Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/33cc3e06-84cc-3c07-b504-8a924bc790f6.roa
File: 33cc3e06-84cc-3c07-b504-8a924bc790f6.roa (raw, json)
Hash identifier: egBzrpAio99wGfIkAFkcXHk/D6UQaVZDyy9Y5xvpl0o=
Subject key identifier: 82:1E:C1:C0:60:CE:72:F2:44:5E:D3:62:0F:9D:1C:BB:73:9D:9F:C6
Certificate issuer: /CN=f7798abb-711d-4f10-bc46-bceed055e1fa
Certificate serial: 010D0C9F432858489075EE7DBB6534A5E3AB8C20
Authority key identifier: CC:90:3D:D7:AA:39:05:EC:E7:35:08:AC:CB:45:F4:6E:65:BC:1D:E1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/33cc3e06-84cc-3c07-b504-8a924bc790f6.roa
Signing time: Thu 16 Jan 2025 14:00:50 +0000
ROA not before: Thu 16 Jan 2025 14:00:50 +0000
ROA not after: Wed 16 Apr 2025 13:00:50 +0000
asID: 206216
IP address blocks: 2602:fb54:148::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:90:75:ee:7d:bb:65:34:a5:e3:ab:8c:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7798abb-711d-4f10-bc46-bceed055e1fa
Validity
Not Before: Jan 16 14:00:50 2025 GMT
Not After : Apr 16 13:00:50 2025 GMT
Subject: CN=bfd555b9-bed7-44a1-837e-09ab6a154f1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:55:fc:07:d9:b5:f2:ce:94:d8:8f:0d:7d:5c:
09:ce:8d:6d:8a:b6:91:cb:85:59:5b:2c:4f:6e:fa:
47:8a:e5:70:61:b7:f9:c4:77:61:a7:02:ec:17:26:
ca:40:18:95:a1:db:c3:75:1b:ce:4f:6f:62:cd:48:
eb:53:8e:3f:c6:05:6f:a0:ef:e9:4c:66:81:fb:b4:
82:84:55:c5:de:ae:32:f3:0d:cd:b7:bc:f5:76:46:
5f:50:ec:dd:d5:fb:d4:a1:7b:9c:11:bb:06:75:be:
f0:33:bc:06:40:27:23:15:ee:c6:91:d0:05:74:90:
93:96:f2:fe:f8:44:81:f0:8f:7c:26:49:7a:bf:85:
e1:5f:e0:69:cd:52:57:f6:6f:55:bc:b8:cc:72:bf:
44:c1:2d:2a:96:ef:6a:4e:42:27:ee:4c:71:88:94:
e1:9c:a4:79:cb:01:d9:29:d3:60:83:a6:cd:79:ba:
47:65:99:a6:cf:fb:0d:9b:9d:8c:37:fb:9b:6c:96:
a9:28:12:bd:0c:06:d3:f7:11:2a:8e:c7:d7:d7:e1:
09:e2:e0:9d:ac:1a:6e:4a:04:5e:4b:56:c9:69:09:
db:20:d6:ba:89:5b:7b:a9:a3:a8:52:ff:d0:aa:3b:
0c:19:5f:18:8a:df:e6:01:af:d6:62:f7:33:91:ae:
99:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:1E:C1:C0:60:CE:72:F2:44:5E:D3:62:0F:9D:1C:BB:73:9D:9F:C6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/33cc3e06-84cc-3c07-b504-8a924bc790f6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/f7798abb-711d-4f10-bc46-bceed055e1fa.crl
X509v3 Authority Key Identifier:
keyid:CC:90:3D:D7:AA:39:05:EC:E7:35:08:AC:CB:45:F4:6E:65:BC:1D:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:fb54:148::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
03:47:62:fc:b1:2f:a1:7a:53:c3:32:7a:7e:e7:67:28:9a:16:
47:c5:a4:de:d6:f9:b5:e0:ff:56:02:d3:28:18:23:d2:a8:a3:
bd:ad:78:b7:cf:da:f5:91:5f:1c:f0:60:50:3e:9b:3a:00:cc:
33:d1:30:60:87:2e:a8:02:3a:1b:05:ce:ce:33:ea:7e:1c:50:
09:71:56:9b:b5:4d:0e:1f:4a:af:b0:8e:3f:73:44:21:31:2a:
05:9a:23:70:49:8e:70:c1:88:d8:60:b7:9d:5d:96:21:ee:91:
06:b7:77:2e:8b:40:0d:12:15:09:73:a8:d1:d8:ac:95:cc:23:
11:35:ca:4b:88:8d:f0:52:02:37:bc:34:fa:86:ab:0e:34:14:
2b:cb:3d:1b:20:9e:46:51:eb:53:89:d9:f8:16:60:9a:71:e2:
7a:20:29:9c:31:5f:45:b0:c2:20:4b:f0:9d:a5:74:5d:df:a6:
02:7a:cb:d1:6a:f1:84:86:0d:e3:e5:76:f6:ea:c3:8e:8e:58:
bf:08:f0:54:3c:d4:94:dd:e7:4f:82:5a:eb:d8:b3:0e:d2:b7:
5e:ef:ee:90:d0:18:34:9f:c3:b0:d1:b0:71:96:56:12:df:5b:
9c:ef:52:41:a6:c9:7b:da:23:a4:a9:cb:12:ad:a2:4d:12:b7:
28:9d:33:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:31:00 2025 by rpki-client