Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9f983207-8073-42af-88ee-df4902c8adaf/e3cfc3f8-64c3-32df-be76-c80aed342164.roa
File: e3cfc3f8-64c3-32df-be76-c80aed342164.roa (raw, json)
Hash identifier: 0HBpjucW4vGbpFBAF8YJJAEPqBxDQufwbeEa9LJrfxw=
Subject key identifier: DB:3B:71:AA:B3:4A:EF:7E:84:57:25:CF:5F:55:0F:35:CD:AB:7F:2A
Certificate issuer: /CN=9f983207-8073-42af-88ee-df4902c8adaf
Certificate serial: 010D0C9F432858488AE0A45FFDA5BEE6333165C0
Authority key identifier: C3:2C:B9:FB:7A:22:7F:4A:05:1E:4A:99:A8:FB:6E:8D:68:59:CA:A1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9f983207-8073-42af-88ee-df4902c8adaf.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9f983207-8073-42af-88ee-df4902c8adaf/e3cfc3f8-64c3-32df-be76-c80aed342164.roa
Signing time: Tue 14 Jan 2025 14:00:51 +0000
ROA not before: Tue 14 Jan 2025 14:00:51 +0000
ROA not after: Mon 14 Apr 2025 13:00:51 +0000
asID: 3000
IP address blocks: 2602:fa2e:300::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:8a:e0:a4:5f:fd:a5:be:e6:33:31:65:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f983207-8073-42af-88ee-df4902c8adaf
Validity
Not Before: Jan 14 14:00:51 2025 GMT
Not After : Apr 14 13:00:51 2025 GMT
Subject: CN=95406e28-b132-43d1-9995-68c57a13bed5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:59:7e:a6:4a:6e:70:d6:77:e7:0b:b5:91:0b:
54:5a:c3:99:ca:e7:c7:7d:e8:8a:17:9a:5b:fd:b0:
cc:2c:64:d6:3d:32:da:f3:c7:23:ac:e7:0d:07:5f:
61:69:10:1f:8b:65:8b:c4:e4:be:6f:df:e7:f7:bb:
cf:9a:89:74:de:81:0c:41:4b:b1:c1:86:3c:75:90:
9f:45:2d:1f:d4:c5:58:43:51:ec:5d:d1:ff:10:cc:
6f:07:c3:94:f5:de:1f:6e:da:be:ae:78:05:61:84:
32:48:81:a8:2d:e7:a3:2c:52:e9:24:8b:c3:ae:bf:
e6:c5:e7:fa:bc:d2:b2:45:2b:42:88:50:30:20:91:
66:58:1b:41:a1:0a:31:d6:67:64:0a:eb:e4:fa:07:
11:0b:61:cd:16:91:12:cd:78:97:12:43:d2:bb:ac:
0f:70:25:76:8c:69:aa:be:1b:4c:ff:b3:2b:5f:c9:
d4:08:52:ae:1f:e3:6c:5e:21:23:02:78:b3:f8:a5:
76:43:8a:cd:da:09:e7:f0:49:7c:95:19:5f:54:df:
07:dd:f4:4e:fc:0a:08:1d:f8:8a:d1:b6:4d:af:40:
fa:cf:e1:14:05:25:60:3d:d9:fd:58:ef:c5:cb:c5:
a6:59:72:5c:a8:a3:c6:65:16:4e:22:bd:07:0d:20:
a1:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:3B:71:AA:B3:4A:EF:7E:84:57:25:CF:5F:55:0F:35:CD:AB:7F:2A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9f983207-8073-42af-88ee-df4902c8adaf/e3cfc3f8-64c3-32df-be76-c80aed342164.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9f983207-8073-42af-88ee-df4902c8adaf/9f983207-8073-42af-88ee-df4902c8adaf.crl
X509v3 Authority Key Identifier:
keyid:C3:2C:B9:FB:7A:22:7F:4A:05:1E:4A:99:A8:FB:6E:8D:68:59:CA:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9f983207-8073-42af-88ee-df4902c8adaf.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:fa2e:300::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3c:d6:f6:7e:4f:54:d9:b8:97:8f:5b:e0:35:bc:cd:b0:8d:25:
e3:d4:98:ad:90:7d:38:f6:75:bc:1b:64:93:59:16:7d:38:c1:
6b:ea:cc:5a:da:b6:4a:ed:42:be:24:7d:75:ba:cc:ce:09:79:
a1:65:78:0b:60:90:7e:8c:8c:60:37:60:cb:54:93:5e:3c:37:
f6:66:af:e6:6c:b3:cf:f9:d9:95:6a:1e:df:e0:a1:c7:f0:5c:
06:4c:6d:22:58:e4:67:e4:84:89:9d:c8:f6:f8:49:c2:82:0b:
f2:d4:3e:99:8f:62:c9:58:00:18:49:fb:38:8a:88:88:1e:92:
9c:be:4f:af:e7:b4:0d:d3:ba:f4:bf:1f:56:87:4f:99:1e:2a:
a2:fd:9d:02:39:a7:08:5c:8a:40:77:a3:5a:a1:60:3a:1c:85:
72:e4:72:cb:1c:31:82:fe:77:2a:25:9b:ca:5e:f3:64:28:f4:
ef:08:8e:69:d4:36:dd:05:a0:4f:5c:51:d9:75:7f:a5:2c:99:
dc:4e:de:3f:ba:7f:b3:93:bd:cf:dc:74:c6:f4:92:6f:c0:41:
5d:88:47:b7:8b:98:a4:40:22:79:30:3a:f1:22:1b:4d:c4:8f:
c4:f3:30:16:32:5a:32:65:1a:f2:d8:4f:b5:87:b9:c8:3f:df:
b7:46:5f:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 13:54:41 2025 by rpki-client