Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7ff6878d-3b7e-4c67-a91a-e21f1042f9e8/f4d8a2fb-b1ee-3843-85c5-8cd472065071.roa
File: f4d8a2fb-b1ee-3843-85c5-8cd472065071.roa (raw, json)
Hash identifier: ZUJPHQ5w16hOHNB+hcEgao7vLhrsjcJLCZybm7oxfqQ=
Subject key identifier: E8:24:C6:F5:2C:1A:CB:2D:00:46:69:36:84:4A:ED:01:6D:CE:D6:DD
Certificate issuer: /CN=7ff6878d-3b7e-4c67-a91a-e21f1042f9e8
Certificate serial: 010D0C9F43285848F7C139E9DE5591C064C8AB80
Authority key identifier: 48:84:03:73:7A:40:DD:51:C9:F1:4B:CD:11:48:90:6D:E1:DD:0C:9D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7ff6878d-3b7e-4c67-a91a-e21f1042f9e8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7ff6878d-3b7e-4c67-a91a-e21f1042f9e8/f4d8a2fb-b1ee-3843-85c5-8cd472065071.roa
Signing time: Sat 22 Feb 2025 14:00:52 +0000
ROA not before: Sat 22 Feb 2025 14:00:52 +0000
ROA not after: Fri 23 May 2025 13:00:52 +0000
asID: 55254
IP address blocks: 2602:ffcd::/36 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f7:c1:39:e9:de:55:91:c0:64:c8:ab:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ff6878d-3b7e-4c67-a91a-e21f1042f9e8
Validity
Not Before: Feb 22 14:00:52 2025 GMT
Not After : May 23 13:00:52 2025 GMT
Subject: CN=262b1e3d-f02a-4953-a816-15cf6cf6774b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:9d:0a:c0:3e:eb:21:be:b5:93:b9:e9:83:94:
d5:06:94:3f:8d:e9:1d:51:8f:68:ed:f0:f7:b2:5e:
62:cc:c2:19:d7:6f:1e:72:b8:5f:41:6d:be:51:8a:
f8:0b:6c:d8:47:55:fc:b8:16:58:03:e0:64:83:6d:
91:48:7f:20:ba:32:89:ab:f1:1d:1b:2d:ca:70:ef:
ef:48:53:55:6b:b1:42:d8:bb:f1:65:63:62:d6:a2:
81:03:b8:8d:8a:17:5e:f6:3e:f4:a9:a3:c8:b5:d9:
42:eb:01:de:f9:b2:61:d4:7a:37:14:a6:0c:bc:69:
ad:0c:ca:cb:91:76:1d:06:28:a8:9f:7d:72:03:3e:
5b:9e:bc:a4:af:00:54:86:d0:fd:0f:98:fb:c3:e2:
72:e2:4f:76:3d:55:a0:98:19:ae:f8:8a:ff:4f:42:
3c:ff:e5:a4:f5:0c:c4:26:88:2a:fe:70:a2:19:63:
5c:4f:d8:c8:b0:b3:50:d9:b6:be:97:f4:00:29:28:
bf:03:2e:28:98:d0:e3:41:6d:dd:ff:ac:fa:79:57:
bb:d6:c9:f5:ee:ad:69:6b:4f:70:2b:43:8f:35:96:
a5:bd:50:a1:08:d0:a4:86:bb:5f:df:34:03:bc:c4:
4f:8f:cf:ec:95:4d:f0:0f:bb:31:ea:4c:81:0e:19:
fc:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:24:C6:F5:2C:1A:CB:2D:00:46:69:36:84:4A:ED:01:6D:CE:D6:DD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7ff6878d-3b7e-4c67-a91a-e21f1042f9e8/f4d8a2fb-b1ee-3843-85c5-8cd472065071.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7ff6878d-3b7e-4c67-a91a-e21f1042f9e8/7ff6878d-3b7e-4c67-a91a-e21f1042f9e8.crl
X509v3 Authority Key Identifier:
keyid:48:84:03:73:7A:40:DD:51:C9:F1:4B:CD:11:48:90:6D:E1:DD:0C:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7ff6878d-3b7e-4c67-a91a-e21f1042f9e8.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:ffcd::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7b:62:7a:38:4b:92:c3:4a:d8:a5:f4:7f:53:92:4c:0b:17:e5:
86:a9:6d:74:21:d7:6a:fb:18:06:39:10:77:c8:e6:f2:15:4d:
8d:a4:03:82:98:ed:63:c7:23:8d:16:0b:74:75:2e:66:81:44:
3e:f4:91:b7:cc:fc:da:c9:29:99:b5:ba:11:e1:9c:c5:ed:c8:
07:90:93:77:60:af:bf:cf:e9:03:0d:49:6e:fd:27:07:5e:e9:
f0:bf:df:7e:06:67:57:91:d3:d5:9f:d2:c3:13:31:88:f5:e0:
67:63:53:94:3e:d6:c8:4b:a5:02:7a:30:d1:81:21:f7:76:fc:
ad:82:a3:e3:01:d9:f5:61:14:f1:04:63:39:ef:01:36:3a:e9:
ae:57:45:a9:33:3d:87:96:d2:0a:99:fd:aa:13:16:a8:d5:bb:
a9:a9:7e:00:11:b1:92:08:da:29:fe:19:36:2d:2e:11:e3:26:
6b:8e:c8:c1:37:e9:90:f5:3b:71:87:ba:98:db:7f:9b:65:bd:
44:84:1f:ac:67:85:76:25:02:57:d4:11:ff:d7:ec:5b:91:0a:
64:dc:0a:65:5e:48:44:90:71:bd:54:ea:cd:1b:1e:d8:23:31:
2f:4f:4f:38:9a:df:8f:18:79:cd:dc:d6:de:5e:00:bd:da:4d:
d6:b0:fc:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:34:08 2025 by rpki-client