Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/a012f434-0893-309d-a03c-6d4dea6c7567.roa
File: a012f434-0893-309d-a03c-6d4dea6c7567.roa (raw, json)
Hash identifier: Y1vrx8AwvyESRxFv/K4aeogFMkIRu42hYMh1bF6FbmE=
Subject key identifier: ED:8A:86:AB:EF:FF:5C:27:D0:E4:88:38:F7:F9:C8:7D:60:DC:68:77
Certificate issuer: /CN=dd62a733-0e13-4012-8294-fce655e4a41a
Certificate serial: 010D0C9F432858491ED6DD96331C11E0DCA1D000
Authority key identifier: 91:13:58:B4:76:AE:9F:A1:B0:7E:93:8D:BC:37:2C:AB:97:3D:76:DF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/a012f434-0893-309d-a03c-6d4dea6c7567.roa
Signing time: Sat 08 Mar 2025 14:00:52 +0000
ROA not before: Sat 08 Mar 2025 14:00:52 +0000
ROA not after: Fri 06 Jun 2025 13:00:52 +0000
asID: 52112
IP address blocks: 2602:fd92:d00::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:1e:d6:dd:96:33:1c:11:e0:dc:a1:d0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd62a733-0e13-4012-8294-fce655e4a41a
Validity
Not Before: Mar 8 14:00:52 2025 GMT
Not After : Jun 6 13:00:52 2025 GMT
Subject: CN=b33cf35e-ece8-4b99-bee6-feab2d763d8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:e7:18:b3:38:1e:fc:87:8e:3c:89:0b:ac:6f:
be:2e:31:09:ad:cb:be:d5:8b:fb:5f:3a:70:e4:b3:
ff:08:ea:34:fa:a7:ce:59:11:a4:8a:78:de:84:17:
90:84:c6:bd:73:02:0a:d3:0b:8f:b2:c2:a7:49:01:
9b:84:d7:1e:2e:86:aa:5e:b5:2c:62:90:ac:5f:59:
4b:44:69:00:80:f1:7e:f9:24:c1:61:e2:cc:c2:6a:
a1:27:73:cf:e8:29:85:58:8a:69:8f:62:07:9b:c4:
22:00:6a:4d:55:5e:4c:44:7a:6f:fb:01:ca:84:25:
02:5a:e6:19:59:22:7d:6b:f4:7f:7f:bb:4d:9c:a2:
2f:4c:75:f5:09:26:47:97:ea:d6:58:1a:3b:f5:1b:
71:8d:2d:5d:07:24:c7:cc:c5:e6:51:e0:7e:e7:d5:
e1:7c:30:61:6d:09:46:76:84:a5:ad:d9:d8:26:0a:
82:32:77:b4:ae:ac:3c:b0:ea:44:c3:90:18:65:f1:
7b:5f:48:45:87:1d:25:61:21:3b:49:5d:31:5c:b9:
1d:10:34:53:75:9b:b2:91:70:8a:ef:52:07:be:24:
5d:35:65:b1:cc:53:e6:b3:6c:35:00:25:7d:bd:07:
a8:72:12:c1:8d:fe:ef:0b:d1:14:98:4f:a5:a7:ca:
61:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:8A:86:AB:EF:FF:5C:27:D0:E4:88:38:F7:F9:C8:7D:60:DC:68:77
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/a012f434-0893-309d-a03c-6d4dea6c7567.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/dd62a733-0e13-4012-8294-fce655e4a41a.crl
X509v3 Authority Key Identifier:
keyid:91:13:58:B4:76:AE:9F:A1:B0:7E:93:8D:BC:37:2C:AB:97:3D:76:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:fd92:d00::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
21:4d:74:0a:64:1e:ed:bb:6f:2e:ec:b3:34:73:0c:92:42:78:
89:56:09:82:7d:61:fe:cc:7f:d0:cc:f0:b4:1f:a1:a9:dc:af:
a7:b1:3d:34:c6:58:b3:e0:e4:c5:3b:c8:bc:2f:13:c0:c8:35:
78:45:9b:6e:ba:1f:f0:b5:d7:32:be:df:3f:b1:f3:38:99:53:
93:a9:14:d4:f2:cf:7d:a9:6f:c9:96:d6:2b:60:e7:f9:d9:3d:
a0:42:90:72:6c:4c:ad:0c:45:f3:c7:88:55:f0:0c:5d:07:d8:
de:9c:1c:3c:ef:9d:38:a8:76:d7:a9:7f:dd:f0:5d:6a:4e:04:
ba:94:1b:be:50:0b:9f:13:15:bc:f4:e1:92:cb:4e:ec:93:30:
b5:2a:11:9a:e4:4d:3c:cb:a2:f5:53:9a:c0:2b:6a:ba:15:1d:
80:3d:ea:0a:5d:f8:ce:b0:48:13:1d:6d:ca:91:1e:ec:e1:b5:
91:3f:2e:95:51:43:23:30:f7:9f:35:98:b3:77:2e:d4:56:1b:
88:7c:b7:99:fa:6f:e6:a8:2f:7f:0e:47:17:eb:58:99:d7:c0:
8a:08:7a:72:da:27:16:8a:86:cf:80:f3:0d:cc:63:a2:a1:c4:
23:85:c4:58:50:c0:98:b3:25:71:35:fc:e4:05:33:58:11:42:
04:e2:fe:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:40:12 2025 by rpki-client