Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd/4a62bdb1-0529-380b-a073-b9db5781902e.roa
File: 4a62bdb1-0529-380b-a073-b9db5781902e.roa (raw, json)
Hash identifier: +gVdEzgpyhDHL3R47q3J7MKIwT9MpyG7LMeCmoexsFE=
Subject key identifier: 31:C1:8F:27:F9:5C:B3:47:4B:95:F0:51:95:FF:F1:F8:7D:53:71:A7
Certificate issuer: /CN=a42c5795-954d-468f-9deb-7f3ab63c11dd
Certificate serial: 010D0C9F4328584919FFAEBDE4F784C461BE7180
Authority key identifier: 85:0F:43:17:4E:E3:DC:C6:CF:1E:7A:58:D6:7C:8B:82:F1:17:DC:70
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd/4a62bdb1-0529-380b-a073-b9db5781902e.roa
Signing time: Thu 06 Mar 2025 20:24:12 +0000
ROA not before: Thu 06 Mar 2025 20:24:12 +0000
ROA not after: Wed 04 Jun 2025 19:24:12 +0000
asID: 19529
IP address blocks: 2602:fd10::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:19:ff:ae:bd:e4:f7:84:c4:61:be:71:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a42c5795-954d-468f-9deb-7f3ab63c11dd
Validity
Not Before: Mar 6 20:24:12 2025 GMT
Not After : Jun 4 19:24:12 2025 GMT
Subject: CN=d4fbdbea-f0f5-4330-a866-c9d8b9ac91df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:1f:8b:4e:f8:cd:90:58:77:2f:2b:00:5e:d0:
2f:e0:40:0b:19:7d:f6:97:2d:24:5b:80:57:3d:0a:
69:44:5e:c6:66:c1:e1:b1:9c:5f:53:48:1f:92:f4:
4b:d2:7f:d2:61:3a:75:e5:da:3f:09:85:93:77:a9:
92:ef:6e:5d:c7:96:ed:0c:74:b1:38:3f:4f:2e:7c:
a5:d5:08:12:19:54:b1:ef:f7:0b:35:c5:8d:30:56:
d6:77:e3:3a:d4:16:df:e7:fc:e6:7c:37:a9:92:b9:
0d:9b:69:5f:e9:25:b7:32:13:56:18:8a:81:07:b4:
eb:55:b1:39:d7:82:f3:c7:14:86:cc:59:5b:f8:8f:
b6:12:2a:bb:3f:fc:aa:7b:78:6f:3d:d9:54:8f:0b:
b8:24:38:0f:65:58:15:05:96:42:1c:c8:a1:02:0b:
87:ac:1e:f1:a8:d7:bb:fa:1e:f6:fd:f9:a5:e9:39:
dc:e9:50:aa:a4:74:0c:99:fa:f6:4c:60:a9:3a:16:
f8:00:89:4d:3a:ed:db:42:fa:85:ab:17:d9:a2:d0:
ff:4e:5a:7c:ca:01:0b:02:51:7c:d9:69:45:5e:e7:
5a:60:a2:5e:e7:69:66:db:91:2e:58:d7:08:a1:28:
18:68:f8:6b:e6:de:01:dd:2b:bb:fe:d8:62:25:6d:
b0:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:C1:8F:27:F9:5C:B3:47:4B:95:F0:51:95:FF:F1:F8:7D:53:71:A7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd/4a62bdb1-0529-380b-a073-b9db5781902e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd/a42c5795-954d-468f-9deb-7f3ab63c11dd.crl
X509v3 Authority Key Identifier:
keyid:85:0F:43:17:4E:E3:DC:C6:CF:1E:7A:58:D6:7C:8B:82:F1:17:DC:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:fd10::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
20:e6:eb:13:fa:99:d7:2d:6b:e1:df:00:a3:53:a6:84:ed:81:
32:3c:94:c1:05:be:b4:a9:18:c7:a8:55:4c:5a:9f:bc:7e:99:
7d:79:87:11:b0:f9:ad:0c:82:f0:5d:c5:f9:47:6c:c0:c6:05:
fe:6c:c0:4a:b2:83:cc:5b:65:28:d9:85:84:1a:fb:c6:fe:0b:
32:29:f0:1d:6f:57:20:8b:46:37:17:b8:bd:0a:f7:87:60:27:
ce:61:71:81:fc:76:be:6b:e5:1f:6a:64:0d:4e:0f:36:09:f5:
dc:13:da:5b:c4:b2:c9:cc:39:12:3e:e7:22:bf:aa:89:09:70:
83:9e:40:0b:fe:1b:e5:e2:e2:01:88:bb:ac:a4:7b:89:0b:16:
57:4e:8d:3c:e7:d7:ba:fd:25:6e:0a:9c:94:de:dc:55:24:ca:
f6:92:3d:51:9e:a6:0d:25:3b:2b:0c:43:ac:ba:44:95:c5:1a:
50:98:09:98:46:94:45:95:a7:14:77:11:3d:a8:85:e6:4a:eb:
c6:a4:64:69:d0:6e:50:60:e9:e9:71:bb:6b:7b:a5:e6:0a:46:
21:c3:81:89:c7:e6:cd:0f:66:d7:d0:ef:ee:17:24:0a:f7:92:
fc:c8:92:13:44:40:d8:fc:ff:a2:a8:31:3f:42:26:a1:e7:a3:
63:81:7e:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:27:45 2025 by rpki-client