Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/340da77e-1ff9-45fc-b1ec-0eaa0e43586b/98a144c3-7846-3b48-9f34-e69502d5b5c7.roa
File: 98a144c3-7846-3b48-9f34-e69502d5b5c7.roa (raw, json)
Hash identifier: bUeUzBKEWTj941zKk9snZ3iiipTnPs2yyyRSwBufl3I=
Subject key identifier: A4:AE:B5:EE:A5:52:64:D9:AD:5F:A0:E1:72:74:64:3C:CD:58:DE:92
Certificate issuer: /CN=340da77e-1ff9-45fc-b1ec-0eaa0e43586b
Certificate serial: 010D0C9F43285848A400BDD0B7D1991991174380
Authority key identifier: 8C:97:02:52:D4:FD:88:D3:A5:1D:5B:5F:30:33:08:85:CB:5C:27:C4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/340da77e-1ff9-45fc-b1ec-0eaa0e43586b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/340da77e-1ff9-45fc-b1ec-0eaa0e43586b/98a144c3-7846-3b48-9f34-e69502d5b5c7.roa
Signing time: Thu 23 Jan 2025 14:00:52 +0000
ROA not before: Thu 23 Jan 2025 14:00:52 +0000
ROA not after: Wed 23 Apr 2025 13:00:52 +0000
asID: 30330
IP address blocks: 2602:803:5000::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a4:00:bd:d0:b7:d1:99:19:91:17:43:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=340da77e-1ff9-45fc-b1ec-0eaa0e43586b
Validity
Not Before: Jan 23 14:00:52 2025 GMT
Not After : Apr 23 13:00:52 2025 GMT
Subject: CN=2f0e37db-2234-433f-8eef-c40b06899c08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:40:9c:9e:44:24:08:05:69:d8:d2:e5:9e:41:
86:93:37:ee:eb:d8:df:e7:98:a1:73:36:7b:c1:ef:
95:6c:ae:2b:81:1a:f7:8f:c5:cd:8b:f5:f4:a9:bf:
45:b6:07:a8:3a:8f:4f:7c:a3:bf:e0:67:88:34:04:
0e:1a:be:02:e8:65:7d:b3:46:08:84:73:d2:06:30:
cf:b7:c8:54:2d:dd:bd:7e:ab:5c:c5:f9:8a:5e:b0:
c6:8a:44:c8:71:a2:e2:ca:83:a1:31:3d:2d:52:8f:
61:eb:4e:0e:a2:6c:b3:10:fb:af:ce:6d:e6:f5:94:
32:dd:47:14:db:c5:6d:40:4a:78:0b:fb:c1:21:fb:
74:f8:61:4e:f8:5b:c2:9a:ee:27:4b:47:b9:6d:26:
1a:38:95:30:9b:9e:39:c4:ff:ea:97:d8:af:3c:ac:
5c:16:be:25:ce:39:7b:f2:c7:c8:de:4f:87:cf:39:
bc:55:29:5b:97:5c:a1:fa:c4:73:26:2e:ad:21:a7:
8f:44:87:87:0e:be:5c:42:33:7a:a9:9a:d2:7a:60:
60:a2:de:4b:ac:0c:23:e9:b7:85:be:b4:bc:cf:45:
76:3a:ec:a0:c6:4c:14:d2:57:5f:9c:91:b8:57:43:
70:28:5d:c2:48:95:59:99:bc:14:28:8b:99:e2:bc:
ef:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:AE:B5:EE:A5:52:64:D9:AD:5F:A0:E1:72:74:64:3C:CD:58:DE:92
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/340da77e-1ff9-45fc-b1ec-0eaa0e43586b/98a144c3-7846-3b48-9f34-e69502d5b5c7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/340da77e-1ff9-45fc-b1ec-0eaa0e43586b/340da77e-1ff9-45fc-b1ec-0eaa0e43586b.crl
X509v3 Authority Key Identifier:
keyid:8C:97:02:52:D4:FD:88:D3:A5:1D:5B:5F:30:33:08:85:CB:5C:27:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/340da77e-1ff9-45fc-b1ec-0eaa0e43586b.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:803:5000::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
75:d1:0e:31:07:3f:32:25:f2:13:60:69:34:db:a7:8e:ac:22:
6e:db:0f:ef:60:61:c8:6c:79:bc:60:a3:15:c3:cc:a6:4a:cb:
f0:73:8e:0c:61:dd:11:bb:15:0e:4a:ac:3b:7e:4f:79:33:45:
03:74:5b:91:7e:d2:48:de:71:dd:4c:44:f2:9b:51:8e:10:f5:
33:10:c4:2a:79:86:e4:7a:46:35:71:18:17:0f:1d:1f:19:6b:
b6:66:43:05:e3:9b:70:ce:29:05:ea:26:95:e9:ab:04:b1:bb:
ca:e5:71:a1:f8:dd:cc:42:b9:07:6d:fe:a9:1c:3a:85:a5:08:
67:ce:33:cc:c4:cb:f6:5e:4b:80:69:9a:c4:0f:12:56:ad:7b:
96:49:ed:08:e4:8c:a1:35:ea:63:3d:c8:f6:e0:95:ec:8a:f7:
24:37:e9:0b:0a:b2:a6:83:91:aa:17:6c:cb:fc:ab:9c:ab:b7:
ce:b0:69:3b:66:6c:95:46:6f:fc:a5:cd:7c:be:f4:a2:02:06:
28:6e:e2:55:5c:e8:8a:c8:e8:df:97:25:42:1c:20:98:51:0b:
4a:1a:3e:3e:82:b4:17:82:3c:ae:00:b6:91:bd:6a:7d:53:a9:
75:0b:28:41:6c:3c:40:45:11:e8:94:cc:0d:bb:3d:a9:e0:09:
09:f2:57:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:43:30 2025 by rpki-client