Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410/73d5bf75-edcd-30c4-abbf-80265ca1c9e9.roa
File: 73d5bf75-edcd-30c4-abbf-80265ca1c9e9.roa (raw, json)
Hash identifier: H+Jc9IlJVPGY5rWsnJZer4nbLYxo3lcCGkot4HHfo0A=
Subject key identifier: F8:68:F1:E7:72:B0:4D:F3:E8:0E:23:1A:21:66:73:A6:B2:B8:50:85
Certificate issuer: /CN=0c2b76fb-0555-4bed-b79b-20ec56b8d410
Certificate serial: 010D0C9F43285848A97ABD3A95D5CCCB0B45E860
Authority key identifier: 78:DC:B5:3E:20:18:87:C3:D3:39:7E:69:F4:72:64:AB:F1:7B:B0:D4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410/73d5bf75-edcd-30c4-abbf-80265ca1c9e9.roa
Signing time: Sat 25 Jan 2025 13:05:48 +0000
ROA not before: Sat 25 Jan 2025 13:05:48 +0000
ROA not after: Fri 25 Apr 2025 12:05:48 +0000
asID: 8003
IP address blocks: 2602:f7a8::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a9:7a:bd:3a:95:d5:cc:cb:0b:45:e8:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c2b76fb-0555-4bed-b79b-20ec56b8d410
Validity
Not Before: Jan 25 13:05:48 2025 GMT
Not After : Apr 25 12:05:48 2025 GMT
Subject: CN=552f8477-fc9b-41a2-8bc0-8a2d5be6e329
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:fa:32:f2:2a:06:62:92:ee:2e:93:1e:1d:af:
2a:86:a3:fc:09:33:e4:2c:bf:b0:39:ac:53:db:0a:
07:f7:39:62:72:4e:87:71:27:cf:36:7e:0b:78:34:
70:23:db:ef:87:cf:ab:e4:11:92:12:06:4e:63:6a:
20:42:54:d4:4f:21:19:d8:fd:33:71:7d:55:4e:25:
4c:71:47:fe:88:a1:fb:66:ac:55:b9:9d:1f:96:53:
18:69:94:ec:16:f8:88:95:7f:50:9a:a0:0a:ff:b4:
81:c6:c6:a6:7e:0b:87:98:f3:dc:d5:24:2c:38:4b:
2c:f0:65:e9:f6:13:50:5f:77:dc:3b:35:4a:a0:a1:
b1:ed:e7:6d:c1:eb:63:09:67:2f:45:0a:f1:dc:19:
41:51:9f:2c:92:25:12:28:00:a2:1b:a4:e7:f5:f9:
a5:e7:03:93:e6:e1:a0:d4:cf:b4:7d:f9:cd:50:6a:
84:13:a8:a4:2f:47:b2:da:f2:ad:86:0c:86:fe:c1:
9f:a4:cc:f4:d5:85:84:43:6e:44:ba:91:08:dc:da:
50:4a:79:84:c2:69:5f:8b:0d:6a:2c:89:45:3a:a3:
85:fb:8e:c9:a1:de:2e:f9:16:51:65:03:5a:d4:4e:
aa:ff:40:c1:b2:f0:ba:d3:b3:61:f4:04:e8:cb:da:
25:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:68:F1:E7:72:B0:4D:F3:E8:0E:23:1A:21:66:73:A6:B2:B8:50:85
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410/73d5bf75-edcd-30c4-abbf-80265ca1c9e9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410/0c2b76fb-0555-4bed-b79b-20ec56b8d410.crl
X509v3 Authority Key Identifier:
keyid:78:DC:B5:3E:20:18:87:C3:D3:39:7E:69:F4:72:64:AB:F1:7B:B0:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:f7a8::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
43:69:e9:f3:4f:65:ca:65:fa:95:8f:b2:4f:fa:71:33:be:35:
2c:9d:7b:97:b8:14:79:5e:7b:cb:2e:86:1e:39:c1:65:05:79:
59:08:0f:19:95:5a:7e:c9:a1:e7:bc:c7:87:59:02:d5:18:d2:
cf:44:45:36:f5:e5:9e:bb:b9:74:78:8a:5f:85:81:86:65:84:
a9:bb:c3:a8:0a:e2:49:35:b2:bf:07:70:07:57:57:25:2e:f7:
50:f9:88:b8:56:40:6c:00:68:eb:24:fe:61:c9:ec:5c:66:9c:
b9:92:9e:a5:d3:64:af:23:1d:64:13:64:d0:51:55:45:33:e5:
92:1c:70:16:99:74:00:55:b7:9f:ca:10:f6:bc:4f:86:d2:26:
12:76:44:b5:5c:43:48:15:c5:93:c5:18:e9:a0:70:e1:bd:19:
e3:5e:6b:61:c1:39:66:14:74:2b:7f:ed:63:ae:eb:53:e0:0e:
73:0d:27:f2:75:1f:f3:02:88:74:51:85:25:c0:c0:a8:f5:7d:
c4:3e:4b:7b:e0:68:81:81:1d:d0:8e:01:c3:f8:ec:a0:2f:1c:
86:47:b7:33:c1:e9:a9:a8:9c:8c:81:ba:5d:5c:a1:fe:cb:49:
05:1f:91:a9:20:49:f5:88:0a:5a:d3:54:c6:ae:b3:32:b4:8f:
d6:91:58:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:21:04 2025 by rpki-client