Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b5dbf85d-a037-34e6-a07b-059ffb39c42c.roa
File: b5dbf85d-a037-34e6-a07b-059ffb39c42c.roa (raw, json)
Hash identifier: MCGZgWlEZWUiGCgQP/U0fiDSaRYs2lOEKr24BnY6DOI=
Subject key identifier: C4:8E:E4:CC:54:12:BB:31:5A:AE:E6:B3:E6:E9:9C:06:0B:78:9B:76
Certificate issuer: /CN=b6f28d10-5739-4e40-a446-935c60d79169
Certificate serial: 010D0C9F432858488F107A139C44864CC7F76680
Authority key identifier: E8:EA:CF:14:D1:FD:74:AB:31:C2:B1:A6:F0:7E:AF:A6:44:84:08:14
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b5dbf85d-a037-34e6-a07b-059ffb39c42c.roa
Signing time: Thu 16 Jan 2025 02:00:39 +0000
ROA not before: Thu 16 Jan 2025 02:00:39 +0000
ROA not after: Wed 16 Apr 2025 01:00:39 +0000
asID: 16532
IP address blocks: 2602:220::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:8f:10:7a:13:9c:44:86:4c:c7:f7:66:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6f28d10-5739-4e40-a446-935c60d79169
Validity
Not Before: Jan 16 02:00:39 2025 GMT
Not After : Apr 16 01:00:39 2025 GMT
Subject: CN=e063077c-b91c-4d05-9e54-3d36bfcba837
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:af:09:1a:dc:27:e3:15:a0:9b:19:4a:c9:0f:
ac:9c:78:2f:c2:cf:10:eb:5e:20:7f:56:1b:6f:af:
0f:3f:d9:38:c0:03:f8:8a:20:53:96:9c:69:c3:11:
14:84:89:18:d4:b5:a6:21:d9:21:ca:c3:b0:45:f6:
ee:70:49:6f:ed:60:ea:17:bd:16:c3:a5:7b:0e:0b:
7a:d3:06:6b:30:23:ff:46:be:68:af:45:1e:f4:c9:
33:a8:9b:b1:f4:62:dc:04:88:7a:01:3d:83:17:a1:
e5:64:13:33:8d:fb:9e:ed:84:96:14:52:9a:1e:94:
f5:2f:66:c0:f0:9b:ed:18:f8:f7:da:b2:84:05:25:
47:fc:fd:2d:a4:9f:5a:74:c0:a5:1b:c1:5d:58:02:
d4:a8:0b:75:47:aa:c8:f7:6d:b2:6c:28:aa:7f:75:
65:3b:13:f0:6e:41:35:4d:7f:c2:c4:cf:e1:b8:2b:
78:eb:03:27:f9:2f:c6:a4:f5:0f:da:82:74:23:6a:
cf:cf:33:19:06:49:be:db:f3:46:0c:18:5e:de:a6:
a5:bf:5b:34:c8:ae:47:48:d9:63:b9:ab:db:c7:49:
11:91:91:80:c3:a8:57:f9:54:ec:0a:bc:f0:ce:94:
5c:f5:8d:9b:bc:01:10:ee:18:ee:93:48:a6:30:df:
f3:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:8E:E4:CC:54:12:BB:31:5A:AE:E6:B3:E6:E9:9C:06:0B:78:9B:76
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b5dbf85d-a037-34e6-a07b-059ffb39c42c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.crl
X509v3 Authority Key Identifier:
keyid:E8:EA:CF:14:D1:FD:74:AB:31:C2:B1:A6:F0:7E:AF:A6:44:84:08:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:220::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6b:3f:db:d2:5c:e9:92:df:e1:c6:9c:61:27:cf:1a:bb:4b:29:
09:e4:3c:5b:74:8f:44:6d:f6:dd:67:43:20:e3:6a:50:0e:78:
ae:f1:7a:fa:9b:1f:70:97:d1:6d:33:1a:39:06:20:c7:a2:06:
9d:2b:01:b7:46:39:2f:10:49:1b:ce:45:21:4b:32:5f:e3:a2:
bf:fc:a3:5d:69:9b:f8:9d:bd:69:07:59:d5:79:63:aa:a3:03:
ca:6d:fb:91:34:c2:af:b1:ab:68:f2:48:b8:ff:29:ea:48:66:
f7:a3:51:eb:16:f0:bb:52:f6:0c:e3:7c:37:6d:5b:ee:2b:ee:
f4:b5:51:47:12:76:8e:cc:89:ef:a3:64:da:e5:45:e8:90:57:
8d:df:ca:51:d8:58:6d:77:4d:de:17:c6:74:b1:9c:ea:3c:12:
b6:ec:dc:e7:49:7d:5d:77:bf:4e:3f:4f:40:96:18:38:c8:b0:
55:b2:87:e4:ba:83:5e:6d:9d:b4:53:f8:c7:77:f1:c6:0d:88:
17:34:cf:af:ab:22:38:70:c6:92:99:6f:96:b6:28:c2:59:e4:
06:01:64:68:95:3d:f5:b2:e0:9b:76:3e:fa:0c:75:99:34:7c:
29:2b:8d:ac:e0:92:a6:7d:71:8f:38:f3:3f:9b:72:26:77:99:
5b:90:20:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:49:35 2025 by rpki-client