Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/2cec105a-4cfc-3be3-871f-f8991e2da5a3.roa
File: 2cec105a-4cfc-3be3-871f-f8991e2da5a3.roa (raw, json)
Hash identifier: CplGoU2IG7NMFEdU46XAUQSph13VEMznw6BKW7kdTLg=
Subject key identifier: 6D:9A:A4:40:D0:5D:AF:D4:D8:04:75:99:FF:68:95:26:28:49:E5:22
Certificate issuer: /CN=f7798abb-711d-4f10-bc46-bceed055e1fa
Certificate serial: 010D0C9F43285848B62616760B6C4D08E3968A80
Authority key identifier: CC:90:3D:D7:AA:39:05:EC:E7:35:08:AC:CB:45:F4:6E:65:BC:1D:E1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/2cec105a-4cfc-3be3-871f-f8991e2da5a3.roa
Signing time: Thu 30 Jan 2025 02:00:40 +0000
ROA not before: Thu 30 Jan 2025 02:00:40 +0000
ROA not after: Wed 30 Apr 2025 01:00:40 +0000
asID: 40676
IP address blocks: 2602:fb54:210::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b6:26:16:76:0b:6c:4d:08:e3:96:8a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7798abb-711d-4f10-bc46-bceed055e1fa
Validity
Not Before: Jan 30 02:00:40 2025 GMT
Not After : Apr 30 01:00:40 2025 GMT
Subject: CN=84ca1c1d-6024-4e62-945e-4a787b4f3d20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e7:8d:15:aa:f9:a4:04:7d:7f:37:9a:1b:af:
b8:9b:70:fc:3f:84:e8:7d:30:fa:57:19:84:ed:87:
d8:52:51:01:11:bf:37:6f:a7:0f:ce:aa:48:bb:0f:
bd:a3:e9:ab:51:e0:d9:5d:e0:30:a5:cd:f9:de:f9:
a1:3e:34:18:57:dd:77:2e:5b:ca:9f:e9:b5:c8:95:
4e:77:e6:09:6c:fe:a0:7a:c3:24:00:f1:0d:6f:cf:
76:4c:9a:aa:03:66:e0:73:87:fa:9f:6d:59:32:85:
4f:6d:05:d0:55:a2:56:14:e1:cb:c0:cd:61:6d:a2:
6d:46:f4:ba:22:3c:cc:31:ab:b3:2d:90:dd:a3:5a:
f1:02:cc:af:eb:c3:0f:bf:1e:8b:ce:64:73:77:c1:
43:69:9b:d8:28:c6:8d:2d:43:14:43:13:a9:62:a4:
c7:74:15:e5:12:bd:cd:64:21:6d:14:e2:88:60:4d:
81:a9:09:f9:d5:e5:40:7f:f8:5b:e0:24:ef:58:d5:
ef:f5:71:b9:ee:f7:d0:9b:3e:cf:a7:5a:ec:e5:c6:
d4:53:83:08:d5:c7:4b:7e:59:5d:78:2b:3e:fc:59:
c7:48:78:22:32:2a:89:6c:d1:ba:0d:4d:45:48:6c:
36:a2:d4:d1:3f:80:37:1a:93:71:5a:47:f1:93:75:
58:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:9A:A4:40:D0:5D:AF:D4:D8:04:75:99:FF:68:95:26:28:49:E5:22
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/2cec105a-4cfc-3be3-871f-f8991e2da5a3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/f7798abb-711d-4f10-bc46-bceed055e1fa.crl
X509v3 Authority Key Identifier:
keyid:CC:90:3D:D7:AA:39:05:EC:E7:35:08:AC:CB:45:F4:6E:65:BC:1D:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:fb54:210::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8d:35:c3:b0:50:76:3d:84:3f:38:d3:c1:fa:27:7f:93:a2:05:
d7:89:b9:20:33:0b:75:6d:b7:af:3c:a2:6a:a5:7e:e8:40:74:
30:e1:a3:c0:56:15:e2:5f:4b:8c:8c:42:e3:e4:fe:84:c8:67:
6c:e0:23:b0:e2:08:5c:30:ca:f5:60:22:2c:4b:f2:54:3d:9b:
0a:5b:ad:dd:30:3e:84:3d:0b:c6:06:c8:4e:e4:9e:93:40:aa:
5f:46:67:39:66:54:91:2f:50:b4:bf:4c:f5:c2:96:b8:2c:6f:
d6:d1:63:3d:eb:86:8f:f5:7a:84:0d:02:78:f6:b0:2b:b2:57:
0f:b9:0c:2a:dd:57:c2:fa:cc:cb:5b:4d:a1:ee:08:21:3b:c1:
88:a4:e2:b8:76:cb:52:e1:06:11:12:e9:46:40:76:ac:85:41:
75:ca:2a:59:80:af:11:39:bb:ab:eb:0f:02:2d:e0:9b:56:b7:
6c:5d:24:67:70:b2:04:b7:29:f9:2a:f4:e9:b2:5d:a7:54:5a:
a4:34:c7:dd:b6:f9:af:74:d1:23:cc:71:f0:0d:36:b6:81:53:
dc:b9:8e:b0:7d:62:d7:5c:c0:be:57:a3:28:73:d7:4f:67:a5:
9b:1f:57:d5:99:37:b6:c8:28:81:32:79:9b:30:8b:16:b1:1b:
cd:df:51:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:46:31 2025 by rpki-client