Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f601ba70-383e-4f5d-aacb-7e45e33ac6ba/91e5a6dd-69aa-374a-a36e-71b8d69d2b42.roa
File: 91e5a6dd-69aa-374a-a36e-71b8d69d2b42.roa (raw, json)
Hash identifier: YG+RcLk2hITJXTwLKlpWZ7FUdXAlYAufGjEZCMlUg5Q=
Subject key identifier: BE:E1:DA:73:12:DE:FD:F2:8C:5C:77:96:01:0D:FF:64:82:37:F2:C4
Certificate issuer: /CN=f601ba70-383e-4f5d-aacb-7e45e33ac6ba
Certificate serial: 010D0C9F43285848AF2B8024A37596644DDBE780
Authority key identifier: 63:E4:E1:0B:2B:65:78:FC:96:06:23:A2:03:18:67:8B:54:59:F4:DA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f601ba70-383e-4f5d-aacb-7e45e33ac6ba.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f601ba70-383e-4f5d-aacb-7e45e33ac6ba/91e5a6dd-69aa-374a-a36e-71b8d69d2b42.roa
Signing time: Mon 27 Jan 2025 14:00:52 +0000
ROA not before: Mon 27 Jan 2025 14:00:52 +0000
ROA not after: Sun 27 Apr 2025 13:00:52 +0000
asID: 40846
IP address blocks: 2602:2e4:100::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:af:2b:80:24:a3:75:96:64:4d:db:e7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f601ba70-383e-4f5d-aacb-7e45e33ac6ba
Validity
Not Before: Jan 27 14:00:52 2025 GMT
Not After : Apr 27 13:00:52 2025 GMT
Subject: CN=e9afb38a-9907-471e-bd9b-426c95498dd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:1d:23:6b:ca:32:fa:5f:76:d9:9b:a7:7d:0d:
90:28:d1:62:92:94:e4:5e:9f:06:ca:53:33:fd:b9:
c8:07:01:fd:e7:16:18:f6:81:19:f4:1f:1b:76:08:
3c:b3:3d:73:d9:54:10:58:9d:74:ac:29:e7:47:53:
c9:c9:5c:7b:88:63:a4:ff:d2:df:c5:96:4c:7f:64:
4d:98:70:d8:09:5d:7a:25:f6:e4:c2:93:74:ca:1d:
1b:26:f2:3d:76:93:14:61:37:b0:47:c5:45:73:f1:
b9:81:76:3b:a5:74:32:2e:12:49:20:b7:c7:88:04:
1a:29:9e:af:99:f2:ca:62:8c:14:f7:c7:7f:df:5a:
e4:4a:31:d3:58:60:61:e9:5e:c9:59:55:a6:8d:18:
70:eb:42:8c:6a:68:34:c3:26:8c:5d:14:e8:35:7f:
3b:45:76:54:1f:6b:bd:71:ae:50:07:21:25:20:2d:
a0:9f:df:1b:21:90:5b:71:4c:90:4c:65:63:15:a5:
fb:06:51:29:b1:6d:93:9a:e6:03:78:7e:1d:04:7d:
ae:4c:e0:0a:af:d2:6e:7d:b2:5f:3e:3d:dc:86:8b:
bf:b5:cd:1f:a6:df:41:ec:5c:b5:c4:b0:c4:fe:a0:
fa:ca:fc:e5:87:08:83:f3:f2:0b:3b:19:ae:6d:36:
9f:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:E1:DA:73:12:DE:FD:F2:8C:5C:77:96:01:0D:FF:64:82:37:F2:C4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f601ba70-383e-4f5d-aacb-7e45e33ac6ba/91e5a6dd-69aa-374a-a36e-71b8d69d2b42.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f601ba70-383e-4f5d-aacb-7e45e33ac6ba/f601ba70-383e-4f5d-aacb-7e45e33ac6ba.crl
X509v3 Authority Key Identifier:
keyid:63:E4:E1:0B:2B:65:78:FC:96:06:23:A2:03:18:67:8B:54:59:F4:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f601ba70-383e-4f5d-aacb-7e45e33ac6ba.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:2e4:100::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
95:11:b2:00:e1:78:73:93:4b:f2:6a:63:56:38:7f:93:9e:e9:
1d:ce:b2:f5:48:32:3f:6e:5e:de:31:1a:b9:c1:f4:1c:38:28:
d6:08:0a:26:0a:bd:a5:93:78:3a:9d:82:12:c7:c9:bc:c1:10:
0f:fd:6d:18:02:11:70:d9:07:f7:2f:0f:7a:4d:64:0b:e3:3c:
24:8b:b2:e8:95:fb:6b:67:3d:4f:4e:64:da:09:77:79:b1:f5:
fd:06:5c:a5:b6:35:da:44:95:34:a8:ce:39:82:61:98:23:5b:
c5:91:79:71:8d:db:42:46:3b:cb:03:14:38:0e:4b:41:ff:39:
49:85:44:4f:48:a7:f5:9a:ee:a1:a9:3e:9a:db:74:11:d4:85:
c9:a1:84:20:6d:d3:97:c3:05:e3:8c:c2:4e:9e:40:9b:dd:d3:
88:f7:e0:05:91:6f:1e:81:d2:13:09:bf:b2:ac:1e:a5:d1:db:
81:b3:47:79:88:94:37:a4:67:e6:98:1a:d4:9c:c8:fc:32:ef:
23:3a:0a:af:4e:37:5e:3b:2d:73:ba:47:38:68:1f:0d:1a:79:
62:eb:19:72:c7:13:37:87:36:f8:4b:dd:05:6f:16:dc:b5:2b:
61:f5:63:a2:25:d9:a7:d4:d2:a0:65:4f:33:42:22:44:7c:f1:
37:57:19:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:07:02 2025 by rpki-client