Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ac1e47a1-31bf-43f6-a3f2-1fc978c92117/2be21bfd-2e80-3175-83f3-b5a0029c1f98.roa
File: 2be21bfd-2e80-3175-83f3-b5a0029c1f98.roa (raw, json)
Hash identifier: wnBt0eWCSDOxjTcXIdWc3XI3/+g5nre4dGiVtT09zx0=
Subject key identifier: F8:FF:D2:FF:6F:40:EB:A5:91:B3:A5:2C:B0:BC:C4:E1:51:4E:98:74
Certificate issuer: /CN=ac1e47a1-31bf-43f6-a3f2-1fc978c92117
Certificate serial: 010D0C9F43285848F7C138C8F449E3C6D18A4680
Authority key identifier: E6:01:DF:84:CC:05:6F:05:9E:EB:C8:AC:2B:04:A4:9A:87:5A:FA:A1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ac1e47a1-31bf-43f6-a3f2-1fc978c92117.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ac1e47a1-31bf-43f6-a3f2-1fc978c92117/2be21bfd-2e80-3175-83f3-b5a0029c1f98.roa
Signing time: Sat 22 Feb 2025 14:00:52 +0000
ROA not before: Sat 22 Feb 2025 14:00:52 +0000
ROA not after: Fri 23 May 2025 13:00:52 +0000
asID: 63437
IP address blocks: 2602:f94a::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f7:c1:38:c8:f4:49:e3:c6:d1:8a:46:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac1e47a1-31bf-43f6-a3f2-1fc978c92117
Validity
Not Before: Feb 22 14:00:52 2025 GMT
Not After : May 23 13:00:52 2025 GMT
Subject: CN=342c628d-1134-443c-acd9-0ed08c495304
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:b1:1f:34:45:1c:2d:86:9c:ff:20:7c:e6:52:
4c:33:9c:7a:88:5d:c9:b8:51:e2:01:46:66:c6:d5:
02:d8:d9:46:4f:45:5f:f0:32:51:69:f5:94:b9:b8:
77:39:0f:db:df:99:57:5f:84:c2:a3:6c:7c:7b:57:
d1:51:06:ac:52:2f:49:14:5e:47:40:31:69:90:ed:
ba:df:59:58:ca:c8:8d:c3:b4:5c:fd:d3:73:bc:48:
86:6f:cc:7b:cf:2b:f2:0a:54:40:27:12:26:cf:66:
9d:35:52:94:84:58:e2:71:ef:fc:b6:79:9c:2b:d9:
ee:78:6d:ed:e1:0c:2e:3b:17:35:3e:e8:a2:05:d5:
5f:6e:3d:6c:14:cf:f5:c5:d5:a7:96:bf:a6:30:46:
67:61:43:7d:6b:77:b0:2b:4d:ae:d6:c8:60:f2:86:
12:f7:21:18:a8:a2:10:3d:e4:05:c0:2e:6e:5c:e0:
8d:ba:23:19:8f:89:61:c5:82:43:c4:64:28:c8:73:
d6:41:f6:f2:85:a1:a8:dc:2f:63:30:e9:5d:9c:23:
6e:69:d4:c0:5e:69:2e:6e:24:40:29:df:e2:17:25:
9a:3f:06:ed:13:a0:51:8f:50:9e:fd:cb:8f:8b:6c:
25:b2:ca:2c:b2:87:37:d2:bc:43:ac:5c:72:0f:27:
f4:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:FF:D2:FF:6F:40:EB:A5:91:B3:A5:2C:B0:BC:C4:E1:51:4E:98:74
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ac1e47a1-31bf-43f6-a3f2-1fc978c92117/2be21bfd-2e80-3175-83f3-b5a0029c1f98.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ac1e47a1-31bf-43f6-a3f2-1fc978c92117/ac1e47a1-31bf-43f6-a3f2-1fc978c92117.crl
X509v3 Authority Key Identifier:
keyid:E6:01:DF:84:CC:05:6F:05:9E:EB:C8:AC:2B:04:A4:9A:87:5A:FA:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ac1e47a1-31bf-43f6-a3f2-1fc978c92117.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:f94a::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
31:76:b3:28:2b:95:da:e0:d6:71:8c:2e:fb:90:94:24:33:ed:
f5:93:80:8a:bb:0f:48:3c:09:de:68:79:a8:cf:f1:18:05:78:
05:a7:7e:3b:34:51:ff:8c:66:ee:68:54:8c:6b:48:cb:ec:be:
05:e9:fc:b2:7a:b2:21:57:71:19:73:9f:4b:a9:ce:87:2f:ef:
36:b4:1f:3d:c0:79:a3:49:cf:88:3c:d3:71:94:f3:12:28:4a:
be:d6:6e:12:ec:77:99:ad:f9:a4:98:df:15:28:45:84:14:7b:
d3:29:e8:88:34:c8:69:55:b3:55:b9:b1:5d:5d:75:a9:b0:11:
a6:c6:64:3d:cb:8e:48:06:12:ef:c1:12:68:a7:48:e5:55:3f:
4c:ea:5d:ff:7c:e5:a1:87:34:a3:74:a5:54:62:e4:62:de:48:
81:2a:0a:c8:29:33:53:bb:1e:8b:72:62:4d:20:c6:16:cb:3b:
05:a2:fa:88:e3:c0:97:94:fe:6f:42:b0:b9:f5:5a:91:cb:79:
49:e3:2a:be:53:3d:e4:71:4f:93:7c:0d:49:91:d8:4f:8d:6d:
ec:a3:8f:f4:2e:03:5b:e7:db:29:c6:8d:3b:c0:95:9d:cc:61:
a3:5a:71:d6:02:95:7e:bb:0b:ea:05:73:cb:c1:2c:5e:9d:73:
71:fe:fa:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:04:55 2025 by rpki-client