Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/7697f5d3-ce67-30b3-8bde-d010330b0b43.roa
File: 7697f5d3-ce67-30b3-8bde-d010330b0b43.roa (raw, json)
Hash identifier: HMmxIMACXd1xEs3L/3oyO0OEoXnvra+Yot8FoVjjYsM=
Subject key identifier: B7:7B:C1:60:73:8D:E7:61:CB:F7:36:4F:E6:B2:CE:30:36:3B:B2:3F
Certificate issuer: /CN=f7798abb-711d-4f10-bc46-bceed055e1fa
Certificate serial: 010D0C9F43285849287E6CEB5DDC886F9D7FF260
Authority key identifier: CC:90:3D:D7:AA:39:05:EC:E7:35:08:AC:CB:45:F4:6E:65:BC:1D:E1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/7697f5d3-ce67-30b3-8bde-d010330b0b43.roa
Signing time: Wed 12 Mar 2025 01:00:39 +0000
ROA not before: Wed 12 Mar 2025 01:00:39 +0000
ROA not after: Tue 10 Jun 2025 01:00:39 +0000
asID: 206216
IP address blocks: 2602:fb54:149::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:28:7e:6c:eb:5d:dc:88:6f:9d:7f:f2:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7798abb-711d-4f10-bc46-bceed055e1fa
Validity
Not Before: Mar 12 01:00:39 2025 GMT
Not After : Jun 10 01:00:39 2025 GMT
Subject: CN=71ebf704-4b88-4c7e-a109-ce867b45f3fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:29:36:3c:25:a5:57:1a:e4:55:ca:9a:8d:e0:
8c:4e:fa:5f:e1:98:41:f0:53:d2:6f:de:8f:e6:80:
91:b5:7d:36:35:ab:e4:0e:29:7f:cc:3e:5c:3f:2a:
3b:c7:c4:5d:7b:a3:41:f8:b1:f2:92:b6:1d:ca:36:
94:c1:fd:a8:65:7f:86:71:82:c0:37:4b:7f:26:f8:
5c:80:ea:1b:d0:ae:8b:f5:fd:ce:ef:be:a3:9e:90:
3f:9c:94:f8:0a:ee:37:69:28:cc:0b:8a:e6:ae:ff:
88:4d:8f:de:da:d0:bc:7f:c8:4f:a9:17:02:c6:b5:
de:75:00:dd:42:c1:5b:cb:29:49:2b:83:60:e1:40:
9e:1f:fe:7d:f4:95:6b:06:ea:b2:34:28:53:f7:44:
af:23:42:4e:a3:d4:f3:27:45:a1:a0:78:f1:7d:4f:
1a:90:18:fe:e8:72:e4:ef:be:6a:f8:a6:1c:0c:4c:
95:82:76:a9:c3:98:2b:52:95:24:1e:3a:1c:22:f1:
d7:19:96:f7:c1:65:14:b6:11:08:6d:84:14:da:04:
9c:55:18:7f:40:31:a4:83:bc:b3:35:09:a1:58:21:
2d:93:69:8f:15:6e:f3:7c:2e:cc:08:f1:80:28:33:
e0:0e:ce:33:4c:fd:39:16:a7:46:47:13:92:05:33:
a4:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:7B:C1:60:73:8D:E7:61:CB:F7:36:4F:E6:B2:CE:30:36:3B:B2:3F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/7697f5d3-ce67-30b3-8bde-d010330b0b43.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/f7798abb-711d-4f10-bc46-bceed055e1fa.crl
X509v3 Authority Key Identifier:
keyid:CC:90:3D:D7:AA:39:05:EC:E7:35:08:AC:CB:45:F4:6E:65:BC:1D:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:fb54:149::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bc:a9:fb:ff:cd:98:55:48:77:9b:03:51:24:a2:b0:eb:d6:09:
49:61:15:7b:f1:ec:4f:dd:45:cb:0e:bf:c2:37:6b:7b:02:97:
4a:7a:6c:c3:0b:1d:c9:6d:83:e1:a6:21:d4:a6:94:50:e7:0f:
7b:4f:38:04:43:77:bd:06:0e:33:c2:84:eb:e7:5d:07:d5:ed:
7a:af:50:29:2e:cd:fa:93:2b:d5:62:14:6f:ff:e7:83:69:b5:
89:b7:f6:d6:04:a5:d4:88:0f:c3:7a:f1:d9:5a:a7:91:24:c2:
88:7c:df:0f:17:06:bd:96:a5:7c:b2:1e:33:f8:4d:2a:b1:d6:
37:3c:e8:46:76:23:05:7d:37:e4:f5:5b:ea:22:10:eb:2e:1a:
fd:60:46:b0:1a:5e:93:82:cb:ea:7d:21:ae:29:79:3b:0e:4f:
3c:2b:ca:54:15:72:95:12:72:1e:73:7e:ee:cb:89:e6:f0:86:
4b:84:18:b0:5d:e7:18:97:14:b7:7e:3e:f1:2a:98:f5:2d:78:
c4:12:be:11:10:af:49:24:c6:9b:59:73:8d:f7:17:87:94:6d:
e7:a3:e7:4e:99:35:3c:61:1d:e0:cc:a0:d8:ad:88:ff:a8:6b:
2c:fb:86:5c:bf:f4:6b:9a:ed:2b:04:1a:f4:6d:ac:f9:9c:6f:
12:94:4a:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:16:16 2025 by rpki-client