Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f2cc1c3b-d144-4350-8e42-9af4627c1cdf/575c39de-edf5-31b0-baff-4a93c8b0778d.roa
File: 575c39de-edf5-31b0-baff-4a93c8b0778d.roa (raw, json)
Hash identifier: TpwQym/1y4WXqoJNVBcSCbqkIyodEVfshDQQ5+VHG3g=
Subject key identifier: F2:DE:4B:A6:B5:48:93:6E:AD:85:D4:87:12:BE:21:FB:51:DE:A8:06
Certificate issuer: /CN=f2cc1c3b-d144-4350-8e42-9af4627c1cdf
Certificate serial: 010D0C9F43285848F4F6A19EC6BAF7348752AE00
Authority key identifier: DD:98:CA:96:11:81:EA:1C:37:97:5D:D9:9F:01:2A:4C:67:E6:06:93
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f2cc1c3b-d144-4350-8e42-9af4627c1cdf.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f2cc1c3b-d144-4350-8e42-9af4627c1cdf/575c39de-edf5-31b0-baff-4a93c8b0778d.roa
Signing time: Fri 21 Feb 2025 14:00:50 +0000
ROA not before: Fri 21 Feb 2025 14:00:50 +0000
ROA not after: Thu 22 May 2025 13:00:50 +0000
asID: 16509
IP address blocks: 2602:810:400b::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f4:f6:a1:9e:c6:ba:f7:34:87:52:ae:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2cc1c3b-d144-4350-8e42-9af4627c1cdf
Validity
Not Before: Feb 21 14:00:50 2025 GMT
Not After : May 22 13:00:50 2025 GMT
Subject: CN=1e9871e6-9f87-4e2a-8a0f-f2ef79ba8ba4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:59:fa:c8:75:a8:bd:1c:e9:14:42:13:41:4c:
bf:a7:b8:72:8c:a8:c1:5e:ae:6b:38:57:07:c3:13:
49:e0:56:31:c6:95:75:b3:4e:ec:f0:00:fc:c3:1b:
e8:9e:d8:a0:60:41:13:bd:e1:1a:2b:98:22:7e:e3:
a3:81:3e:1f:ae:a5:98:dc:e1:18:ce:db:d2:76:cc:
ad:85:24:d0:55:ba:99:69:c3:fb:3f:dc:58:16:17:
73:6f:10:44:44:8d:c3:6f:12:9a:c1:97:fe:db:92:
83:b0:9c:e0:4f:80:cd:a2:e8:01:98:21:3b:1b:23:
ba:70:90:d6:04:07:86:46:21:28:7c:64:89:ee:62:
9f:d7:65:57:d6:c6:6a:4c:25:49:56:96:d0:0f:fc:
e4:63:57:a5:ad:6d:3f:59:53:58:25:eb:56:9f:24:
d2:f7:1b:fd:53:3c:45:0f:dc:c0:f0:1a:eb:b0:d4:
c0:eb:50:29:16:07:ec:af:a6:0e:7d:46:ae:a4:6b:
82:3c:a2:56:06:01:84:f9:8b:a6:a0:c5:08:a3:ac:
f6:39:cb:ef:d3:68:fe:53:54:b7:d8:6a:67:3c:dc:
4f:a3:46:36:ca:4f:08:ae:e0:e8:30:98:57:31:e1:
e1:01:41:96:29:f0:f6:83:2d:bd:3f:ff:fc:57:d5:
68:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:DE:4B:A6:B5:48:93:6E:AD:85:D4:87:12:BE:21:FB:51:DE:A8:06
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f2cc1c3b-d144-4350-8e42-9af4627c1cdf/575c39de-edf5-31b0-baff-4a93c8b0778d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f2cc1c3b-d144-4350-8e42-9af4627c1cdf/f2cc1c3b-d144-4350-8e42-9af4627c1cdf.crl
X509v3 Authority Key Identifier:
keyid:DD:98:CA:96:11:81:EA:1C:37:97:5D:D9:9F:01:2A:4C:67:E6:06:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f2cc1c3b-d144-4350-8e42-9af4627c1cdf.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:810:400b::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1c:91:79:2c:85:67:75:03:c7:0b:43:46:b4:55:2b:22:b8:f6:
15:90:36:de:ed:26:f0:74:e8:94:ad:a4:88:68:0a:30:74:41:
9b:71:49:2c:54:bb:f6:fd:b4:91:69:52:04:7c:17:88:fd:aa:
05:bf:ae:43:41:f3:c9:42:e9:1b:95:3f:d9:b3:a1:00:48:f3:
1b:94:f6:b8:90:bc:f8:bb:06:6e:9b:8e:5c:8b:a3:c9:e7:40:
2c:52:41:22:5e:ab:34:44:97:d8:08:ab:8b:db:ac:c0:9b:af:
50:dc:7c:1c:6e:03:d6:b7:66:c2:82:7e:9b:6c:42:47:17:7b:
17:a0:e0:0d:e6:f5:09:76:a2:24:27:6c:88:eb:ac:1d:e8:04:
a5:fe:ac:0e:d7:58:54:3e:4f:f0:7b:0e:b9:60:0d:a5:9d:15:
06:0d:03:02:3a:60:b2:ec:38:83:6f:23:00:0f:a4:a9:aa:3b:
de:ce:9b:4f:6b:ed:46:12:d1:68:e5:3c:71:ea:a7:db:42:fa:
5f:24:98:70:ca:59:9e:71:44:f6:df:04:00:fb:a3:a5:ed:8d:
65:37:ed:3f:bb:56:be:fb:96:b5:2e:4b:42:32:ac:ac:02:66:
90:6d:e2:1d:44:c6:3d:88:8f:d7:06:be:51:b1:6f:cd:0f:32:
4e:2d:f1:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:49:08 2025 by rpki-client