Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d/8c677012-77d5-3579-a76a-b2ec649d5fec.roa
File: 8c677012-77d5-3579-a76a-b2ec649d5fec.roa (raw, json)
Hash identifier: cZ2dWXFPJfYQ+OgHYjmf2uGQVZKjb2sIHVoWHDVsBQw=
Subject key identifier: 89:6C:D4:08:97:D2:78:11:7A:AA:C2:FB:6F:31:BF:2D:39:41:4A:0E
Certificate issuer: /CN=a3630f82-169c-4b03-ad42-aa6f5b71d91d
Certificate serial: 010D0C9F4328584953C41871EE1B8E520E2D3380
Authority key identifier: 8C:BB:12:0E:88:E0:E4:10:DC:79:9A:11:CC:5E:E0:EA:C1:40:0E:46
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d/8c677012-77d5-3579-a76a-b2ec649d5fec.roa
Signing time: Thu 27 Mar 2025 13:00:52 +0000
ROA not before: Thu 27 Mar 2025 13:00:52 +0000
ROA not after: Wed 25 Jun 2025 13:00:52 +0000
asID: 14618
IP address blocks: 2602:fa28:3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:53:c4:18:71:ee:1b:8e:52:0e:2d:33:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3630f82-169c-4b03-ad42-aa6f5b71d91d
Validity
Not Before: Mar 27 13:00:52 2025 GMT
Not After : Jun 25 13:00:52 2025 GMT
Subject: CN=f579ae0f-f2f1-4a57-954b-8bbc296a8b12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:78:07:83:c4:65:3c:8d:29:9a:09:41:94:85:
a2:33:ae:b5:ae:01:bc:d9:58:14:24:3c:3e:30:3a:
57:95:46:65:99:73:ba:54:6d:83:88:4d:34:b7:6d:
cb:49:6b:f7:fc:0f:76:e0:bc:a0:dd:69:f0:b7:ff:
46:4f:76:15:50:3c:e3:89:e6:cf:26:4d:9c:06:5c:
95:3f:6f:06:21:5c:81:74:e0:d9:cd:6a:b4:7e:11:
be:a4:a5:3a:5d:a5:62:18:16:07:97:2c:8a:c3:ee:
f5:88:85:d5:a5:36:1b:45:e8:87:9e:60:82:9f:1f:
9f:b8:e9:f0:47:cf:3e:5c:89:ea:b1:36:25:ad:71:
03:36:7d:05:2f:ad:82:79:cf:d5:f4:90:0d:15:79:
aa:eb:3b:a6:af:db:9a:c1:be:62:a6:54:08:54:4a:
6b:83:a8:85:73:58:19:15:8b:a1:6e:f8:77:a9:43:
d1:8b:5f:f3:ab:5d:d4:2d:1c:a3:89:ee:ac:4c:c4:
33:b5:b3:e3:b4:6b:63:c0:14:32:0b:16:5b:dc:ad:
bd:d0:cc:17:ec:11:47:a2:e2:c7:17:a3:d3:d6:c1:
87:fd:49:f1:e4:bb:a1:4c:bb:e8:12:99:25:f3:56:
d9:df:a7:54:c2:3a:ab:6a:d7:1f:17:81:e4:41:08:
53:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:6C:D4:08:97:D2:78:11:7A:AA:C2:FB:6F:31:BF:2D:39:41:4A:0E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d/8c677012-77d5-3579-a76a-b2ec649d5fec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d/a3630f82-169c-4b03-ad42-aa6f5b71d91d.crl
X509v3 Authority Key Identifier:
keyid:8C:BB:12:0E:88:E0:E4:10:DC:79:9A:11:CC:5E:E0:EA:C1:40:0E:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:fa28:3::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
48:b5:88:4a:1c:ea:53:e9:9a:6d:1a:3a:fc:86:6d:42:5c:63:
75:e2:34:78:27:7b:94:d2:72:ba:de:14:62:f1:ff:a6:bf:83:
31:43:28:d7:4d:54:f4:06:a7:f7:f4:69:65:b8:68:84:e1:27:
7e:37:43:4c:7c:80:fc:e7:18:61:8f:1f:e4:c1:33:90:74:f4:
c3:58:5b:0d:bc:55:44:58:39:b1:93:7b:ec:7c:51:b8:cf:75:
be:8c:35:04:5a:c8:0f:96:c2:f9:a0:37:bd:33:a0:88:a3:0e:
35:7e:36:8b:5e:03:16:4f:26:e2:f9:bd:65:55:ce:fe:c1:f4:
c7:6e:bb:24:6f:86:af:c3:20:96:e8:2c:b7:9e:e4:3f:f5:13:
34:f4:19:e9:60:7f:aa:fd:a4:3e:52:38:d1:ae:bc:e9:ae:a6:
73:c0:6a:0f:42:28:ca:bf:a0:e9:02:d2:21:54:a3:06:5b:c2:
90:08:83:ca:9b:0a:6b:21:9b:ec:e8:83:8e:cd:d6:27:95:d8:
e4:19:81:25:d4:8c:3f:5f:1e:ee:7b:d2:c5:9f:17:47:9e:b9:
26:55:04:82:03:5a:f3:d2:6b:8e:ed:da:31:49:bc:c0:77:cf:
a6:94:8b:6c:fb:35:3a:5a:72:83:ec:c7:16:78:d6:fc:80:29:
ff:b9:c1:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:28:09 2025 by rpki-client