Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/fd302e66-1c40-3f6c-bd74-4d1440ba4558.roa
File: fd302e66-1c40-3f6c-bd74-4d1440ba4558.roa (raw, json)
Hash identifier: pxKgliIutQ6aqcx38VqddRJZ75M2sSYEqj0NWBCOFZQ=
Subject key identifier: B2:FA:AD:AC:70:9C:EE:79:52:89:1B:C8:E1:C2:4E:66:22:C9:40:75
Certificate issuer: /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
Certificate serial: 010D0C9F432858493058D218044FF0CED2A2E2E0
Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/fd302e66-1c40-3f6c-bd74-4d1440ba4558.roa
Signing time: Fri 14 Mar 2025 20:31:35 +0000
ROA not before: Fri 14 Mar 2025 20:31:35 +0000
ROA not after: Thu 12 Jun 2025 20:31:35 +0000
asID: 30058
IP address blocks: 2606:f180:3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:30:58:d2:18:04:4f:f0:ce:d2:a2:e2:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
Validity
Not Before: Mar 14 20:31:35 2025 GMT
Not After : Jun 12 20:31:35 2025 GMT
Subject: CN=fb50adde-d97d-466b-bd7d-35036d7e012b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:32:9f:5e:6a:d3:b1:d7:6c:63:03:79:46:09:
b1:fa:26:97:83:8a:49:2e:04:25:d0:c5:1f:4e:45:
0f:c2:c5:4b:51:9d:2e:bb:ff:62:dc:9b:c2:af:df:
53:02:5e:ac:04:6b:e8:a8:07:76:42:79:8e:25:34:
21:4c:4a:ef:a2:19:d7:70:ec:90:ec:5e:03:6a:26:
04:ae:1d:96:04:58:27:ca:8e:3c:d5:eb:b4:7f:70:
ba:f1:2a:f2:45:45:c4:9f:cc:72:01:74:19:28:3e:
47:86:b0:85:10:30:1d:08:67:ed:98:64:5e:d8:59:
b8:b1:3f:a9:31:88:04:c4:ae:88:4a:fd:14:04:a9:
cd:be:67:98:11:d2:0f:68:97:c6:4e:49:8f:d1:b1:
74:fb:a7:bb:e8:5c:57:df:ee:b7:d8:ea:67:76:0e:
eb:85:58:6c:84:d1:7a:37:ab:a6:12:20:e5:5c:c3:
52:d4:53:41:16:ff:1e:63:55:d0:09:cd:6c:71:b9:
3a:14:f6:8e:a7:3c:8b:71:6d:67:e6:de:62:6c:25:
37:5e:12:02:1c:a1:dd:f6:7b:64:a3:a5:9d:19:78:
47:d6:98:40:94:c4:71:e2:b9:52:85:1d:81:f2:ff:
62:51:a5:f2:7f:af:59:c8:2c:ff:a9:94:79:a9:a4:
6f:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:FA:AD:AC:70:9C:EE:79:52:89:1B:C8:E1:C2:4E:66:22:C9:40:75
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/fd302e66-1c40-3f6c-bd74-4d1440ba4558.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl
X509v3 Authority Key Identifier:
keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
sbgp-ipAddrBlock: critical
IPv6:
2606:f180:3::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
05:07:12:1d:40:71:cd:1e:f8:bc:80:dc:01:14:e4:1e:73:87:
85:23:c2:c6:94:06:8d:c8:77:d8:6a:46:06:28:0e:71:73:c5:
1c:1d:31:e9:10:d8:91:fa:d8:44:dd:e2:0d:28:dc:8a:7b:d8:
f4:31:56:c0:ac:9b:18:da:ec:29:4d:8c:f4:bf:2b:f0:d9:52:
15:11:96:70:ea:d9:4c:18:27:f7:10:19:d2:67:93:40:8a:7e:
27:cc:24:a2:e5:62:a9:c7:4b:3c:68:f6:2a:72:5a:dc:93:8d:
11:73:a0:e1:b6:d2:6e:3c:03:c7:7c:c4:61:ce:b6:64:f7:bc:
31:cc:b1:9a:63:6c:83:2c:d3:33:8a:64:af:50:f2:8b:2d:e6:
a6:da:a7:36:50:bb:4d:49:f1:34:80:3d:2e:6e:56:3f:74:ea:
58:5a:04:44:e1:2f:dd:10:79:01:b0:b7:0a:d4:1e:43:c2:cc:
6b:46:d4:52:ee:21:be:a5:99:30:8a:eb:79:fd:c5:71:75:e5:
02:a0:f3:17:b9:59:d3:ba:80:c1:61:7b:4b:92:e9:ed:b2:df:
a6:9d:60:5a:35:a2:19:7a:7b:81:4c:6a:b4:d7:09:49:00:78:
d5:29:33:3a:52:cc:ad:2e:c6:52:c2:86:37:e7:99:ec:17:3c:
9f:d9:80:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:39:39 2025 by rpki-client