Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec3472d2-073b-458a-8e0f-7ee77169574a/8a93ad7a-1f96-37f2-b51e-adf90e530bdd.roa
File: 8a93ad7a-1f96-37f2-b51e-adf90e530bdd.roa (raw, json)
Hash identifier: 3F32JN3/pDO6OOguIq2I+LzjKjUcALr9SJz8/4cFd38=
Subject key identifier: 59:49:F4:FD:ED:B2:B6:9B:DD:C7:E8:41:D9:BB:3F:DC:42:93:69:2D
Certificate issuer: /CN=ec3472d2-073b-458a-8e0f-7ee77169574a
Certificate serial: 010D0C9F432858489A3B48D0CB5B0CAAB12E9C20
Authority key identifier: 72:70:44:BC:98:D7:EE:B4:32:B4:5E:0A:84:F1:84:AE:56:51:A9:45
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec3472d2-073b-458a-8e0f-7ee77169574a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec3472d2-073b-458a-8e0f-7ee77169574a/8a93ad7a-1f96-37f2-b51e-adf90e530bdd.roa
Signing time: Mon 20 Jan 2025 02:00:40 +0000
ROA not before: Mon 20 Jan 2025 02:00:40 +0000
ROA not after: Sun 20 Apr 2025 01:00:40 +0000
asID: 16509
IP address blocks: 2602:f957:a00::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9a:3b:48:d0:cb:5b:0c:aa:b1:2e:9c:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec3472d2-073b-458a-8e0f-7ee77169574a
Validity
Not Before: Jan 20 02:00:40 2025 GMT
Not After : Apr 20 01:00:40 2025 GMT
Subject: CN=f1bc0830-4129-431b-b704-7bc9ca2982f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:98:6c:b4:0e:37:9c:ee:95:5c:ec:be:3c:ad:
db:48:24:e6:89:ae:8e:fa:12:9a:ae:40:59:6e:05:
b2:1a:f1:83:ce:8e:0f:70:40:a8:b7:1c:c0:c7:89:
cc:5a:c2:3f:c6:2c:e2:d9:44:69:ee:3a:6c:94:26:
a8:d1:e9:03:f6:75:dc:35:d1:d9:aa:10:7f:c1:f0:
82:d7:fa:9a:a9:3d:f1:5b:77:b2:b2:ea:56:35:82:
9e:7e:ff:ba:ce:eb:7d:ab:51:33:77:3b:75:16:47:
4f:5a:f8:a3:cc:84:3b:f7:02:fb:e8:a6:03:08:88:
16:bb:4b:bc:6e:a2:52:99:33:61:77:95:05:55:1d:
1d:fb:46:0a:47:c7:fd:c9:85:40:13:2f:1e:35:d1:
fe:0d:2f:a9:a6:b6:de:24:a0:de:dc:1a:95:73:22:
89:ed:8b:24:70:a4:7c:1f:d0:7a:a0:34:1c:01:23:
d7:36:69:0c:2b:bc:a4:b7:6c:f7:16:46:cd:de:67:
44:08:0e:19:db:2e:ee:67:6e:c4:1f:83:c3:44:71:
39:ac:c6:aa:71:3a:5a:e4:12:f8:60:cd:d8:1c:1c:
73:84:f1:8b:f8:57:73:f2:2f:9c:6a:e0:b7:52:ff:
7e:ce:5e:98:3b:1d:aa:ed:98:97:84:2c:d1:56:f1:
90:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:49:F4:FD:ED:B2:B6:9B:DD:C7:E8:41:D9:BB:3F:DC:42:93:69:2D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec3472d2-073b-458a-8e0f-7ee77169574a/8a93ad7a-1f96-37f2-b51e-adf90e530bdd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec3472d2-073b-458a-8e0f-7ee77169574a/ec3472d2-073b-458a-8e0f-7ee77169574a.crl
X509v3 Authority Key Identifier:
keyid:72:70:44:BC:98:D7:EE:B4:32:B4:5E:0A:84:F1:84:AE:56:51:A9:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec3472d2-073b-458a-8e0f-7ee77169574a.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:f957:a00::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a0:58:3c:cb:88:bd:26:64:75:81:e8:d7:9c:8f:bf:4e:ca:1b:
7e:2a:bd:a3:59:ba:19:e6:02:2c:d5:6c:65:1f:cf:af:d0:ec:
36:fb:e2:85:f1:6f:98:a6:1e:65:40:32:7a:88:7b:32:bd:36:
ac:cf:ff:e7:d7:e4:d4:30:7d:1c:af:02:29:ec:7d:89:07:51:
84:f8:07:d6:07:78:37:24:bc:b9:f4:34:c1:6c:07:45:fa:ae:
42:e7:2f:15:a9:8a:75:3f:12:c3:e7:f1:5f:e1:e4:67:ad:f6:
9f:e5:f1:a3:2c:a0:98:85:0d:2e:2c:43:45:47:ca:96:cc:be:
a5:ce:b8:85:4d:1e:d1:42:00:5d:9b:a3:a9:5c:c8:d9:63:e9:
bb:6e:82:01:ad:e2:51:e4:c2:02:f7:4e:61:cd:47:08:10:cb:
e8:18:04:c8:14:f4:98:06:34:b4:6d:d2:48:e2:c2:d1:37:b4:
f6:fc:26:a2:ff:94:09:0f:0c:79:5c:e1:f8:57:06:33:0b:61:
1c:61:e1:c3:88:20:16:4d:2c:32:47:c6:88:9a:9e:b4:64:8b:
44:37:54:b7:b0:2d:b2:64:63:72:6d:cb:07:35:13:24:06:a9:
e0:64:f2:89:6e:2a:4d:5e:d8:19:46:bf:c3:8a:0b:64:53:49:
59:c8:7a:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:57:09 2025 by rpki-client