Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d8c9167-e816-4834-8fcc-f8b0f93fe6a0/8cd0ffac-ec2d-3e06-a98e-4aee50ee9992.roa
File: 8cd0ffac-ec2d-3e06-a98e-4aee50ee9992.roa (raw, json)
Hash identifier: Jb+Z6oBLsyZxUnl4TpFuHIIc7JB/lpraNZ/yWHRhp+E=
Subject key identifier: 32:CD:30:20:94:F1:B6:CD:AF:1F:C2:9F:36:00:65:19:09:99:E6:AB
Certificate issuer: /CN=1d8c9167-e816-4834-8fcc-f8b0f93fe6a0
Certificate serial: 010D0C9F432858490F83E29F51BAE7DFCC0F2DF0
Authority key identifier: 8A:66:59:66:BE:40:91:02:45:F8:94:B2:C8:4B:D3:E1:91:C7:0C:C0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d8c9167-e816-4834-8fcc-f8b0f93fe6a0.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d8c9167-e816-4834-8fcc-f8b0f93fe6a0/8cd0ffac-ec2d-3e06-a98e-4aee50ee9992.roa
Signing time: Mon 03 Mar 2025 02:16:41 +0000
ROA not before: Mon 03 Mar 2025 02:16:41 +0000
ROA not after: Sun 01 Jun 2025 01:16:41 +0000
asID: 40124
IP address blocks: 2602:299:50::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:0f:83:e2:9f:51:ba:e7:df:cc:0f:2d:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d8c9167-e816-4834-8fcc-f8b0f93fe6a0
Validity
Not Before: Mar 3 02:16:41 2025 GMT
Not After : Jun 1 01:16:41 2025 GMT
Subject: CN=07485399-de1e-4c9f-ac01-53fc774db670
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ed:12:09:3a:cc:22:ca:e9:2b:0e:d6:ab:55:
32:20:c0:e2:33:9b:81:f2:75:a2:ef:67:1f:f2:e6:
e8:e2:f5:cf:34:e6:12:bc:ed:47:da:5a:95:e0:de:
f7:5c:f7:f2:a0:17:bc:70:bc:13:18:87:39:24:f2:
0e:6a:db:cf:0c:0c:95:26:c1:fa:c2:85:c1:c1:39:
9a:68:7c:aa:db:47:4b:25:bc:21:97:5a:d5:12:ab:
b1:ad:96:48:41:85:f7:22:b1:31:6c:a2:10:8f:d5:
68:ce:d2:ac:7b:2c:a3:7a:cf:25:ce:e7:19:b3:21:
cb:62:da:70:d1:ee:17:01:14:74:98:14:b1:99:cb:
e9:04:51:12:a6:50:3f:63:c5:6a:fc:0d:30:8c:d3:
44:8d:2e:66:bb:1d:01:5a:0a:52:59:16:c5:c3:18:
72:47:25:8b:0a:c1:c7:26:43:47:ca:1c:1d:17:8f:
aa:95:c8:9b:f7:26:20:bb:eb:a4:96:9f:f4:d8:fc:
99:86:44:98:61:62:bb:06:16:0b:a4:7a:c2:ea:d3:
35:3c:25:2e:58:7b:d1:98:0e:f5:67:14:68:ee:0a:
dc:c4:e1:3d:7e:df:37:bd:c5:66:bd:6f:9d:ea:53:
1f:e7:13:46:30:ce:fc:dd:d2:f1:a6:ec:08:04:43:
a9:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:CD:30:20:94:F1:B6:CD:AF:1F:C2:9F:36:00:65:19:09:99:E6:AB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d8c9167-e816-4834-8fcc-f8b0f93fe6a0/8cd0ffac-ec2d-3e06-a98e-4aee50ee9992.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d8c9167-e816-4834-8fcc-f8b0f93fe6a0/1d8c9167-e816-4834-8fcc-f8b0f93fe6a0.crl
X509v3 Authority Key Identifier:
keyid:8A:66:59:66:BE:40:91:02:45:F8:94:B2:C8:4B:D3:E1:91:C7:0C:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d8c9167-e816-4834-8fcc-f8b0f93fe6a0.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:299:50::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7f:56:33:be:60:07:45:f5:c2:56:4c:00:55:71:e5:78:51:ac:
e3:a9:e8:c6:70:d3:ee:e3:e8:73:ed:65:fe:20:c0:8d:1e:75:
b1:f2:bc:00:32:fb:48:6b:9e:de:4e:ba:b2:95:a9:65:5f:3a:
43:81:65:10:d8:bb:21:8b:bd:15:1d:e2:98:b9:d0:28:2f:d2:
6d:19:13:7f:01:c8:3c:52:72:55:e9:da:fb:bf:8c:f7:6a:c8:
95:a3:90:a8:2e:1f:67:63:17:dd:8d:d7:08:4d:90:b8:c1:4e:
06:96:c8:d1:90:7c:5b:cc:5d:09:a3:d4:75:b2:0f:fd:76:7c:
d6:05:3b:2f:b9:da:c9:7a:47:6b:ee:93:f9:a5:16:86:6a:29:
72:82:6d:89:9b:58:bd:b9:75:e8:b5:56:a5:81:7a:88:87:3f:
77:0e:9b:79:42:63:aa:fb:37:61:7d:38:22:b3:cf:8e:b3:41:
86:9c:b1:f2:08:78:64:bd:2d:75:4a:f6:81:7c:87:b9:dc:a0:
5e:85:3b:f1:2a:d1:91:55:95:62:09:d1:f3:8f:36:d4:49:89:
84:b6:64:a6:a2:ab:55:23:a6:96:1a:c7:7c:13:91:3d:fb:76:
b5:8e:89:75:4e:6c:db:cc:fc:7d:76:8f:8e:c1:49:67:b7:dc:
bd:dc:e9:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:25:54 2025 by rpki-client