Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/8b3596de-5dd6-3d74-9e71-334336ad5edf.roa
File: 8b3596de-5dd6-3d74-9e71-334336ad5edf.roa (raw, json)
Hash identifier: CxrO8HIYpLM4WqY4+0HLHpAl3cn3rPFOHP2LV6mPwMI=
Subject key identifier: 06:0E:C9:3F:2E:1B:29:F7:C4:C4:0D:50:F0:A6:9A:91:9A:9D:CA:C6
Certificate issuer: /CN=f7798abb-711d-4f10-bc46-bceed055e1fa
Certificate serial: 010D0C9F43285848C6E62B08531C5CFFB3529D80
Authority key identifier: CC:90:3D:D7:AA:39:05:EC:E7:35:08:AC:CB:45:F4:6E:65:BC:1D:E1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/8b3596de-5dd6-3d74-9e71-334336ad5edf.roa
Signing time: Wed 05 Feb 2025 02:00:39 +0000
ROA not before: Wed 05 Feb 2025 02:00:39 +0000
ROA not after: Tue 06 May 2025 01:00:39 +0000
asID: 206216
IP address blocks: 2602:fb54:152::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c6:e6:2b:08:53:1c:5c:ff:b3:52:9d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7798abb-711d-4f10-bc46-bceed055e1fa
Validity
Not Before: Feb 5 02:00:39 2025 GMT
Not After : May 6 01:00:39 2025 GMT
Subject: CN=9f7db819-cac3-4409-8cb4-66825485e1e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:f7:13:12:8c:83:5c:50:22:eb:21:ed:7a:b0:
53:04:61:7a:db:9a:13:45:c6:17:a4:7f:22:78:ff:
4b:50:8d:7a:92:e7:09:30:79:9e:91:81:79:aa:d0:
66:a5:43:1f:42:9e:ec:dc:ae:b1:e8:22:39:80:ed:
ee:52:0e:ed:6c:90:0e:03:3c:a5:3b:8e:77:ee:17:
56:25:16:a9:b4:dd:51:7a:f3:93:52:6f:fa:5f:0d:
0c:8c:f5:00:fc:77:ac:b8:7c:99:4a:e4:82:64:b9:
10:8b:38:8f:15:3c:59:49:19:98:8a:6b:85:3f:9e:
a3:0d:a2:04:98:63:42:77:7e:23:be:33:5e:43:b9:
09:a5:6f:7f:0a:71:ba:72:c6:c8:93:7c:c1:1b:55:
04:3a:ac:ad:40:e8:73:f4:fc:7c:e0:4f:ee:ab:0a:
7c:a8:f4:c1:c6:ab:b0:d1:ee:b7:f1:a6:0c:e9:b9:
ad:c1:3f:48:77:de:9b:42:b8:8a:6d:c4:75:17:45:
ee:b6:88:6b:64:af:45:ab:30:9f:fe:05:45:74:e7:
a7:d4:b9:fc:36:d3:44:9f:45:fb:72:b0:7e:64:40:
0d:bb:10:cb:3c:00:24:ed:46:16:fa:78:f4:22:64:
3a:a1:aa:5f:d9:93:aa:ef:db:3c:15:b5:14:7b:03:
7f:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:0E:C9:3F:2E:1B:29:F7:C4:C4:0D:50:F0:A6:9A:91:9A:9D:CA:C6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/8b3596de-5dd6-3d74-9e71-334336ad5edf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/f7798abb-711d-4f10-bc46-bceed055e1fa.crl
X509v3 Authority Key Identifier:
keyid:CC:90:3D:D7:AA:39:05:EC:E7:35:08:AC:CB:45:F4:6E:65:BC:1D:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:fb54:152::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ad:c2:51:27:f2:cb:00:f0:f2:f7:38:f1:b3:b4:dd:28:ff:62:
f9:77:6e:6b:24:e0:11:89:70:3f:70:84:f1:e5:93:c3:3c:59:
6d:c5:10:aa:a9:4d:2f:ec:5f:aa:8b:61:26:49:37:02:dc:57:
b1:f7:39:1a:71:1a:3b:c2:38:d5:3f:99:c9:4c:e7:55:8b:a8:
e1:19:93:38:b9:6e:38:77:1b:4c:f6:39:11:d4:ae:c6:60:fc:
0c:ad:2e:c0:aa:1a:6a:39:bd:9d:c2:90:56:9c:97:a6:a4:bd:
f0:60:c5:d1:92:b2:de:33:e4:f4:b7:52:5d:d6:87:e2:58:41:
c2:f0:72:85:be:a9:ce:15:d6:20:bd:96:c1:fb:5d:7d:2d:34:
08:41:14:f1:3d:a2:7e:2f:81:6a:62:3f:14:ab:e6:9a:19:17:
7b:73:e2:b7:f5:a5:02:18:11:90:27:4c:9d:fb:44:3a:86:c7:
4c:4c:88:e2:af:fd:a3:1f:ef:cc:a3:5d:ea:4d:e7:42:74:8f:
44:0b:54:0b:be:21:ed:b9:2a:7c:03:19:bd:c6:ce:ce:fb:56:
02:05:b3:2c:5a:ff:2d:13:fa:85:20:01:ba:f4:d5:77:38:4a:
de:a0:cc:87:b7:be:6b:e0:ba:59:53:83:96:cb:ad:fb:a2:e2:
73:b7:d5:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:26:07 2025 by rpki-client