Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1004cebd-7023-4e63-b006-53f0c227de79/399a551a-3180-3b89-a86e-097565c00cec.roa
File: 399a551a-3180-3b89-a86e-097565c00cec.roa (raw, json)
Hash identifier: 4b5qHySI2jyIM3evjUGZWLCNIlI0oe+XFcW0Qf7Txe4=
Subject key identifier: 92:3A:AF:08:BB:CD:1B:07:BF:48:5B:A0:FA:37:80:2D:8A:FB:90:61
Certificate issuer: /CN=1004cebd-7023-4e63-b006-53f0c227de79
Certificate serial: 010D0C9F43285848BBBB7DD8AD4A0564F5556A60
Authority key identifier: C6:B2:A0:E8:24:20:8F:EA:00:6E:7F:16:CE:CB:34:8B:BF:8C:CA:94
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1004cebd-7023-4e63-b006-53f0c227de79.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1004cebd-7023-4e63-b006-53f0c227de79/399a551a-3180-3b89-a86e-097565c00cec.roa
Signing time: Sat 01 Feb 2025 02:00:39 +0000
ROA not before: Sat 01 Feb 2025 02:00:39 +0000
ROA not after: Fri 02 May 2025 01:00:39 +0000
asID: 6579
IP address blocks: 2602:2bd::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bb:bb:7d:d8:ad:4a:05:64:f5:55:6a:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1004cebd-7023-4e63-b006-53f0c227de79
Validity
Not Before: Feb 1 02:00:39 2025 GMT
Not After : May 2 01:00:39 2025 GMT
Subject: CN=1f11be51-6ab8-46c1-bfaf-ae027eeab873
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:44:80:d5:28:d5:17:c2:0c:c3:05:65:29:f4:
37:8c:fe:55:fb:8a:f3:ae:e8:93:70:71:09:9f:1f:
a6:9c:77:0f:e2:55:89:7e:27:db:ee:54:e6:76:d1:
d0:fa:c3:72:53:9c:2f:cc:55:d4:26:9d:37:8f:96:
b4:13:7b:37:2a:a0:6c:c5:eb:cd:3c:23:3c:ce:07:
87:49:bd:9c:51:9c:f3:1e:80:3b:6e:36:f7:44:8d:
1b:8a:6b:ad:fc:cb:d2:62:35:1e:80:dd:43:2e:9d:
de:bb:a5:c0:29:a1:83:c3:f7:22:bb:7b:b8:70:2e:
90:d9:c2:c4:3a:4b:aa:76:09:32:be:bb:ce:35:41:
d2:ba:21:4e:d1:35:40:3f:2f:1b:47:2e:8d:66:5a:
9d:92:15:13:fb:02:c1:8b:7a:7c:62:c1:83:77:b2:
a2:4e:02:62:4a:b1:d8:43:a3:b6:37:8e:7b:58:5c:
09:8c:32:76:a2:51:ae:39:e5:aa:e4:18:5f:c2:5f:
17:94:2f:1c:a8:bb:49:75:d0:44:07:b5:98:8f:50:
d9:f0:c4:57:7b:dd:18:8b:25:c5:6b:6a:87:16:10:
45:38:e5:4b:a8:7b:8e:b3:15:0b:fd:33:d7:56:97:
81:e2:82:aa:e9:72:99:67:23:72:33:01:05:a6:0c:
f0:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:3A:AF:08:BB:CD:1B:07:BF:48:5B:A0:FA:37:80:2D:8A:FB:90:61
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1004cebd-7023-4e63-b006-53f0c227de79/399a551a-3180-3b89-a86e-097565c00cec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1004cebd-7023-4e63-b006-53f0c227de79/1004cebd-7023-4e63-b006-53f0c227de79.crl
X509v3 Authority Key Identifier:
keyid:C6:B2:A0:E8:24:20:8F:EA:00:6E:7F:16:CE:CB:34:8B:BF:8C:CA:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1004cebd-7023-4e63-b006-53f0c227de79.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:2bd::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0b:40:d6:b4:1d:c4:bc:d8:d4:e6:f7:3b:76:e5:4b:cc:15:56:
4e:64:5e:17:11:21:4d:1b:c1:07:b6:05:33:a8:89:c4:53:c3:
78:48:2c:c9:58:dc:a6:c2:b5:a2:98:95:3e:f4:14:60:9d:81:
cf:80:8f:3e:a8:99:c9:48:56:5a:d3:34:76:73:54:18:7e:81:
f7:1a:29:e9:94:ad:ec:ae:7b:89:34:8c:4a:00:b4:43:fb:08:
48:7a:98:a8:7e:2c:a1:d4:72:ba:3f:af:ca:e4:5b:f0:7b:73:
ea:ea:eb:a1:c3:72:31:46:61:03:ae:14:36:30:77:12:83:37:
1c:a1:6e:76:c6:5a:c6:28:fb:f0:ed:65:99:e6:05:d5:4d:8d:
ce:73:e1:3c:0e:58:da:94:99:cf:4a:f4:16:37:d3:1d:96:dd:
5f:2b:45:12:20:98:ff:62:57:f8:4b:e0:69:2a:2f:45:c7:35:
8d:11:7b:d2:0f:82:a3:b5:2e:c4:ae:6e:ea:7b:19:f0:65:89:
e1:7e:74:bf:0c:88:f9:cc:ad:db:80:41:8a:5e:c8:46:9b:30:
19:66:64:0b:8e:56:e2:04:6d:9e:3c:82:1a:29:68:3b:39:dd:
2e:d5:50:5a:90:d4:6b:a8:8b:1a:5c:1b:cc:8a:10:ab:50:fd:
c1:79:42:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:53:30 2025 by rpki-client