Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8b72935c-ac1b-4aa0-b408-9c3271a8a2a5/18bdc555-5ce7-3ce7-a252-8dd702bcc990.roa
File: 18bdc555-5ce7-3ce7-a252-8dd702bcc990.roa (raw, json)
Hash identifier: 5rmDb6zX1B4drmBkoMi+NmzR07uGMDcH+ges6p+jLAI=
Subject key identifier: CB:30:3A:33:88:DB:FD:2E:AC:52:B1:1A:C2:BB:B7:E3:A7:4A:6A:DD
Certificate issuer: /CN=8b72935c-ac1b-4aa0-b408-9c3271a8a2a5
Certificate serial: 010D0C9F43285848B78B850B3D3A996D93EE9D00
Authority key identifier: A0:9C:62:3B:6D:64:FD:4F:08:01:60:97:F8:DB:8F:44:DF:97:B9:DF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8b72935c-ac1b-4aa0-b408-9c3271a8a2a5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8b72935c-ac1b-4aa0-b408-9c3271a8a2a5/18bdc555-5ce7-3ce7-a252-8dd702bcc990.roa
Signing time: Thu 30 Jan 2025 14:00:51 +0000
ROA not before: Thu 30 Jan 2025 14:00:51 +0000
ROA not after: Wed 30 Apr 2025 13:00:51 +0000
asID: 32797
IP address blocks: 2602:2ef::/36 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b7:8b:85:0b:3d:3a:99:6d:93:ee:9d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b72935c-ac1b-4aa0-b408-9c3271a8a2a5
Validity
Not Before: Jan 30 14:00:51 2025 GMT
Not After : Apr 30 13:00:51 2025 GMT
Subject: CN=9f9e8313-8fa0-4024-b03d-555ea2d4e9e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:12:d1:cd:a1:1a:24:02:c8:ae:e0:a4:53:54:
6e:78:d6:03:67:90:6f:20:bf:e2:b2:1e:fb:cf:fb:
e4:06:d1:45:aa:2c:ae:7b:49:84:c9:e3:69:2e:9e:
f8:a5:6d:7e:b4:f4:24:e4:7c:a4:c4:0b:21:8f:45:
2f:9e:59:d6:b6:26:3c:6d:74:f7:a8:ed:dd:41:35:
82:cd:a4:3b:07:b5:9e:b9:a4:1e:0d:9f:e5:8f:8b:
30:1c:78:f4:3e:13:50:30:b8:80:43:43:5a:1d:52:
51:78:c0:6a:c3:f9:b2:90:d6:d5:c8:23:7a:d5:e5:
13:9b:2d:d7:51:ba:0c:34:8d:98:e3:a6:2c:cd:21:
ac:d5:22:27:30:13:10:8a:c4:56:4d:77:6f:d0:a8:
fc:bc:a4:4b:5b:77:be:4c:10:ae:60:85:9d:dd:13:
c0:cb:a6:c2:d6:26:49:41:74:90:4a:0b:c1:60:b4:
05:3d:01:23:c2:50:c4:16:06:9b:96:9d:03:59:93:
e9:04:40:f1:bf:12:99:16:eb:51:4c:cd:05:65:73:
7a:bf:55:87:f8:38:2b:4d:46:2c:60:7e:b1:bd:d5:
fe:bc:92:3b:3f:24:76:11:ef:6f:07:b9:2f:ce:51:
2f:0e:ae:5d:d1:ff:df:aa:cc:ee:01:60:74:a1:28:
5e:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:30:3A:33:88:DB:FD:2E:AC:52:B1:1A:C2:BB:B7:E3:A7:4A:6A:DD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8b72935c-ac1b-4aa0-b408-9c3271a8a2a5/18bdc555-5ce7-3ce7-a252-8dd702bcc990.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8b72935c-ac1b-4aa0-b408-9c3271a8a2a5/8b72935c-ac1b-4aa0-b408-9c3271a8a2a5.crl
X509v3 Authority Key Identifier:
keyid:A0:9C:62:3B:6D:64:FD:4F:08:01:60:97:F8:DB:8F:44:DF:97:B9:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8b72935c-ac1b-4aa0-b408-9c3271a8a2a5.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:2ef::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bd:55:3c:a0:4c:1a:b8:bf:c7:3c:45:f8:ee:a3:47:43:e7:04:
60:b8:50:18:9a:ca:1f:18:0c:29:ca:33:4f:23:f2:66:9a:77:
7a:2b:8b:fa:c7:04:83:3f:01:73:9b:11:b8:15:5d:f6:53:80:
65:23:4a:3b:23:17:34:a5:a9:26:37:37:ee:bb:b1:f2:ec:e0:
4c:19:99:94:14:31:db:2e:48:ed:d3:24:cf:83:18:5c:f4:45:
42:1f:c8:2b:a2:96:91:cf:79:21:af:ff:e2:f5:09:97:b2:91:
e2:09:a4:a6:e2:48:9b:8c:48:ed:06:a8:e4:c2:76:31:56:17:
ac:ec:07:61:41:85:5d:1a:29:9b:14:a9:06:cf:46:31:c7:8f:
a8:f7:67:bb:0a:7c:fc:e6:10:e9:47:2b:ef:ae:13:a7:b4:72:
d5:38:eb:af:ea:90:15:b9:63:1e:6d:97:81:c9:74:8f:48:49:
c0:0d:42:29:5e:15:ba:58:af:d7:dd:2c:8c:9b:a1:81:8c:4a:
3e:e5:ee:a7:7b:20:70:31:8f:d3:47:e5:e8:86:35:8c:b9:6b:
fa:22:76:21:56:0e:a6:ce:60:0d:17:c9:87:c8:da:aa:b3:ef:
a2:81:fd:5e:c3:36:1d:0e:af:79:42:d2:25:68:e7:c4:bb:c8:
2a:3f:15:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:15:04 2025 by rpki-client