Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157/f94d6a37-f85f-3ce3-9668-65bc8993f7a3.roa
File: f94d6a37-f85f-3ce3-9668-65bc8993f7a3.roa (raw, json)
Hash identifier: 8wQiCrwStj6dU2CwzqfFsNQlVCDMPWz6nskAwwoSjRY=
Subject key identifier: 02:69:86:10:CD:BF:E4:54:80:3B:89:C4:9A:EE:2A:5F:CC:F7:85:EB
Certificate issuer: /CN=1a767fb3-0911-435a-a3a4-189b82622157
Certificate serial: 010D0C9F43285848F9267F8111F55754AB75DB80
Authority key identifier: 31:97:7C:7C:A4:EC:D4:79:62:19:2C:6B:0C:04:24:AF:34:D5:74:A1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157/f94d6a37-f85f-3ce3-9668-65bc8993f7a3.roa
Signing time: Sun 23 Feb 2025 02:00:39 +0000
ROA not before: Sun 23 Feb 2025 02:00:39 +0000
ROA not after: Sat 24 May 2025 01:00:39 +0000
asID: 400919
IP address blocks: 2602:817:2001::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f9:26:7f:81:11:f5:57:54:ab:75:db:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a767fb3-0911-435a-a3a4-189b82622157
Validity
Not Before: Feb 23 02:00:39 2025 GMT
Not After : May 24 01:00:39 2025 GMT
Subject: CN=9052c01d-ccb9-4d21-abd0-52912b7b85b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:99:1c:f3:d0:87:38:ca:ca:09:04:e7:cc:cf:
4e:64:73:1f:ec:17:d0:5e:6e:cd:00:ab:d6:f5:e8:
f0:fa:08:13:5b:13:13:95:de:14:42:c4:0f:e7:97:
0c:52:77:e5:0e:88:ea:74:b5:99:f1:87:0a:3e:9f:
21:24:a0:6e:ff:71:0d:1e:83:04:af:aa:20:44:a6:
df:35:d1:a5:c8:35:18:51:66:ab:02:9a:04:01:a1:
cd:0f:48:c5:17:e1:4e:7e:ff:4e:2e:ec:04:d6:b4:
f2:23:22:1f:e2:bd:73:74:a3:07:7f:1a:88:51:62:
53:7c:7c:d6:19:4a:4a:df:6c:b3:1e:35:cb:96:fb:
2a:49:4f:ce:6c:96:57:e7:18:f3:48:b1:c7:69:40:
c6:a9:b3:a1:70:0c:ef:ea:1a:8a:66:ac:27:df:ee:
ef:e6:0f:6c:04:55:fe:c4:6a:ac:89:04:7d:35:6a:
ed:a3:8f:1c:2f:49:61:ae:71:69:49:59:06:c9:9a:
a6:e5:86:ac:90:be:03:18:71:ab:fa:5a:6f:8f:cd:
8e:26:e4:9c:c5:9f:56:6a:33:2d:f6:b9:bb:da:f3:
02:f4:0b:88:71:bf:11:3e:eb:ef:90:03:5c:dc:98:
bd:59:36:af:00:3e:3b:49:78:53:e2:03:27:b4:1a:
74:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:69:86:10:CD:BF:E4:54:80:3B:89:C4:9A:EE:2A:5F:CC:F7:85:EB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157/f94d6a37-f85f-3ce3-9668-65bc8993f7a3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157/1a767fb3-0911-435a-a3a4-189b82622157.crl
X509v3 Authority Key Identifier:
keyid:31:97:7C:7C:A4:EC:D4:79:62:19:2C:6B:0C:04:24:AF:34:D5:74:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:817:2001::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
61:86:cc:22:a3:98:89:f2:68:66:ed:da:66:2b:35:5b:29:46:
7f:85:25:0d:44:9c:d9:a2:c4:56:d2:09:d9:2d:bf:f9:e4:76:
9a:af:54:b7:c2:e3:2b:05:74:c5:43:df:2b:fb:61:38:37:ff:
a0:fc:89:88:63:8e:09:ec:f1:d5:5b:c3:d7:b4:28:06:8d:21:
37:85:b8:71:27:9f:e4:47:67:b9:06:a5:b6:12:fe:d6:6e:fd:
f1:52:59:0b:b8:51:11:64:d8:30:4a:5b:01:24:f8:00:48:04:
97:25:5b:e8:79:2e:97:5d:29:2a:7b:4b:9b:7d:03:51:c4:bc:
8e:c0:3a:57:09:25:8a:c5:4d:44:51:ba:ee:13:ec:92:c8:23:
79:00:25:a1:b0:22:61:f2:5f:d7:16:73:40:2e:c8:ce:27:07:
ca:72:d6:ae:c9:ff:1f:0c:d1:04:59:00:22:9f:0d:03:3c:bb:
59:45:8d:55:93:c1:fa:33:92:bc:1b:69:80:c0:41:ad:42:ec:
85:ee:18:b5:3c:8a:94:58:ba:b1:1e:a8:85:d2:cb:3b:b7:9d:
b2:e9:c9:c4:11:c6:23:47:1c:3a:aa:86:e0:db:e9:4d:2e:65:
52:ce:19:59:8e:4f:60:84:68:55:66:16:e8:c5:ba:4d:c2:d5:
98:2d:2b:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:17:54 2025 by rpki-client