Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/5d053f32-5485-34e5-9703-b389b2c5414d.roa
File: 5d053f32-5485-34e5-9703-b389b2c5414d.roa (raw, json)
Hash identifier: Jz5PkIzIwevYKLndo+kCdi7UXR5mY4r+kO7PkQuQ+RI=
Subject key identifier: 29:2E:D4:2B:CD:E0:50:E0:6C:26:C4:50:1A:52:28:E4:4D:BD:35:5F
Certificate issuer: /CN=5ad0865e-7786-4c66-9f91-bc1f46f2c34f
Certificate serial: 010D0C9F43285849287E6C98F819A95683DC7D60
Authority key identifier: 3A:AF:94:EF:9A:DA:A0:89:89:87:5D:CA:E8:60:86:C9:40:E3:0D:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/5d053f32-5485-34e5-9703-b389b2c5414d.roa
Signing time: Wed 12 Mar 2025 01:00:39 +0000
ROA not before: Wed 12 Mar 2025 01:00:39 +0000
ROA not after: Tue 10 Jun 2025 01:00:39 +0000
asID: 8987
IP address blocks: 2602:f9e7:26::/47 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:28:7e:6c:98:f8:19:a9:56:83:dc:7d:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ad0865e-7786-4c66-9f91-bc1f46f2c34f
Validity
Not Before: Mar 12 01:00:39 2025 GMT
Not After : Jun 10 01:00:39 2025 GMT
Subject: CN=d883421a-d237-4484-9ae6-ff80ab112021
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:01:e2:f1:95:26:68:aa:fe:53:07:9e:f2:cf:
02:5c:02:fa:2e:28:08:34:2b:f7:64:42:2f:01:19:
96:b8:ca:4d:99:f6:7c:2d:25:fe:b6:0d:7a:33:30:
a5:c8:94:c3:d1:9a:a0:b9:8d:56:25:2a:24:e7:2e:
01:bf:8c:94:1e:40:0c:96:b6:97:8e:dc:03:bd:78:
5c:91:e7:0b:81:3f:20:aa:a5:1f:57:24:82:7a:e4:
2d:9b:4c:c0:16:a2:32:6b:c1:d4:f6:97:0b:34:3c:
d2:a0:7a:af:a5:30:2e:05:eb:98:53:b0:0b:32:35:
ee:24:59:d5:46:9f:64:8e:8a:2c:9e:3a:54:f3:5e:
2d:dd:8b:f7:16:2b:88:07:4d:b6:a0:34:80:75:9c:
f2:f5:00:14:ab:8c:cb:39:b8:04:4c:4d:7a:ab:94:
4b:03:a8:03:4d:2c:ed:e4:fc:88:4b:30:98:a6:2d:
97:03:3a:b2:a2:f2:f4:db:b0:2d:5c:9b:ec:07:b6:
13:7e:3a:e9:3c:01:39:ce:79:11:31:fe:ea:bd:8a:
84:18:a8:f7:42:59:9c:55:21:cf:53:a7:0e:52:ee:
fd:9b:bb:0b:13:83:3f:be:d2:c9:e2:ed:d1:c9:e8:
a3:e1:c9:cf:2a:fc:c8:b9:d1:01:de:0a:6e:99:ce:
c3:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:2E:D4:2B:CD:E0:50:E0:6C:26:C4:50:1A:52:28:E4:4D:BD:35:5F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/5d053f32-5485-34e5-9703-b389b2c5414d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/5ad0865e-7786-4c66-9f91-bc1f46f2c34f.crl
X509v3 Authority Key Identifier:
keyid:3A:AF:94:EF:9A:DA:A0:89:89:87:5D:CA:E8:60:86:C9:40:E3:0D:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:f9e7:26::/47
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8c:e0:5b:d9:b7:0d:cd:14:65:4f:ad:24:14:43:13:80:d6:bd:
18:19:40:eb:b0:0f:9f:6d:9f:c4:3f:72:f3:c4:61:22:57:5d:
e9:e9:1b:d2:ed:8a:07:04:5e:68:8e:e4:e2:18:dd:00:0d:2a:
5d:30:fc:83:eb:68:cf:76:61:8c:78:33:24:c4:15:bb:19:da:
76:80:f0:c3:fc:9f:a9:e9:11:bf:57:85:19:6d:79:aa:b0:bf:
8f:e0:36:a1:c0:67:f9:70:53:92:79:92:ab:96:98:a6:56:dd:
cd:02:ea:76:a6:1b:db:e1:4e:f7:eb:41:53:1a:01:42:3a:bf:
20:cf:e3:6f:21:1f:df:cd:76:85:ce:81:e2:28:08:c8:82:86:
0a:49:9d:29:f6:7b:03:6b:ba:5c:22:51:04:ea:e9:89:cb:f3:
a9:2f:69:d9:15:7c:92:1b:9b:9e:c0:b4:71:cb:ae:4d:10:5e:
d3:24:f0:9a:1c:5f:99:e1:f3:20:62:bb:68:24:60:99:3a:22:
af:74:63:d6:c2:b0:15:2c:5c:6c:50:90:a7:44:6c:be:b4:f4:
67:30:4b:b7:3d:3f:83:e0:a7:b2:62:3d:9a:7b:98:29:01:8a:
79:77:31:72:0a:58:19:f5:1a:78:b0:8c:db:26:a7:af:1d:c4:
7c:4d:97:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:16:18 2025 by rpki-client