Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d/8eb25cb5-6620-3478-995e-4ed5776d17e4.roa
File: 8eb25cb5-6620-3478-995e-4ed5776d17e4.roa (raw, json)
Hash identifier: xfH+5JFdM9vCHoHWc6NCxkHPBXDaUahr48VaLWCxV+4=
Subject key identifier: B1:F4:38:50:66:D2:35:87:D8:7A:3C:83:9B:BB:D1:C9:10:92:71:13
Certificate issuer: /CN=a3630f82-169c-4b03-ad42-aa6f5b71d91d
Certificate serial: 010D0C9F4328584953C4184E269561E4B71F8400
Authority key identifier: 8C:BB:12:0E:88:E0:E4:10:DC:79:9A:11:CC:5E:E0:EA:C1:40:0E:46
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d/8eb25cb5-6620-3478-995e-4ed5776d17e4.roa
Signing time: Thu 27 Mar 2025 13:00:52 +0000
ROA not before: Thu 27 Mar 2025 13:00:52 +0000
ROA not after: Wed 25 Jun 2025 13:00:52 +0000
asID: 14618
IP address blocks: 2602:fa28:2::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:53:c4:18:4e:26:95:61:e4:b7:1f:84:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3630f82-169c-4b03-ad42-aa6f5b71d91d
Validity
Not Before: Mar 27 13:00:52 2025 GMT
Not After : Jun 25 13:00:52 2025 GMT
Subject: CN=22131f30-a784-47aa-b24f-5a0069bc1cad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:d3:ba:77:0a:2e:c1:db:68:d4:14:87:c9:7b:
a5:dd:ea:16:fb:94:7f:ea:06:77:8f:81:02:f2:d2:
3f:d3:72:8d:33:34:48:87:6c:15:6c:60:41:46:b6:
3a:60:d9:bf:bd:63:ef:ce:ed:dd:c0:71:38:04:dd:
a1:f9:d2:90:b3:58:43:ea:bb:96:be:39:10:5d:88:
c7:da:9d:61:60:d7:b8:c9:26:cc:f4:f6:ec:b1:31:
fd:d1:66:ab:c4:fd:95:8a:cb:cd:3b:53:31:b4:08:
ba:1a:40:14:61:80:6a:ea:5a:39:0c:9c:61:b5:b7:
93:0e:f0:9f:09:6c:a3:1e:4d:46:0a:29:1b:71:84:
ff:59:22:99:16:c1:0e:09:e4:ee:a5:28:11:57:6f:
98:9b:2f:f0:3c:f4:f1:8b:f8:35:74:a6:1d:b9:7f:
02:a6:a5:80:9d:20:de:ae:1f:51:c7:f6:e2:f6:9a:
92:26:5c:b1:aa:13:10:a9:f3:40:bb:23:31:ee:15:
0b:38:fc:f1:f8:e4:38:74:a6:bd:65:79:69:a3:4a:
91:57:bc:aa:39:e6:b0:f9:12:cf:f2:01:a3:00:23:
49:6b:cc:b0:44:43:22:3c:43:40:90:e3:ad:7f:c4:
fb:6d:ed:4d:70:e6:77:c4:c2:2e:43:0a:42:7b:63:
5d:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:F4:38:50:66:D2:35:87:D8:7A:3C:83:9B:BB:D1:C9:10:92:71:13
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d/8eb25cb5-6620-3478-995e-4ed5776d17e4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d/a3630f82-169c-4b03-ad42-aa6f5b71d91d.crl
X509v3 Authority Key Identifier:
keyid:8C:BB:12:0E:88:E0:E4:10:DC:79:9A:11:CC:5E:E0:EA:C1:40:0E:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:fa28:2::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
34:64:0c:49:79:e6:9c:bb:ba:80:bb:31:a3:1b:04:d5:49:0a:
bb:e5:c9:fe:49:54:0e:3b:52:0f:dd:93:74:13:dc:8f:24:ac:
8e:67:e1:bd:33:f0:67:f1:6a:79:42:ed:71:79:1f:15:ed:54:
54:5a:51:8f:48:a7:87:3b:62:14:e1:90:0e:74:68:7c:d4:8e:
65:aa:29:4b:c7:b9:dd:cc:6d:b0:7f:83:7e:3d:d9:0c:50:74:
55:4e:ff:42:17:b8:46:f1:7e:39:65:ea:06:c3:40:31:1a:69:
c7:ec:42:58:f4:9e:70:69:d6:48:6f:33:5e:a7:bb:54:22:36:
42:e2:87:78:75:05:2e:9a:48:c5:cc:ac:62:56:80:b4:0c:b7:
8a:be:d2:e6:8e:c0:c8:1b:56:db:4e:26:f5:8a:70:e9:24:bc:
2e:cf:45:05:1d:24:d0:db:dd:b4:1e:25:b3:b1:b1:cc:ce:9e:
8a:c0:cd:89:2d:e9:ba:12:9e:fb:d3:a6:54:36:d7:8a:a9:f9:
a2:8d:d0:df:3d:8a:21:45:37:33:b4:c3:89:78:ea:28:b5:15:
1c:2e:e0:67:11:42:d3:4f:16:25:f6:b3:8d:3f:f4:6c:4d:ca:
ad:fe:46:eb:80:07:f5:0b:d8:6b:23:26:a1:b7:23:be:89:51:
4f:a3:1c:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:26:58 2025 by rpki-client