Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/6c7472b0-6d12-33be-a9f9-85e26dc54729.roa
File: 6c7472b0-6d12-33be-a9f9-85e26dc54729.roa (raw, json)
Hash identifier: 4NeQb8X9CnFxNSmN9yfTXeHOEjEAF9in6d2b8vdeYFY=
Subject key identifier: EE:25:1B:7E:04:2B:D4:BD:69:19:24:32:77:54:24:8B:80:96:79:B6
Certificate issuer: /CN=33c78d60-34eb-4fed-8e25-925b95a30c8e
Certificate serial: 010D0C9F432858487B85BA7A50A308293D032580
Authority key identifier: 5F:65:25:B0:69:97:21:82:E6:E2:D3:91:46:77:BA:5C:33:D3:E0:41
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/6c7472b0-6d12-33be-a9f9-85e26dc54729.roa
Signing time: Thu 09 Jan 2025 02:00:40 +0000
ROA not before: Thu 09 Jan 2025 02:00:40 +0000
ROA not after: Wed 09 Apr 2025 01:00:40 +0000
asID: 33039
IP address blocks: 2602:f95c:ca1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7b:85:ba:7a:50:a3:08:29:3d:03:25:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33c78d60-34eb-4fed-8e25-925b95a30c8e
Validity
Not Before: Jan 9 02:00:40 2025 GMT
Not After : Apr 9 01:00:40 2025 GMT
Subject: CN=6baced3d-582e-425c-ae80-2fd01598d86f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e8:c5:0e:19:24:2b:08:d7:44:21:ff:10:b1:
da:ce:f7:19:7b:b0:3a:e8:5f:c5:1d:86:2b:ab:55:
46:1d:1a:78:7d:e5:d7:6e:c8:ec:99:d0:1a:28:1f:
c5:53:42:07:f2:7d:a9:9e:69:51:1c:81:ad:f9:01:
bf:25:42:6b:f1:05:31:fd:de:73:2f:93:08:e9:67:
1e:b4:d7:5b:03:f4:e8:7b:9f:58:df:6a:54:fc:0d:
31:da:8c:18:82:99:3a:f5:2f:95:81:5e:87:6e:28:
2e:8b:8f:6a:81:52:47:86:4c:55:cb:c6:a9:65:ed:
ff:77:c5:7a:b1:75:4c:37:1c:55:d5:dd:b4:ac:7d:
cd:29:28:83:9c:1b:59:9c:e2:3a:b6:c1:af:dc:6a:
24:45:4f:a0:9c:fc:ed:f6:77:ec:ae:05:41:99:df:
a1:8e:7d:a9:cd:bf:a1:e2:7f:42:95:53:bd:42:c6:
b3:8d:88:4f:4f:86:bb:a8:95:cd:31:a1:ca:fb:7c:
32:64:e2:7b:f0:82:b2:25:80:53:ad:d1:43:e9:5e:
98:24:cc:2d:b1:5c:b1:a1:95:5b:62:44:43:e4:39:
fb:d7:ed:27:79:13:b6:d6:87:44:4f:da:c1:37:fb:
f2:f8:29:71:10:8e:60:1c:eb:db:74:91:c1:b3:f4:
c1:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:25:1B:7E:04:2B:D4:BD:69:19:24:32:77:54:24:8B:80:96:79:B6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/6c7472b0-6d12-33be-a9f9-85e26dc54729.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/33c78d60-34eb-4fed-8e25-925b95a30c8e.crl
X509v3 Authority Key Identifier:
keyid:5F:65:25:B0:69:97:21:82:E6:E2:D3:91:46:77:BA:5C:33:D3:E0:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:f95c:ca1::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
01:e7:41:e9:b4:49:e1:ee:06:27:37:10:7d:ac:29:8e:01:aa:
a3:31:d1:9b:c2:2c:9a:a7:ae:9a:eb:eb:f2:86:cf:11:4b:7b:
e7:e4:2e:44:d9:ff:85:4e:1c:f4:ea:7c:03:f7:24:d9:40:1d:
9d:ae:f6:d6:a9:0e:12:46:11:37:85:be:6f:c9:1b:fb:a7:69:
89:5a:c0:4a:5c:4a:3c:50:40:7e:94:01:38:32:03:fb:ea:65:
17:a8:8d:e2:1d:31:68:c5:f3:01:cb:89:e1:81:30:64:72:c8:
54:4d:12:2c:7b:6c:00:1a:f6:49:16:a0:f5:dd:22:43:9b:b3:
36:f8:64:86:0a:41:9f:ec:4f:d8:ac:88:90:19:6a:87:90:cc:
44:de:9f:87:23:ea:d3:ad:c9:23:a9:fb:c8:ad:e3:9c:8a:28:
01:da:ce:67:c5:b4:33:07:3b:f3:10:2a:a0:b1:13:e2:cd:d5:
9a:2e:31:7e:eb:5f:28:9b:01:4a:18:80:0c:a0:8b:ed:0c:2b:
48:8a:50:0b:9c:61:39:40:45:cb:2e:d3:28:72:b2:f2:60:25:
21:34:08:65:da:63:cb:cf:83:56:1f:9b:02:be:6d:6f:5f:2c:
73:7e:2c:54:9d:73:f9:81:47:c7:a8:b3:43:30:99:2c:c2:a7:
16:13:a8:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 00:29:12 2025 by rpki-client