Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263/8eeb1ea2-7d67-30c8-ba9f-b9591546a0aa.roa
File: 8eeb1ea2-7d67-30c8-ba9f-b9591546a0aa.roa (raw, json)
Hash identifier: GrTCaYqTq16bwPZzG57Biavz7SH/8sWrCvwVBt/l4j0=
Subject key identifier: A8:16:12:B3:05:75:78:6C:EC:94:95:08:82:C8:B2:59:8A:61:99:1E
Certificate issuer: /CN=eb2c27ca-fb7c-4cad-9f9b-4f754f864263
Certificate serial: 010D0C9F43285848CDE0FAF840BC1ADA6EA9AAC0
Authority key identifier: CF:B9:5A:A2:3C:1B:20:FF:10:CA:74:8F:25:5C:F5:09:89:A2:BE:51
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263/8eeb1ea2-7d67-30c8-ba9f-b9591546a0aa.roa
Signing time: Fri 07 Feb 2025 14:00:53 +0000
ROA not before: Fri 07 Feb 2025 14:00:53 +0000
ROA not after: Thu 08 May 2025 13:00:53 +0000
asID: 401012
IP address blocks: 2602:f956:70::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:cd:e0:fa:f8:40:bc:1a:da:6e:a9:aa:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb2c27ca-fb7c-4cad-9f9b-4f754f864263
Validity
Not Before: Feb 7 14:00:53 2025 GMT
Not After : May 8 13:00:53 2025 GMT
Subject: CN=1b00f345-d4a2-43d6-a62d-82782ac9e3df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:bc:c6:be:8f:8b:f0:4b:42:be:92:3e:ed:2e:
06:0e:88:9e:4d:0b:38:e2:75:89:e9:a9:dd:70:c6:
2f:d8:c6:cd:77:0e:32:28:05:29:b4:b9:aa:52:56:
e2:0e:ae:bb:ce:28:91:7d:56:34:d9:77:c2:d7:e5:
44:ec:75:93:6d:aa:ab:12:43:95:4a:10:ba:b4:f8:
a2:0d:21:43:13:80:82:3e:94:86:ad:47:c3:c3:11:
71:66:66:15:ea:3c:7e:63:bd:9f:73:f9:b2:e7:16:
48:7c:53:51:2f:9e:0f:81:8d:b2:f1:f8:ca:f0:a7:
d8:39:8b:23:89:62:18:3d:d7:7a:01:b7:f1:54:e3:
28:1a:60:b1:78:21:69:15:ec:46:35:b4:89:16:75:
17:a2:67:98:23:8e:0d:fc:98:62:99:80:3e:6e:01:
8e:6c:0c:33:99:30:b9:21:51:96:5b:5f:a0:dc:81:
4d:4f:61:10:3a:01:d0:47:85:18:d1:81:3a:e2:b3:
3c:65:74:2f:63:ff:7f:df:fb:3b:fd:7e:51:19:43:
12:8d:9b:c3:4e:23:28:ab:46:21:8f:79:e7:73:f7:
8d:36:4b:96:10:50:05:72:06:58:00:79:9e:0f:93:
60:b5:fa:3d:fa:67:a3:78:ed:cd:9c:51:32:8e:d4:
e7:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:16:12:B3:05:75:78:6C:EC:94:95:08:82:C8:B2:59:8A:61:99:1E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263/8eeb1ea2-7d67-30c8-ba9f-b9591546a0aa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263/eb2c27ca-fb7c-4cad-9f9b-4f754f864263.crl
X509v3 Authority Key Identifier:
keyid:CF:B9:5A:A2:3C:1B:20:FF:10:CA:74:8F:25:5C:F5:09:89:A2:BE:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:f956:70::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4d:42:21:79:da:c3:d2:15:75:06:cf:ff:30:1a:d0:61:64:09:
97:6d:55:3c:2b:21:29:6a:13:c2:ee:18:03:87:d0:61:8f:fc:
b5:53:06:15:9c:9f:f8:4c:db:5f:3f:72:4c:20:aa:13:2a:5c:
f7:28:5e:ea:b3:f5:40:99:df:6a:58:21:ba:c0:e4:d6:22:6e:
2f:71:eb:82:9a:cd:a3:41:56:9f:f3:dc:18:23:c5:15:cc:c1:
a6:92:59:f5:4d:63:d4:76:c9:44:74:dc:39:9f:ed:d4:5a:cc:
90:4a:47:cc:df:9c:69:3f:81:e5:f5:18:f6:9b:54:b3:ec:fb:
e9:48:08:90:ac:ad:ac:27:0f:82:e0:19:f5:01:31:0d:98:d5:
65:76:ff:a8:8f:4d:00:43:08:45:48:cd:28:5c:a6:e0:d0:aa:
47:4e:79:01:6a:8a:a6:b0:06:52:34:ed:74:a3:7b:6e:0c:aa:
b9:06:70:25:e4:5a:7a:7f:96:15:e0:44:44:76:63:d1:e0:d3:
9d:3a:0b:91:47:cf:c8:36:11:cb:0e:91:6c:fb:44:f2:df:44:
08:ee:a1:77:3c:21:64:58:9b:e1:ba:0a:7b:75:0b:97:4c:8b:
db:3e:0e:93:8c:5e:63:7a:6d:5d:7a:30:8e:e0:c4:25:36:da:
22:46:28:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:20:29 2025 by rpki-client