Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/f9f7ea2b-614d-3bc9-8fa3-9843aebeefc1.roa
File: f9f7ea2b-614d-3bc9-8fa3-9843aebeefc1.roa (raw, json)
Hash identifier: suPcurOFItxcdQ8VPyp5osgQeA7MDK1x+4Csr/bXgHc=
Subject key identifier: DD:61:60:C7:3D:E1:7D:EE:CD:CD:74:C5:50:C7:92:FA:36:61:B1:6F
Certificate issuer: /CN=fdd711b5-d16f-4549-9e75-bd201f5b7a13
Certificate serial: 010D0C9F432858493ED3D610D23AD25641D9C9C0
Authority key identifier: 1C:72:86:4A:24:9C:83:B3:CC:03:93:D4:9C:B8:8D:82:A8:89:95:3F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/f9f7ea2b-614d-3bc9-8fa3-9843aebeefc1.roa
Signing time: Thu 20 Mar 2025 01:00:39 +0000
ROA not before: Thu 20 Mar 2025 01:00:39 +0000
ROA not after: Wed 18 Jun 2025 01:00:39 +0000
asID: 0
IP address blocks: 2602:fb78::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:3e:d3:d6:10:d2:3a:d2:56:41:d9:c9:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdd711b5-d16f-4549-9e75-bd201f5b7a13
Validity
Not Before: Mar 20 01:00:39 2025 GMT
Not After : Jun 18 01:00:39 2025 GMT
Subject: CN=d4254ec8-c38f-48cc-a182-f14d43af57dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d5:62:1d:41:23:cc:77:6d:9c:3b:fc:40:b2:
27:23:f5:e4:3d:ea:f9:65:8b:9a:f3:3d:2d:87:26:
cb:ec:44:c2:4f:0d:c6:fe:9a:93:8f:7c:9b:30:64:
2e:3d:f1:69:33:ae:e9:0b:75:ee:24:06:a8:60:40:
e2:f5:69:ec:7b:bb:ac:85:f6:9a:b2:42:ad:a8:0d:
a1:df:f1:1e:79:30:62:44:a7:ac:ac:b9:eb:67:84:
8c:a2:ea:5e:e1:24:6c:92:3a:f1:c8:aa:fb:b9:27:
40:db:ae:02:70:38:b6:9a:b1:d1:08:66:24:9a:1c:
09:83:30:eb:d1:03:04:ef:b0:95:95:44:a9:f7:84:
2e:19:29:23:53:91:71:31:35:f1:8b:d0:47:0d:0a:
e2:6a:ad:ea:54:6d:5b:9a:86:e7:a0:4a:f8:99:8b:
d0:a8:cc:29:7e:6e:a9:84:c0:95:47:e1:ac:24:37:
df:12:fc:74:34:fc:b7:52:29:76:5f:95:76:cf:3c:
9f:42:97:15:d9:d0:b7:17:b4:54:62:4b:3e:a3:ab:
5e:67:bd:10:44:97:44:cb:49:5c:0d:93:ab:0d:f0:
72:47:3f:ca:3f:ad:18:03:02:b4:09:35:5d:e7:f5:
76:6c:11:65:b7:b8:61:12:60:63:3d:6e:4d:ac:7d:
32:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:61:60:C7:3D:E1:7D:EE:CD:CD:74:C5:50:C7:92:FA:36:61:B1:6F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/f9f7ea2b-614d-3bc9-8fa3-9843aebeefc1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/fdd711b5-d16f-4549-9e75-bd201f5b7a13.crl
X509v3 Authority Key Identifier:
keyid:1C:72:86:4A:24:9C:83:B3:CC:03:93:D4:9C:B8:8D:82:A8:89:95:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:fb78::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2d:83:68:ed:e3:a0:05:5e:ed:77:da:b3:40:37:b7:76:1a:8e:
e3:f0:47:0e:e2:ba:90:65:3a:42:ad:32:ac:82:41:df:fb:d8:
e3:3d:46:98:5f:62:fd:88:f3:04:05:21:ad:33:10:ea:19:82:
02:12:9d:f7:76:0b:02:15:a5:37:b8:8d:84:42:47:87:6a:93:
f4:44:87:95:eb:cf:67:38:36:91:52:74:d0:4e:89:b6:76:8c:
ce:4c:6b:0d:ba:d3:b0:b6:5f:dd:6d:b6:94:56:ce:2d:fd:43:
6e:f8:ab:9c:c7:8c:64:44:06:9b:93:1d:15:27:a3:b1:43:65:
6f:06:ac:5d:e2:b6:9f:aa:06:f6:02:e3:84:b8:c7:5c:25:2a:
a9:54:a4:12:16:b1:8e:03:92:36:aa:06:d4:13:36:8a:f3:8e:
c2:6e:0a:b0:31:75:fd:b4:b7:6f:67:71:45:e2:f2:a3:51:74:
cc:76:e2:f6:bd:93:04:c3:86:cd:3e:6e:73:02:88:87:cc:b7:
74:56:76:3e:6c:47:b9:c5:14:52:33:3b:b5:d5:a4:ac:05:45:
90:92:f5:9a:55:d3:7d:c9:0b:8d:dd:9c:78:1b:4f:04:d0:a8:
23:8e:e4:3b:45:9c:37:08:31:3f:cd:93:c6:27:ab:a6:3b:6f:
85:e4:eb:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:47:46 2025 by rpki-client