Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b11a9b61-2f33-4a7e-b2c7-d6bfdd92f4de/3b3e61c9-8d71-3b0a-a20e-a8e0d00afe49.roa
File: 3b3e61c9-8d71-3b0a-a20e-a8e0d00afe49.roa (raw, json)
Hash identifier: PVCjoRhKG2LFk4Oq+IWmXeqQXsUZzob5JbJfuxbiWEE=
Subject key identifier: BA:39:63:5D:D8:43:BF:F5:FB:0F:30:CB:43:C4:70:81:53:DF:49:30
Certificate issuer: /CN=b11a9b61-2f33-4a7e-b2c7-d6bfdd92f4de
Certificate serial: 010D0C9F43285848DA70F82B4BD13E1077C60480
Authority key identifier: ED:70:2C:A6:48:67:EF:6F:70:AD:9F:77:F4:71:49:6F:6C:DD:64:1F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b11a9b61-2f33-4a7e-b2c7-d6bfdd92f4de.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b11a9b61-2f33-4a7e-b2c7-d6bfdd92f4de/3b3e61c9-8d71-3b0a-a20e-a8e0d00afe49.roa
Signing time: Wed 12 Feb 2025 02:00:39 +0000
ROA not before: Wed 12 Feb 2025 02:00:39 +0000
ROA not after: Tue 13 May 2025 01:00:39 +0000
asID: 150698
IP address blocks: 2602:fafe:100::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:da:70:f8:2b:4b:d1:3e:10:77:c6:04:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b11a9b61-2f33-4a7e-b2c7-d6bfdd92f4de
Validity
Not Before: Feb 12 02:00:39 2025 GMT
Not After : May 13 01:00:39 2025 GMT
Subject: CN=70af63f3-b3b8-4cbf-8460-c53bc2dc824b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:03:ea:ef:d7:71:c0:82:81:7c:3c:6c:cd:86:
50:e1:23:07:3a:01:b9:16:17:17:56:01:48:1f:7d:
17:c4:f4:eb:70:e7:88:ff:2c:b3:47:24:4b:c3:08:
75:67:a2:fb:e3:94:f7:cb:5b:8c:c2:42:3a:52:9b:
da:4e:83:60:c9:93:83:64:f0:9f:01:1e:bd:f0:7c:
f7:19:e7:1f:bc:23:d2:34:a4:ab:4f:36:9c:75:39:
73:69:78:43:12:cf:c3:c8:dc:79:95:9f:77:b2:ec:
d1:09:9f:29:16:79:19:90:10:42:1d:95:aa:6f:f7:
15:ba:a2:65:00:15:60:ab:a0:86:e0:ac:8a:24:b5:
e9:4d:29:d8:6a:0b:26:1a:f5:b3:4e:df:15:25:72:
7b:5c:d0:bb:f5:ae:62:d5:da:a9:0f:e7:d4:43:f2:
5f:39:e6:98:45:76:33:9d:4a:a5:20:2c:a8:7c:d1:
77:9a:77:4a:05:16:a1:e3:d6:1c:56:8d:12:fc:94:
5b:c4:a9:11:b3:70:dd:91:af:0e:97:c8:cc:f7:6a:
55:7d:93:d9:b3:4c:35:bd:3d:83:a4:fb:81:63:aa:
92:5f:23:e3:f1:f8:82:31:c2:e0:21:93:8e:18:d5:
4f:9f:07:dc:51:7f:f4:c0:43:52:05:98:60:15:1d:
7d:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:39:63:5D:D8:43:BF:F5:FB:0F:30:CB:43:C4:70:81:53:DF:49:30
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b11a9b61-2f33-4a7e-b2c7-d6bfdd92f4de/3b3e61c9-8d71-3b0a-a20e-a8e0d00afe49.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b11a9b61-2f33-4a7e-b2c7-d6bfdd92f4de/b11a9b61-2f33-4a7e-b2c7-d6bfdd92f4de.crl
X509v3 Authority Key Identifier:
keyid:ED:70:2C:A6:48:67:EF:6F:70:AD:9F:77:F4:71:49:6F:6C:DD:64:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b11a9b61-2f33-4a7e-b2c7-d6bfdd92f4de.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:fafe:100::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
92:cc:b6:a7:01:85:a7:cd:4d:01:86:48:0e:63:df:b0:69:40:
5e:71:7a:ed:39:71:84:f4:a0:45:45:ee:cb:0b:a5:3a:a4:aa:
75:07:85:19:ad:ab:56:61:50:05:0e:46:72:87:e4:71:7e:82:
36:0d:b8:1b:9a:08:5c:10:44:4c:06:98:03:6e:72:3f:ed:d4:
3b:2a:1d:83:c1:97:64:0c:72:35:6b:77:2a:15:74:37:12:c7:
36:9a:fc:0c:97:20:47:f0:87:b2:8a:8f:77:b1:52:1a:a4:9a:
11:ff:89:55:6f:dd:25:b4:09:45:50:25:d4:e1:40:a0:90:d6:
21:21:1d:e1:04:d7:ad:ae:ec:e5:04:68:2a:43:0e:07:f0:9e:
2d:53:d0:eb:50:a2:91:a7:24:ae:d3:86:b2:0b:67:46:7f:ac:
55:9b:9a:72:3f:12:23:f5:37:d0:63:85:b3:0e:2f:26:60:d1:
62:3a:58:e8:1a:da:b7:f9:82:5d:8e:9f:f3:55:f2:44:9f:4b:
3a:2e:81:62:98:7e:cb:de:39:62:69:aa:57:6c:a1:74:07:26:
57:46:37:91:e6:e0:9f:be:75:38:f2:1d:36:9a:25:89:30:5b:
31:ce:b1:c8:cc:48:7b:32:92:b1:34:cc:c0:59:4d:13:b9:7d:
5d:53:a9:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:55:25 2025 by rpki-client