Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8825e8fb-1b9c-43c4-8f9f-40df1c716211/d67a5b61-08ff-3d90-af0c-435ed8a0acfd.roa
File: d67a5b61-08ff-3d90-af0c-435ed8a0acfd.roa (raw, json)
Hash identifier: u6O/gzF3HlbsD1tJXFnvofpx4SOwcMjSVOxoVCQj3SU=
Subject key identifier: E4:5D:1C:CD:AC:D9:B7:F0:70:68:0B:21:91:03:8F:D2:9C:7A:38:06
Certificate issuer: /CN=8825e8fb-1b9c-43c4-8f9f-40df1c716211
Certificate serial: 010D0C9F432858493C094189112463A7DA53D600
Authority key identifier: D4:C5:80:8B:1B:8C:EF:EB:84:32:DD:06:33:18:88:53:D4:A4:B0:DD
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8825e8fb-1b9c-43c4-8f9f-40df1c716211.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8825e8fb-1b9c-43c4-8f9f-40df1c716211/d67a5b61-08ff-3d90-af0c-435ed8a0acfd.roa
Signing time: Wed 19 Mar 2025 01:00:40 +0000
ROA not before: Wed 19 Mar 2025 01:00:40 +0000
ROA not after: Tue 17 Jun 2025 01:00:40 +0000
asID: 399825
IP address blocks: 2602:80a:3000::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:3c:09:41:89:11:24:63:a7:da:53:d6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8825e8fb-1b9c-43c4-8f9f-40df1c716211
Validity
Not Before: Mar 19 01:00:40 2025 GMT
Not After : Jun 17 01:00:40 2025 GMT
Subject: CN=c658221f-d735-4dbe-83e0-d5e34c25f93a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:9b:35:ba:c8:c7:a7:fa:4e:a1:04:c6:c1:56:
28:2a:da:20:a5:53:9a:05:ab:02:6f:06:43:8b:ff:
8a:c7:fa:04:47:77:af:b8:90:40:01:33:ef:70:0e:
4c:bf:42:30:14:80:8e:85:a4:00:34:c0:98:d8:48:
d0:ec:b8:64:f9:05:99:8e:ba:1f:5a:cd:2f:9e:bf:
b9:04:bd:ad:44:d0:38:53:d9:f8:4a:0c:00:ab:6c:
54:c9:01:70:3b:d9:74:40:cc:ca:66:50:94:42:ad:
fa:41:e0:b3:63:c7:7a:31:32:8a:64:d3:93:5e:da:
9b:b7:71:78:b8:2c:65:ea:2e:46:b0:14:d6:93:1f:
b1:b8:34:93:42:71:83:d6:e0:5b:b1:63:88:00:f2:
2e:ae:1a:2a:be:55:93:fa:32:83:09:f7:a5:29:6d:
cd:1f:12:1b:73:03:d1:c4:8d:23:c9:9d:55:70:2d:
79:4e:e8:34:9a:8c:ca:d5:38:e9:f9:d7:cc:4d:16:
7f:f3:21:f5:fa:d5:e2:b1:12:d8:b8:8c:bf:36:42:
e4:a1:4c:63:44:ea:26:e4:7e:a9:18:50:8f:27:a8:
4a:0d:6b:57:e8:e7:f5:df:41:95:f1:ac:7d:fe:d4:
c2:4e:b1:00:2a:46:cb:a6:01:81:68:8a:a4:78:d6:
35:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:5D:1C:CD:AC:D9:B7:F0:70:68:0B:21:91:03:8F:D2:9C:7A:38:06
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8825e8fb-1b9c-43c4-8f9f-40df1c716211/d67a5b61-08ff-3d90-af0c-435ed8a0acfd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8825e8fb-1b9c-43c4-8f9f-40df1c716211/8825e8fb-1b9c-43c4-8f9f-40df1c716211.crl
X509v3 Authority Key Identifier:
keyid:D4:C5:80:8B:1B:8C:EF:EB:84:32:DD:06:33:18:88:53:D4:A4:B0:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8825e8fb-1b9c-43c4-8f9f-40df1c716211.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:80a:3000::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a3:f4:f5:7f:67:2a:da:5d:fa:05:b6:88:29:48:16:c6:3e:5b:
c9:b8:d0:af:0d:46:35:c5:0a:c4:84:ad:ea:73:73:b3:f5:23:
03:e8:8c:42:32:7f:08:a6:17:7f:93:95:8f:5a:c8:f8:b8:92:
39:fe:4b:4e:a7:a2:5f:3e:a3:9c:85:a4:a5:cc:88:5c:e6:f1:
f3:e2:2b:6a:a4:e0:28:0e:c8:b5:03:2f:01:cd:bc:bb:32:e2:
30:7f:e7:db:cd:07:6f:1c:40:53:f5:3e:4a:cb:e4:50:9b:6d:
dc:19:2d:6b:b0:33:9c:27:59:e0:dd:e7:20:fe:27:92:05:3d:
2f:86:2e:c0:1c:91:e0:36:e9:57:96:f1:a7:42:85:8b:46:39:
f9:5e:49:97:19:71:f5:8c:2f:e9:01:3a:e3:24:09:ab:fb:39:
6f:73:99:ec:19:60:92:13:e1:b0:de:48:d5:a2:18:e3:56:57:
67:1b:06:77:5e:87:3a:df:b8:69:44:ad:65:ad:95:e7:25:a1:
65:2c:68:25:0b:60:a8:11:c8:89:ad:22:61:3f:d1:64:f7:22:
ac:ee:46:17:e9:11:b1:79:0f:22:27:0a:c5:fc:0d:aa:2c:aa:
60:f1:82:41:35:d9:ff:fb:95:42:1a:fd:48:2c:07:fe:9e:9c:
75:11:a0:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 10:11:33 2025 by rpki-client