Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a683f70a-4d8a-489e-b03c-abca94cd7852/4479a764-f804-3946-8899-87021ada663d.roa
File: 4479a764-f804-3946-8899-87021ada663d.roa (raw, json)
Hash identifier: PQi7vMA+wAjquSHmCFuxU0b4cW47dvYmIdVLwZQ+j6c=
Subject key identifier: 86:18:2C:B5:1E:F4:27:9E:96:9A:1F:C2:60:59:C1:A4:00:A1:47:A5
Certificate issuer: /CN=a683f70a-4d8a-489e-b03c-abca94cd7852
Certificate serial: 010D0C9F4328584909E6A269E74A46241A9646C0
Authority key identifier: B8:59:03:9E:D8:37:04:1C:D9:8D:1B:75:25:FF:EA:F2:58:28:49:E0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a683f70a-4d8a-489e-b03c-abca94cd7852.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a683f70a-4d8a-489e-b03c-abca94cd7852/4479a764-f804-3946-8899-87021ada663d.roa
Signing time: Sat 01 Mar 2025 02:00:39 +0000
ROA not before: Sat 01 Mar 2025 02:00:39 +0000
ROA not after: Fri 30 May 2025 01:00:39 +0000
asID: 36369
IP address blocks: 2602:fe69:300::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:09:e6:a2:69:e7:4a:46:24:1a:96:46:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a683f70a-4d8a-489e-b03c-abca94cd7852
Validity
Not Before: Mar 1 02:00:39 2025 GMT
Not After : May 30 01:00:39 2025 GMT
Subject: CN=78d77e7c-b445-4bc2-94ec-3ac7c909dc63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:02:ab:0d:b4:93:1b:8e:99:21:84:6f:9f:3a:
1e:47:28:8b:6b:e9:43:d2:6e:a6:69:6a:f2:ad:20:
ba:5d:ad:8b:31:f8:3c:2f:59:6d:14:ed:05:84:23:
78:0d:1e:11:55:b9:c7:a8:a2:9f:0f:9c:cc:cb:e0:
d5:6f:60:31:71:8e:59:32:55:aa:cc:b6:18:54:65:
94:37:63:ce:0c:fe:c1:81:9e:42:c5:25:0e:ad:3d:
64:f5:38:63:bd:f3:0a:05:05:89:f6:d8:b5:05:72:
71:e9:c4:80:fb:c5:cd:d3:c5:99:b7:60:4d:c5:98:
94:63:b8:e4:39:27:a2:d4:ab:62:e8:be:a9:a1:bc:
77:0f:f9:f3:32:29:74:c7:87:4b:7a:0d:bc:6a:3b:
28:3b:e0:51:aa:e5:a1:c1:2d:96:0e:e2:12:46:3f:
d0:d9:b8:68:62:f3:00:c0:1d:30:83:8a:96:e7:a5:
5d:f5:9c:ea:1e:aa:cb:40:df:82:40:3b:e2:c7:56:
3b:93:34:0a:b9:79:00:36:99:04:e0:a5:59:7d:41:
71:96:98:6d:ae:af:bd:37:ed:f7:44:4c:e6:7f:0a:
a4:50:ec:a9:a4:25:08:7f:36:15:f4:6f:7a:75:08:
e6:b1:07:9c:13:62:31:41:cb:8c:54:6e:65:a6:f9:
9a:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:18:2C:B5:1E:F4:27:9E:96:9A:1F:C2:60:59:C1:A4:00:A1:47:A5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a683f70a-4d8a-489e-b03c-abca94cd7852/4479a764-f804-3946-8899-87021ada663d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a683f70a-4d8a-489e-b03c-abca94cd7852/a683f70a-4d8a-489e-b03c-abca94cd7852.crl
X509v3 Authority Key Identifier:
keyid:B8:59:03:9E:D8:37:04:1C:D9:8D:1B:75:25:FF:EA:F2:58:28:49:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a683f70a-4d8a-489e-b03c-abca94cd7852.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:fe69:300::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9f:9f:1b:b3:32:1d:e0:d3:8e:59:1b:14:9a:d3:17:b9:3c:2f:
9f:92:ba:60:6b:19:08:7b:09:90:94:59:58:5b:29:21:e8:bb:
5f:6a:cb:77:a0:a8:8b:4a:1e:68:3f:c3:d3:13:07:ff:49:af:
7d:31:7c:47:c1:45:3d:65:eb:3d:ec:e9:87:e3:b5:59:a2:32:
21:61:a8:9d:98:65:bc:9a:86:f6:5a:04:60:bf:05:37:a6:53:
3b:47:3a:e8:d1:b9:26:00:9f:3d:d2:83:9c:f9:71:66:ec:56:
60:e5:f2:a1:be:ef:02:af:58:c9:ca:e5:1b:50:72:9e:d0:14:
8f:6b:54:a4:5b:04:bc:53:84:27:94:f1:41:cc:67:7e:ff:02:
a5:da:a0:88:24:27:e6:ad:88:47:86:8f:09:da:bd:7b:5d:54:
ea:e9:e1:5f:e1:ea:62:83:03:ec:ae:8f:05:24:a9:01:29:a4:
71:95:9d:fd:01:4e:f3:df:ac:2f:fd:4d:f6:c0:73:0e:45:07:
90:42:0c:f0:f9:4e:a3:ce:52:7a:92:d5:cc:f6:04:99:80:36:
94:ae:54:5a:5b:ff:f2:c4:10:9d:9f:61:e0:aa:8a:63:7d:f3:
95:1e:fe:22:dd:8e:9a:e3:28:a0:88:85:bc:f4:82:2c:b3:0e:
f5:3b:e4:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:49:49 2025 by rpki-client