Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afa8b068-97b2-4c52-904f-d78c4e46fb8c/f598f20c-69c9-3772-916d-a8890b5243c8.roa
File: f598f20c-69c9-3772-916d-a8890b5243c8.roa (raw, json)
Hash identifier: 7qY+dqUgPzmr7pmIRzhi0vLwIseDKTIZsCBvUUzr2gs=
Subject key identifier: 8F:70:C0:CE:D2:73:A3:DC:76:1F:3B:2A:4A:EA:8C:0F:1D:7C:4B:2A
Certificate issuer: /CN=afa8b068-97b2-4c52-904f-d78c4e46fb8c
Certificate serial: 010D0C9F4328584949FE8F96B21B3B1B8B431220
Authority key identifier: 06:8A:44:11:76:8D:69:EA:42:55:0C:15:AD:78:BB:AD:A7:F1:62:5A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afa8b068-97b2-4c52-904f-d78c4e46fb8c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afa8b068-97b2-4c52-904f-d78c4e46fb8c/f598f20c-69c9-3772-916d-a8890b5243c8.roa
Signing time: Mon 24 Mar 2025 01:00:38 +0000
ROA not before: Mon 24 Mar 2025 01:00:38 +0000
ROA not after: Sun 22 Jun 2025 01:00:38 +0000
asID: 1007
IP address blocks: 2602:fb4a::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:49:fe:8f:96:b2:1b:3b:1b:8b:43:12:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afa8b068-97b2-4c52-904f-d78c4e46fb8c
Validity
Not Before: Mar 24 01:00:38 2025 GMT
Not After : Jun 22 01:00:38 2025 GMT
Subject: CN=4708ac5b-f535-4d42-a9de-6564422bca42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:3d:8a:0e:50:c2:12:71:25:83:bf:de:5d:c7:
4d:89:97:4a:44:a9:b6:e6:81:0b:b2:c6:cd:04:02:
8a:2d:3e:ff:83:7d:da:df:8e:4f:1d:9e:4c:dc:95:
46:a8:49:2c:2a:a5:fb:23:5b:72:35:2b:d6:1c:10:
8a:d1:59:58:e1:d8:c7:32:e6:3f:2b:46:52:e5:17:
ca:e1:34:64:59:79:5f:f3:03:22:74:98:cb:ed:a6:
e7:73:db:c3:fc:71:7b:4e:3b:da:0a:d3:a6:ed:ae:
5b:1a:6d:0a:ee:36:82:74:3f:59:af:8f:a8:e6:0e:
94:08:fb:53:0e:95:e2:91:4e:18:3b:74:f1:85:1f:
f2:f9:8d:d7:52:65:88:cc:78:09:72:c0:29:7d:02:
19:84:8a:dd:f0:c5:ff:37:c2:77:48:bd:ed:59:13:
1b:f5:4a:b9:a1:2e:84:e3:ed:6d:af:66:ed:99:cb:
15:b4:4b:94:83:f6:2c:80:22:88:d8:00:3d:3e:31:
8a:9b:12:e9:6a:65:cb:4b:03:b8:93:f1:8a:42:bc:
5f:00:67:d9:50:ba:83:e4:3b:6e:53:28:29:9f:69:
4c:62:01:b7:34:86:66:49:a5:8c:0a:07:73:34:6e:
e9:f5:ca:1d:cc:08:a8:fb:f9:cb:30:db:61:30:ae:
ed:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:70:C0:CE:D2:73:A3:DC:76:1F:3B:2A:4A:EA:8C:0F:1D:7C:4B:2A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afa8b068-97b2-4c52-904f-d78c4e46fb8c/f598f20c-69c9-3772-916d-a8890b5243c8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afa8b068-97b2-4c52-904f-d78c4e46fb8c/afa8b068-97b2-4c52-904f-d78c4e46fb8c.crl
X509v3 Authority Key Identifier:
keyid:06:8A:44:11:76:8D:69:EA:42:55:0C:15:AD:78:BB:AD:A7:F1:62:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afa8b068-97b2-4c52-904f-d78c4e46fb8c.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:fb4a::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
27:2a:4e:53:15:be:b6:ce:d4:fa:51:30:f2:e7:18:75:ca:ed:
68:de:a3:7b:ae:19:11:38:8c:98:a1:73:29:9b:8d:90:f9:f2:
85:de:bc:2c:24:ce:c5:fd:3e:3a:c2:f3:1d:a2:86:31:da:46:
0b:e4:e3:f4:d1:61:dd:ff:12:fa:fc:55:6c:3e:e4:05:e6:eb:
fa:58:ea:19:69:4f:2c:ed:7a:5a:2b:e6:12:b3:59:16:5a:26:
55:50:5b:07:a6:27:24:75:19:82:70:9c:54:45:9c:53:e5:2c:
98:07:2c:af:20:9c:e6:1a:49:54:20:52:f3:16:7e:62:2c:ce:
a5:d7:5a:3d:3b:78:89:89:0e:4c:a6:44:6a:42:67:2c:a1:9b:
af:b9:2b:1e:c1:87:48:f8:46:99:6b:eb:92:05:a1:09:19:bb:
86:af:1e:6e:18:fc:2b:22:85:cb:a4:e5:86:b7:39:47:c6:5d:
51:dc:c3:1f:78:31:df:02:91:93:af:06:2b:7d:d0:0a:f5:38:
1c:9f:82:c0:92:bc:0c:83:fa:28:8b:56:04:ff:57:03:07:e6:
da:9f:bc:77:d4:99:20:c0:09:17:c3:ca:85:12:49:ad:00:d9:
12:cb:c2:c8:bd:5a:03:39:36:19:5f:01:1f:28:40:0b:2d:ef:
78:ab:3e:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:26:28 2025 by rpki-client