Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/aac5406d-4c20-4b08-83ac-a8eafc059fe0/a9cbd22d-c94e-3818-bd27-75de97d8d08f.roa
File: a9cbd22d-c94e-3818-bd27-75de97d8d08f.roa (raw, json)
Hash identifier: sIuG+RMOGowHyGonN0AD/OmBfiNjC4VZtH8xbj/g/Qk=
Subject key identifier: 96:98:0E:E0:2C:1A:D1:D8:77:2A:D8:C6:40:12:BA:22:56:82:20:0D
Certificate issuer: /CN=aac5406d-4c20-4b08-83ac-a8eafc059fe0
Certificate serial: 010D0C9F43285848C2B64D2F39FF61EF417813C0
Authority key identifier: 15:A8:78:40:92:99:20:F4:26:07:A5:49:A9:3B:17:59:FE:D3:4A:C7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/aac5406d-4c20-4b08-83ac-a8eafc059fe0.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/aac5406d-4c20-4b08-83ac-a8eafc059fe0/a9cbd22d-c94e-3818-bd27-75de97d8d08f.roa
Signing time: Mon 03 Feb 2025 14:00:52 +0000
ROA not before: Mon 03 Feb 2025 14:00:52 +0000
ROA not after: Sun 04 May 2025 13:00:52 +0000
asID: 38041
IP address blocks: 2602:fcff:18::/45 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c2:b6:4d:2f:39:ff:61:ef:41:78:13:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aac5406d-4c20-4b08-83ac-a8eafc059fe0
Validity
Not Before: Feb 3 14:00:52 2025 GMT
Not After : May 4 13:00:52 2025 GMT
Subject: CN=24d261ae-b5eb-4d18-b4d0-569bc3ad6db7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:f0:a2:3a:e8:66:29:fa:b7:63:06:0e:6c:e0:
48:4a:9c:f3:be:af:48:b8:f3:e1:65:be:92:bd:5d:
a3:e1:7a:0a:62:bb:29:b2:76:d5:ec:14:b9:27:26:
2e:6e:70:3a:9f:96:ad:f1:ca:5b:3e:e6:c4:91:4e:
6d:59:a1:f8:c4:fb:5a:18:0e:b4:be:a5:b1:60:3d:
f8:49:eb:6f:60:45:cf:55:35:44:91:ff:e2:ef:ce:
c7:60:2d:63:72:56:30:3c:1a:9f:e0:f5:d7:d0:c0:
85:1d:65:98:b9:bd:79:a5:b0:12:33:f2:1e:fe:96:
6c:7b:6d:21:3c:d5:53:98:d7:09:c7:55:e3:8a:1d:
fa:90:a9:0b:5c:95:b7:78:df:a4:c9:1b:42:c5:f6:
62:35:b3:bc:46:50:a8:d1:4c:13:52:cd:52:f2:e9:
a1:ea:31:af:4d:6d:9a:8e:5d:50:33:7f:0b:7f:dc:
34:73:4f:d7:09:e7:62:3b:8b:dd:e3:47:55:d8:b9:
33:95:54:ac:1c:f9:cd:e5:46:49:e1:7b:d8:b4:14:
ca:0e:d3:bf:14:57:9f:6c:4d:dd:56:2e:59:a2:c7:
6a:1c:c6:fe:96:ca:e2:bb:67:4e:4d:c5:ff:83:0e:
e2:08:08:c9:8c:4b:a6:3f:ca:44:0d:a8:db:5a:49:
00:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:98:0E:E0:2C:1A:D1:D8:77:2A:D8:C6:40:12:BA:22:56:82:20:0D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/aac5406d-4c20-4b08-83ac-a8eafc059fe0/a9cbd22d-c94e-3818-bd27-75de97d8d08f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/aac5406d-4c20-4b08-83ac-a8eafc059fe0/aac5406d-4c20-4b08-83ac-a8eafc059fe0.crl
X509v3 Authority Key Identifier:
keyid:15:A8:78:40:92:99:20:F4:26:07:A5:49:A9:3B:17:59:FE:D3:4A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/aac5406d-4c20-4b08-83ac-a8eafc059fe0.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:fcff:18::/45
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
02:e2:69:dc:45:37:96:a4:1d:06:c5:36:9a:40:e2:23:42:03:
fe:09:67:49:a5:84:c5:d3:ad:d9:02:06:2f:04:60:e2:84:3a:
86:dc:66:7a:43:b8:15:67:6b:04:a8:98:99:35:d7:5f:8a:3d:
41:cb:29:ab:32:9e:f7:fe:5b:6f:b5:d4:54:8a:1d:f5:86:f3:
51:93:c4:17:f5:16:13:49:76:80:71:a2:d7:50:ef:91:83:0b:
73:9b:21:4b:23:16:47:18:a9:22:5e:1c:e4:75:31:c2:18:45:
fb:b0:0a:93:df:0e:5d:bc:b1:f9:27:09:f4:15:42:8b:6e:4d:
76:ea:d6:b2:22:28:b1:7b:1a:bd:91:65:58:ed:9a:82:61:0c:
8a:eb:64:bf:85:43:88:11:d2:2f:f9:f7:92:26:d7:bc:d1:79:
7d:1b:de:fd:a0:82:bf:aa:94:ab:c5:ff:bd:96:6a:22:6c:ed:
29:c2:d1:db:a3:d9:d7:51:46:8f:ee:1b:02:22:85:23:1c:0a:
18:c9:4a:4c:4f:fd:30:42:e3:c8:69:8e:fe:54:5e:2d:6c:25:
fd:dd:59:24:b8:c7:db:28:2e:cf:de:c7:99:c6:51:57:09:b0:
de:37:db:5f:b0:a9:5c:da:66:5a:29:6e:8b:da:4b:52:d2:5c:
d0:1f:29:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 17:09:30 2025 by rpki-client