Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51/68e5cf7b-bf41-3e2f-be15-9e8f9640b83f.roa
File: 68e5cf7b-bf41-3e2f-be15-9e8f9640b83f.roa (raw, json)
Hash identifier: 8OYdij7itUgRg+gineR371csfmIxK51bpxUmmtD9Vp8=
Subject key identifier: DC:65:99:F4:73:68:FE:24:A5:1F:B3:0B:9B:98:E3:2C:5A:FC:2C:BD
Certificate issuer: /CN=a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51
Certificate serial: 010D0C9F43285848ADC6080918210C523B380140
Authority key identifier: B7:57:15:BF:89:DA:5C:E0:31:74:EC:EF:F6:CB:59:B2:F8:B8:3A:40
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51/68e5cf7b-bf41-3e2f-be15-9e8f9640b83f.roa
Signing time: Mon 27 Jan 2025 02:00:39 +0000
ROA not before: Mon 27 Jan 2025 02:00:39 +0000
ROA not after: Sun 27 Apr 2025 01:00:39 +0000
asID: 399870
IP address blocks: 2602:f7a5:100::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ad:c6:08:09:18:21:0c:52:3b:38:01:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51
Validity
Not Before: Jan 27 02:00:39 2025 GMT
Not After : Apr 27 01:00:39 2025 GMT
Subject: CN=f3a78d64-836b-430c-a7ae-80dfb9d0a38c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:0a:34:68:39:44:b7:8c:1f:aa:3f:00:e7:28:
83:48:05:9d:7c:02:7f:31:ce:20:bf:3a:1d:19:9f:
f2:68:b5:7c:69:59:29:0a:d1:89:09:0a:b8:b6:79:
ac:ad:14:62:89:16:62:f3:42:11:4c:0d:c5:7f:af:
b8:8b:12:a2:21:89:5c:fe:bb:10:d7:4b:e5:3c:97:
fa:30:bd:aa:10:20:7b:c2:8a:46:9f:4b:58:fa:10:
bd:31:c9:37:1d:e7:e8:0c:5a:ff:15:08:ae:e7:4c:
39:71:57:ad:d9:51:50:66:5f:fb:ac:25:7c:33:d4:
61:09:dc:57:d6:1c:b0:21:27:b9:b8:ca:06:db:54:
dc:53:a9:50:19:a9:07:be:76:7d:86:7f:6d:6b:58:
db:2d:e3:fd:71:11:6f:dd:6b:40:3b:90:99:07:b4:
e6:6b:f8:03:97:1b:1a:0e:37:39:21:a2:92:f5:a4:
34:62:a9:88:ef:a4:b0:ab:62:a5:02:25:32:8c:9e:
6b:85:b9:38:e0:24:40:e4:20:20:9c:b5:8c:ae:32:
24:c6:54:1f:db:65:f9:e0:1c:09:70:5a:9b:6f:a6:
9f:5b:5b:6d:bc:75:7b:9a:6c:b8:4a:12:de:03:3a:
41:e2:85:53:d9:ab:59:c2:5a:d5:8b:99:b4:51:e2:
1c:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:65:99:F4:73:68:FE:24:A5:1F:B3:0B:9B:98:E3:2C:5A:FC:2C:BD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51/68e5cf7b-bf41-3e2f-be15-9e8f9640b83f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51.crl
X509v3 Authority Key Identifier:
keyid:B7:57:15:BF:89:DA:5C:E0:31:74:EC:EF:F6:CB:59:B2:F8:B8:3A:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:f7a5:100::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7f:72:bf:ea:06:12:33:8b:f6:9f:4b:69:58:e2:3e:30:79:45:
2e:0a:53:8f:ae:fb:a3:0d:62:6f:5c:b0:c7:85:50:47:22:82:
1f:ca:4b:4c:be:a3:b1:fc:28:e3:24:14:cc:63:92:d6:bb:5e:
dc:d1:e4:31:b7:5e:8b:57:fb:68:56:e6:59:29:9e:ea:8b:c9:
16:b6:1f:05:6d:c6:93:26:22:0f:40:1d:a4:a3:b3:87:8d:ce:
49:d2:19:56:09:62:c5:33:90:09:99:08:91:b8:a5:0d:4b:f0:
1c:f4:e6:93:53:b9:f3:57:c0:07:30:1c:44:e7:5a:c1:89:79:
0d:b8:c9:9e:91:2b:d5:c4:06:d8:13:00:60:3c:46:59:c5:cc:
f8:a2:60:09:67:73:bc:be:ca:3b:3f:06:fa:ec:34:c6:f9:3a:
73:1b:b6:d9:78:6c:14:99:3f:85:16:fe:2d:67:09:41:7c:8f:
7c:dc:9a:9f:c4:d1:c9:60:5d:4c:3d:6a:16:39:ea:c0:82:70:
db:14:49:7b:c3:0e:37:ac:09:e6:f3:cc:d7:24:29:ec:d0:b9:
08:84:b3:c2:3f:5c:09:59:cf:76:03:20:50:c3:43:5a:1b:fa:
b7:ab:30:86:2c:42:cd:dc:ad:6d:29:14:b3:ad:81:67:1d:f0:
a7:c1:ab:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:23:38 2025 by rpki-client