Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/3fede4cb-4f2e-38f2-bb6d-da74b1c27a5d.roa
File: 3fede4cb-4f2e-38f2-bb6d-da74b1c27a5d.roa (raw, json)
Hash identifier: VgNm7d97yaNZKzF+iHhvWGmge+E0Rm1GHf0LnYTxEmY=
Subject key identifier: 98:DA:47:81:F6:1B:F7:6F:2B:4D:89:54:4C:0D:E9:CE:46:7C:57:D6
Certificate issuer: /CN=158d5f15-a892-4134-840b-026e68357d71
Certificate serial: 010D0C9F432858487CEB39C39423766A17710DC0
Authority key identifier: 2E:21:55:11:DC:0A:3B:36:0C:CD:F2:06:D4:9D:E6:DF:C9:C7:39:BA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/3fede4cb-4f2e-38f2-bb6d-da74b1c27a5d.roa
Signing time: Thu 09 Jan 2025 14:00:52 +0000
ROA not before: Thu 09 Jan 2025 14:00:52 +0000
ROA not after: Wed 09 Apr 2025 13:00:52 +0000
asID: 210645
IP address blocks: 2602:2c9:5::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7c:eb:39:c3:94:23:76:6a:17:71:0d:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=158d5f15-a892-4134-840b-026e68357d71
Validity
Not Before: Jan 9 14:00:52 2025 GMT
Not After : Apr 9 13:00:52 2025 GMT
Subject: CN=238a0548-e934-4e14-b0c3-1eea6e96cd93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:e0:f0:cb:e7:36:06:b8:ce:e5:df:71:b9:b8:
13:31:97:02:81:e8:7b:05:11:a6:6d:98:10:a2:2c:
6c:97:d2:b4:af:0c:3e:a0:14:7e:c4:85:5f:cb:39:
a1:ce:93:89:cd:0f:b6:fa:37:0f:72:5c:0b:43:1e:
e8:02:6b:16:19:39:c2:00:a3:6a:e0:d4:bf:b4:25:
e8:f6:f6:f8:b4:d1:75:60:86:8d:e4:c3:10:a2:1b:
82:57:6f:47:e1:06:ef:dd:ab:cf:f2:39:a4:ac:76:
57:a3:f2:09:88:ef:2d:c9:03:e9:0f:c7:6f:3e:6f:
8c:6c:84:f5:c7:0d:cd:6c:2a:7f:92:62:29:1a:d5:
d8:11:dd:6a:ee:3c:24:0c:00:69:99:fa:15:cd:97:
0c:76:9a:7a:d7:f5:f2:74:39:fd:23:26:67:e5:cf:
48:26:87:25:05:20:7e:10:ed:c0:f1:ae:7f:ec:68:
c6:b0:cb:4f:ab:3c:68:6e:41:37:83:65:88:92:6c:
55:70:f4:62:52:77:a9:87:22:d7:b3:5e:83:de:93:
d9:53:4f:59:58:d2:9e:2f:f0:21:7a:c9:30:e6:15:
da:9e:c1:e7:87:5e:57:2e:21:4e:69:80:42:df:e4:
fe:de:b3:12:12:c7:e0:56:b5:a6:34:37:c1:fc:7a:
7c:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:DA:47:81:F6:1B:F7:6F:2B:4D:89:54:4C:0D:E9:CE:46:7C:57:D6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/3fede4cb-4f2e-38f2-bb6d-da74b1c27a5d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/158d5f15-a892-4134-840b-026e68357d71.crl
X509v3 Authority Key Identifier:
keyid:2E:21:55:11:DC:0A:3B:36:0C:CD:F2:06:D4:9D:E6:DF:C9:C7:39:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:2c9:5::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
61:91:f5:6c:00:aa:96:b9:25:25:e9:b5:26:62:d3:7f:f9:35:
c6:ac:b6:ac:b7:3b:1a:19:5b:52:76:14:6d:de:19:51:93:e2:
62:21:65:ed:54:8c:cc:d1:b0:0d:ea:4c:96:6f:42:22:fd:51:
d2:68:38:04:96:a3:2a:b0:8b:4a:93:a8:ea:ca:48:93:00:bb:
97:85:e0:73:ac:a6:61:21:7e:7e:a5:67:6a:1c:32:56:fa:ab:
b7:6f:4f:ee:6f:a0:04:11:06:e7:4d:a5:79:5c:ab:9a:2e:71:
60:5e:dd:3b:ad:74:96:57:4d:48:9d:b7:18:96:92:92:b1:0b:
cf:65:80:ed:b0:fb:6b:b5:d7:37:06:e9:f7:2e:cc:fa:59:e2:
50:b4:5d:5b:56:23:9f:bb:91:69:6e:d6:e9:9d:97:21:97:5a:
0b:5c:b4:69:fe:23:43:6d:72:94:7e:f9:23:aa:d8:1c:29:ab:
d4:96:07:8b:c2:b5:d1:38:e0:44:e0:3a:ec:91:a1:f5:7a:6a:
47:cf:ea:af:57:5d:e9:d5:92:fb:ff:fa:4c:3d:85:b7:35:dd:
7b:0d:53:58:7d:ee:5c:ae:27:e0:f2:21:b1:26:7d:74:b0:5c:
af:54:7a:d0:8a:c4:88:5b:a9:ac:75:97:12:68:a0:a3:22:ac:
0b:3c:e7:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 17:00:30 2025 by rpki-client