 +0000
ROA not after: Wed 04 Jun 2025 19:25:57 +0000
asID: 0
IP address blocks: 2602:fd10:100::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:1a:00:8d:25:ad:bb:ae:85:4c:8d:3a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a42c5795-954d-468f-9deb-7f3ab63c11dd
Validity
Not Before: Mar 6 20:25:57 2025 GMT
Not After : Jun 4 19:25:57 2025 GMT
Subject: CN=e4f94ff7-d523-4e68-84f5-5f02f8088bcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:df:94:0f:df:43:69:b0:96:46:c1:cd:be:94:
4f:58:3e:91:72:d1:45:0d:3c:99:7b:b5:2e:32:96:
03:76:3e:08:b5:a5:80:52:42:e2:2c:df:32:f8:a0:
47:2f:7c:06:3d:59:f4:59:9e:57:bb:be:84:87:94:
38:55:3a:42:5f:b3:a3:73:63:ce:d5:16:70:0c:38:
84:c3:93:54:85:2f:ba:d2:33:ae:b6:b2:e4:d1:c1:
45:76:09:75:9c:bf:da:bb:21:44:f9:bf:0d:0a:5d:
fa:dc:6d:00:a1:1b:7c:8d:74:78:c0:3a:a3:9e:72:
05:38:77:20:a2:16:7c:ed:23:a6:ce:92:2b:6e:36:
95:78:dc:d5:f7:25:b9:59:34:53:23:ce:e5:f8:7f:
1a:17:56:78:30:ef:bb:a2:f7:b3:1d:fa:ce:99:ca:
74:93:9d:c3:a4:ac:64:6d:11:00:69:80:50:62:3f:
9b:42:8e:6c:4c:3c:68:e3:91:4b:eb:f2:2e:ca:1f:
dc:0d:a9:bc:7b:f8:c7:11:0d:05:f4:10:4d:35:67:
3c:eb:fd:57:a2:60:9e:cf:09:8c:50:ae:6d:cc:17:
f8:c4:6f:fd:75:ca:81:26:45:34:07:1b:cb:9c:5d:
2c:61:55:c6:a4:49:8e:7d:00:22:9a:00:10:7c:0f:
a3:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:5D:29:39:03:C0:6D:2C:C1:40:8F:42:DB:74:DB:23:D2:56:5A:35
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd/2060d590-d888-3d05-a157-277fca0b7579.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd/a42c5795-954d-468f-9deb-7f3ab63c11dd.crl
X509v3 Authority Key Identifier:
keyid:85:0F:43:17:4E:E3:DC:C6:CF:1E:7A:58:D6:7C:8B:82:F1:17:DC:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:fd10:100::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
03:8b:e8:25:51:b7:3c:26:60:b3:fb:76:33:6b:e4:af:ea:6d:
2f:19:31:66:e0:5c:a6:ba:db:ed:21:79:ec:4c:da:50:96:e1:
e3:d4:51:99:b3:72:e6:fb:7b:f9:86:f3:f0:a0:95:40:7e:23:
e9:4f:a0:cd:a7:4e:a5:da:d1:59:31:24:f3:cf:16:ab:96:11:
45:c9:de:d3:d4:a2:e5:48:54:87:30:81:10:18:5d:9f:64:8c:
c8:72:25:56:10:21:23:cf:1f:98:40:b7:0e:a6:53:74:3f:a9:
1a:dd:ea:c2:e8:b0:32:25:7e:c1:ad:f6:3f:78:0a:09:dc:70:
0b:6f:f2:10:5c:1c:1e:47:44:cb:0c:5e:af:d4:e5:d3:7b:fb:
3b:2d:c3:87:87:5b:74:3d:9a:93:9f:e8:66:75:ac:38:be:75:
0f:ca:41:6f:92:37:a7:3c:05:f5:e3:92:c9:60:a1:99:24:c3:
52:b9:88:24:38:18:ba:e3:ed:ea:ce:35:94:25:42:4e:6e:8c:
31:19:9b:5c:b0:d4:91:87:55:81:7c:51:54:ba:07:dc:d3:a3:
fe:d3:38:0c:ef:9a:ec:62:df:55:e3:ba:44:57:30:45:81:05:
2c:3c:ea:dd:ed:38:58:cf:71:31:43:b7:59:5b:df:d9:71:f8:
4e:ba:40:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:10:04 2025 by rpki-client