Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe/4c153a19-e10c-3a3c-a3d0-6f0d6060d334.roa
File: 4c153a19-e10c-3a3c-a3d0-6f0d6060d334.roa (raw, json)
Hash identifier: DBfqKepn1BokuaUCrO5EDoxMXQS5m847oQJTRmun7gQ=
Subject key identifier: A6:0F:11:FD:61:E5:E3:C4:6E:AD:D0:EE:A2:05:5D:12:57:A3:DB:4F
Certificate issuer: /CN=d96ea6e4-95a3-4508-8c2f-046aed988ebe
Certificate serial: 010D0C9F432858490CB16FA3DF5ED752B6CBB8E0
Authority key identifier: E2:C3:95:94:85:FF:09:28:A1:8D:8A:F5:AB:7A:C9:0A:D6:AF:D3:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe/4c153a19-e10c-3a3c-a3d0-6f0d6060d334.roa
Signing time: Sun 02 Mar 2025 02:00:40 +0000
ROA not before: Sun 02 Mar 2025 02:00:40 +0000
ROA not after: Sat 31 May 2025 01:00:40 +0000
asID: 47069
IP address blocks: 2602:f9df:300::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:0c:b1:6f:a3:df:5e:d7:52:b6:cb:b8:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d96ea6e4-95a3-4508-8c2f-046aed988ebe
Validity
Not Before: Mar 2 02:00:40 2025 GMT
Not After : May 31 01:00:40 2025 GMT
Subject: CN=d6d78a7e-31af-43a5-b37e-f0c4177fa7b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:b2:06:d2:60:49:89:78:f5:ef:02:2d:e2:37:
31:9f:90:7c:1b:95:0a:a0:82:e1:a9:50:f5:cf:5d:
23:42:f6:bf:a4:70:cb:93:07:3a:bd:d0:cc:00:38:
17:68:9b:7c:9e:aa:01:ab:a2:e6:e5:1c:e9:6d:51:
76:44:c9:b8:70:43:48:8f:fe:ed:ad:f9:73:25:64:
91:77:2c:65:7b:0f:fe:03:c2:cf:6d:fb:f5:c8:fb:
37:79:85:1e:86:13:e0:5c:b0:64:9e:84:66:82:02:
38:33:0a:26:23:24:c0:78:0c:a8:f4:b2:d8:10:ff:
fc:36:25:b2:fc:a3:4e:f3:0e:b3:06:aa:cd:11:b1:
42:2c:0c:25:84:0a:97:49:ca:75:68:66:73:a0:2b:
a1:4f:8f:df:bb:69:a9:c4:b8:5a:48:c2:2e:88:f7:
59:b3:22:75:c9:bf:c2:c4:5e:b6:65:09:af:42:31:
7d:02:dc:b7:48:64:eb:8b:18:b4:1d:f4:32:a6:1f:
70:98:36:60:a8:c6:cb:a0:b8:b9:64:d2:64:1b:38:
da:7b:8a:9e:6c:c1:5d:30:38:7a:c6:73:03:f4:be:
21:a3:19:77:23:48:6e:10:14:ec:ab:60:49:cc:67:
40:6d:f4:b8:40:e3:0e:b4:5e:d1:18:1b:67:11:37:
a5:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:0F:11:FD:61:E5:E3:C4:6E:AD:D0:EE:A2:05:5D:12:57:A3:DB:4F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe/4c153a19-e10c-3a3c-a3d0-6f0d6060d334.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe/d96ea6e4-95a3-4508-8c2f-046aed988ebe.crl
X509v3 Authority Key Identifier:
keyid:E2:C3:95:94:85:FF:09:28:A1:8D:8A:F5:AB:7A:C9:0A:D6:AF:D3:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:f9df:300::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0f:bb:4b:9c:d5:3e:b9:af:db:d5:76:54:d2:81:83:c2:f7:ae:
74:36:f1:87:ec:ea:ef:91:a7:78:79:b7:3a:63:44:27:60:a0:
02:57:68:90:d4:03:0b:1a:43:8c:f6:96:19:51:19:6d:c0:e8:
c0:f6:24:67:1a:9f:bd:c5:48:39:bd:5d:e1:b7:65:14:e8:f2:
ad:55:a7:ad:99:29:49:f4:0d:ce:af:31:34:45:44:b0:a6:c7:
a1:b9:ba:4e:e2:66:e9:ef:d1:49:a7:24:5a:27:da:17:f2:c7:
b2:a1:39:bc:db:6b:2a:41:0e:f9:0d:d1:6f:29:05:b1:1c:fc:
8f:8d:e3:2e:53:8a:a8:bc:8e:24:62:fb:f7:9f:71:a6:6f:76:
4c:ce:c6:22:78:8f:18:35:97:1f:21:eb:d5:67:ce:04:b8:d9:
ea:fe:eb:5a:e0:9e:e9:67:c6:da:aa:a0:18:eb:a9:ae:7e:b6:
c8:e7:77:ed:00:90:1e:f3:7b:d5:ee:71:61:ba:05:5c:ef:d1:
fc:02:71:85:96:16:bb:4d:39:45:c2:54:96:00:f9:36:17:b8:
db:82:62:83:2a:c3:6e:a1:b4:f6:30:4b:d0:18:fc:1e:1b:23:
6c:93:3d:e5:9e:02:32:c4:19:78:bc:e3:24:1d:8a:4c:49:98:
87:b2:67:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 15:57:28 2025 by rpki-client