Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b11a9b61-2f33-4a7e-b2c7-d6bfdd92f4de/ff26649f-4bb0-3cb3-8ee1-8781aa68dc95.roa
File: ff26649f-4bb0-3cb3-8ee1-8781aa68dc95.roa (raw, json)
Hash identifier: J8eeHMcElZVIrdtTFVgebVB6TUkHmsPeK/klZwOQ+/I=
Subject key identifier: 42:9C:66:EA:8B:2E:23:B3:B7:25:1B:A0:46:92:94:80:F0:E0:B4:01
Certificate issuer: /CN=b11a9b61-2f33-4a7e-b2c7-d6bfdd92f4de
Certificate serial: 010D0C9F43285848CDE111414CE7F44BDB1B2120
Authority key identifier: ED:70:2C:A6:48:67:EF:6F:70:AD:9F:77:F4:71:49:6F:6C:DD:64:1F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b11a9b61-2f33-4a7e-b2c7-d6bfdd92f4de.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b11a9b61-2f33-4a7e-b2c7-d6bfdd92f4de/ff26649f-4bb0-3cb3-8ee1-8781aa68dc95.roa
Signing time: Fri 07 Feb 2025 14:00:53 +0000
ROA not before: Fri 07 Feb 2025 14:00:53 +0000
ROA not after: Thu 08 May 2025 13:00:53 +0000
asID: 150698
IP address blocks: 2602:fafe:200::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:cd:e1:11:41:4c:e7:f4:4b:db:1b:21:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b11a9b61-2f33-4a7e-b2c7-d6bfdd92f4de
Validity
Not Before: Feb 7 14:00:53 2025 GMT
Not After : May 8 13:00:53 2025 GMT
Subject: CN=832edbe8-125e-4ab6-be59-400397c5efef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:6c:18:02:3c:27:67:06:d1:27:17:36:ae:fd:
8c:84:75:ca:53:06:f6:1e:d9:c0:05:09:79:63:56:
1e:e8:4f:74:36:a3:8c:9c:e4:58:ab:6b:4e:35:e2:
19:78:95:24:6a:b7:27:d5:c4:5c:7c:1d:35:35:cf:
1a:0f:f9:5b:46:94:77:66:79:00:bb:1c:e5:12:98:
1f:82:f2:9c:f0:a1:f4:e7:48:63:c6:37:26:84:fc:
5c:37:2d:7a:a1:0f:91:4d:91:23:31:13:38:0e:42:
b0:e4:fa:a4:7a:30:d8:cc:01:c2:0f:82:20:91:c8:
6f:3b:72:59:3f:44:9f:a6:1b:ba:21:b0:03:dc:01:
5e:7b:50:7d:98:6a:d2:09:c5:28:42:87:8e:46:57:
8a:9f:da:b0:72:3c:a0:29:5a:4e:32:17:be:53:ee:
dc:ed:e9:98:44:69:b4:97:3e:52:df:f6:e7:41:16:
36:15:29:0d:8e:be:a5:19:9f:62:4f:7a:45:5e:96:
78:e8:80:c7:95:ca:d1:a0:45:d9:cc:21:77:50:82:
38:9b:29:ac:40:26:db:0d:d4:d2:09:86:02:45:8e:
e7:b0:a5:f8:ba:d4:8b:1e:73:65:c0:de:85:f3:aa:
fb:87:ab:03:08:3f:4a:3b:b0:ef:71:13:70:95:3f:
41:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:9C:66:EA:8B:2E:23:B3:B7:25:1B:A0:46:92:94:80:F0:E0:B4:01
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b11a9b61-2f33-4a7e-b2c7-d6bfdd92f4de/ff26649f-4bb0-3cb3-8ee1-8781aa68dc95.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b11a9b61-2f33-4a7e-b2c7-d6bfdd92f4de/b11a9b61-2f33-4a7e-b2c7-d6bfdd92f4de.crl
X509v3 Authority Key Identifier:
keyid:ED:70:2C:A6:48:67:EF:6F:70:AD:9F:77:F4:71:49:6F:6C:DD:64:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b11a9b61-2f33-4a7e-b2c7-d6bfdd92f4de.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:fafe:200::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
21:a6:9b:4a:05:7f:31:53:8b:9f:99:5c:74:d9:3e:7c:c8:63:
68:30:e6:ce:7a:af:d6:c3:3b:5f:15:0e:9b:02:3a:6d:7f:4b:
e9:ed:70:f3:1c:76:cc:c7:15:5b:88:8a:55:89:d1:14:83:03:
09:13:2e:55:6a:de:8f:58:d9:0b:85:d4:fa:05:fe:dd:bf:62:
82:2b:3b:16:34:dd:3e:3e:54:cf:b7:01:c3:e4:3a:53:a5:c6:
04:0a:e0:7d:f7:22:95:cf:af:57:db:1e:88:ba:57:5c:34:63:
0e:dd:a9:59:40:7d:0b:e5:e3:bd:cf:6e:15:fa:43:87:d0:e2:
6e:dd:08:5c:d8:f3:59:d9:06:0c:f6:62:1b:25:58:12:e5:97:
d9:19:37:66:0e:be:bf:ae:e5:6c:69:a7:4f:a0:9b:bd:7f:dd:
5f:36:a7:7f:69:ee:0d:71:bd:9a:92:ff:e6:7e:cd:e2:39:a3:
bf:bb:61:d8:1f:c7:cb:7b:0f:17:af:41:1d:7d:68:0e:94:29:
37:4b:c1:ed:c6:8d:d2:2f:44:f0:58:94:9f:4a:32:c9:95:12:
a3:36:9e:a8:69:7f:d8:56:86:98:ea:98:e8:61:20:f2:b0:16:
54:83:81:26:49:98:b1:d3:06:66:6f:ac:54:f0:b9:4c:99:92:
87:ef:3e:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:32:17 2025 by rpki-client