Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/81d86d00-f6e5-47a7-932c-048a6cc0c427/8afe91d7-ac39-3f9a-99e6-08b83450bc1a.roa
File: 8afe91d7-ac39-3f9a-99e6-08b83450bc1a.roa (raw, json)
Hash identifier: 1mocRz56VMPWDv42QyyrB7PzPGvjkhqoWgg85dTz+sY=
Subject key identifier: 3D:89:7C:0B:E2:0F:18:21:64:8F:B9:EB:00:DC:5A:29:96:85:29:19
Certificate issuer: /CN=81d86d00-f6e5-47a7-932c-048a6cc0c427
Certificate serial: 010D0C9F432858489340AEF6202FCE92FF6B8600
Authority key identifier: E9:E7:54:A9:4D:31:87:14:2D:5D:CB:91:4B:29:24:A1:8A:BB:6E:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/81d86d00-f6e5-47a7-932c-048a6cc0c427.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/81d86d00-f6e5-47a7-932c-048a6cc0c427/8afe91d7-ac39-3f9a-99e6-08b83450bc1a.roa
Signing time: Fri 17 Jan 2025 14:00:53 +0000
ROA not before: Fri 17 Jan 2025 14:00:53 +0000
ROA not after: Thu 17 Apr 2025 13:00:53 +0000
asID: 400882
IP address blocks: 2602:fa19::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:93:40:ae:f6:20:2f:ce:92:ff:6b:86:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81d86d00-f6e5-47a7-932c-048a6cc0c427
Validity
Not Before: Jan 17 14:00:53 2025 GMT
Not After : Apr 17 13:00:53 2025 GMT
Subject: CN=737dfb77-e8f7-4d98-aa79-f179cda8b5e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:33:65:72:46:9b:4d:1a:91:d0:ad:58:47:18:
d8:c1:0c:79:51:3f:04:28:d2:98:9f:01:38:93:44:
54:2f:96:d3:91:d1:e2:38:77:bf:84:7d:4d:e5:0a:
54:6b:62:ef:a5:ca:10:90:54:e4:27:24:6f:4b:4c:
9b:75:65:7d:25:66:f8:75:2d:de:73:4e:e1:21:c2:
7d:19:dd:cd:db:40:a4:50:e6:8d:31:f8:8d:3c:79:
46:a5:b0:f4:35:fd:01:2b:75:53:5b:fd:1e:cf:8b:
14:89:11:44:2c:e0:9e:57:7c:41:0c:4c:ac:25:8a:
4d:4d:2a:dd:94:32:0a:90:a9:7a:b3:43:f7:c9:5e:
15:28:12:59:63:63:05:3b:d7:88:2c:25:53:44:aa:
fa:34:40:4e:d6:ee:b8:ef:a5:df:3f:a8:6a:7d:46:
ca:e9:5e:9a:e5:41:ac:ee:5c:0d:16:85:b4:a5:57:
c9:03:77:b5:68:25:f0:d1:c2:eb:6d:3c:e6:3d:fc:
49:4f:f0:1f:56:65:7d:42:13:b2:9d:d0:d5:b1:6d:
82:b4:5d:1b:98:e1:a5:b3:2f:a9:4d:36:11:fd:35:
72:94:7e:08:9f:cd:f3:53:93:d2:79:bf:88:a3:ee:
fa:10:87:e6:6d:7d:08:63:80:2c:fb:f7:63:34:39:
f3:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:89:7C:0B:E2:0F:18:21:64:8F:B9:EB:00:DC:5A:29:96:85:29:19
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/81d86d00-f6e5-47a7-932c-048a6cc0c427/8afe91d7-ac39-3f9a-99e6-08b83450bc1a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/81d86d00-f6e5-47a7-932c-048a6cc0c427/81d86d00-f6e5-47a7-932c-048a6cc0c427.crl
X509v3 Authority Key Identifier:
keyid:E9:E7:54:A9:4D:31:87:14:2D:5D:CB:91:4B:29:24:A1:8A:BB:6E:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/81d86d00-f6e5-47a7-932c-048a6cc0c427.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:fa19::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
34:23:70:f8:e1:74:46:5b:40:e6:a2:30:ea:07:3a:bd:fc:32:
f1:dc:4a:bb:8a:34:e5:5b:00:57:4e:3e:8c:12:9f:21:09:8f:
09:7f:6d:b3:fe:12:24:32:ee:03:2a:19:c0:4d:9f:af:89:cc:
c8:7b:2c:e6:87:b1:54:9b:bc:21:af:fc:bc:b2:12:33:57:e0:
89:53:3c:42:04:a3:e3:0b:50:88:a9:1f:a6:d3:bd:3c:5e:4c:
b8:5f:a4:e9:6f:1d:d2:7d:0b:a5:78:71:bf:60:43:ca:44:45:
d4:1b:54:8f:c5:2d:f0:c7:95:f7:7d:cc:7b:60:94:fd:8c:09:
b7:d2:7e:53:11:3f:fd:8e:31:41:2c:d7:e7:4e:70:28:6b:2b:
44:1a:63:45:94:1a:21:04:7d:c7:5c:0b:de:a1:ea:5e:40:a5:
a6:d5:31:d7:97:df:88:12:fa:b2:ad:75:90:73:da:95:a1:39:
05:a1:f4:80:0f:b3:53:ad:98:66:44:e2:50:2c:7c:97:25:e0:
b2:2d:dc:3c:16:73:52:f7:5f:3d:23:e0:c9:5b:ac:36:0e:e7:
b7:ce:91:d4:26:5f:f8:82:05:0f:9b:72:e1:53:b8:ce:a6:63:
f4:f7:6f:8e:ac:33:b5:a8:96:f1:99:9d:76:4d:7b:14:13:17:
37:e3:84:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:34:52 2025 by rpki-client