Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/54199565-6cef-3713-b08d-53a11a0bf15f.roa
File: 54199565-6cef-3713-b08d-53a11a0bf15f.roa (raw, json)
Hash identifier: e/v8wJyf3TVjziXafLVYIWwOEjhDhTlrx8A+yfzBVA4=
Subject key identifier: 98:37:DC:89:8E:4E:B0:99:65:7A:EA:FB:78:A2:20:23:3F:AB:FC:51
Certificate issuer: /CN=38e671ad-3e19-48ff-801c-f18f3c194278
Certificate serial: 010D0C9F432858488DAB4DC8EA70A3F15F8F0280
Authority key identifier: D1:CF:F5:CE:46:C1:96:A2:5D:CA:E0:03:28:62:05:08:08:F3:EC:10
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/54199565-6cef-3713-b08d-53a11a0bf15f.roa
Signing time: Wed 15 Jan 2025 14:00:51 +0000
ROA not before: Wed 15 Jan 2025 14:00:51 +0000
ROA not after: Tue 15 Apr 2025 13:00:51 +0000
asID: 62563
IP address blocks: 2602:fec3::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:8d:ab:4d:c8:ea:70:a3:f1:5f:8f:02:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38e671ad-3e19-48ff-801c-f18f3c194278
Validity
Not Before: Jan 15 14:00:51 2025 GMT
Not After : Apr 15 13:00:51 2025 GMT
Subject: CN=7cecfb21-1519-41a0-9296-87f392c5ac18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:48:5a:2d:e3:10:78:ec:bd:a7:09:a6:03:48:
c3:33:b9:01:6b:21:78:d2:84:2d:9a:0d:fe:2f:bc:
5b:00:1e:f5:d4:be:b7:38:52:08:53:32:eb:a5:34:
9c:c8:3f:81:14:63:7b:4e:2c:d4:96:9a:08:f2:6d:
37:fa:6b:bb:a5:7b:18:33:0b:1a:b8:0f:bc:b0:0f:
21:2b:90:4f:64:7b:49:87:0c:12:ee:cb:11:57:b3:
52:b8:99:22:94:14:c7:67:49:58:b9:6c:5a:2a:58:
29:11:9d:54:d0:ec:38:21:f9:7b:1d:36:78:ff:13:
1c:56:de:96:e9:b1:7d:8e:f0:f5:34:23:94:88:fa:
5e:8d:68:74:1e:4d:ed:2a:5b:c7:17:42:60:cf:67:
9c:d4:ce:88:b5:89:1f:0b:5f:65:3f:1b:18:ea:ef:
82:8d:da:30:25:50:bd:d5:11:80:d1:d3:38:1a:f3:
11:02:00:de:6f:51:16:83:b6:c0:d2:07:74:46:aa:
3e:e6:18:2a:f8:68:cf:6f:62:54:1d:64:de:c1:9a:
e7:60:d7:25:66:c9:96:19:af:e4:77:41:07:9f:9b:
e2:c7:c7:5b:34:8c:19:a5:1b:c4:23:c9:00:5b:a0:
34:1b:36:ac:12:b0:c6:ab:85:1f:36:84:9e:67:ef:
95:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:37:DC:89:8E:4E:B0:99:65:7A:EA:FB:78:A2:20:23:3F:AB:FC:51
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/54199565-6cef-3713-b08d-53a11a0bf15f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/38e671ad-3e19-48ff-801c-f18f3c194278.crl
X509v3 Authority Key Identifier:
keyid:D1:CF:F5:CE:46:C1:96:A2:5D:CA:E0:03:28:62:05:08:08:F3:EC:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:fec3::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ad:da:fb:84:8d:3a:a3:3f:65:73:6b:80:ee:46:d6:0c:98:b7:
07:4f:38:28:08:19:07:fd:57:ec:aa:9c:6e:2b:cf:8e:b3:4d:
d3:dc:2e:36:36:f5:e2:13:05:67:55:c4:d8:96:d3:b5:ec:b7:
08:22:ad:d4:4b:cf:4c:a6:ad:5c:58:d0:f7:9c:19:4a:79:89:
6f:9b:3d:df:8c:95:dd:c9:80:d5:f2:9d:39:9a:12:c9:9f:84:
fc:6d:31:e1:c9:84:3a:03:b0:45:b4:fc:f9:08:2d:d7:6e:b5:
ad:fa:c6:09:17:4f:c9:1f:c3:fe:39:03:13:2e:7e:94:f2:d2:
74:8c:91:8c:0b:40:a4:6f:79:96:16:17:27:da:9d:52:27:63:
2e:01:12:b5:fd:ed:a0:e8:d4:28:7f:d7:dd:0b:2d:58:aa:dd:
10:8a:07:41:3d:b1:c1:65:e7:bd:8a:db:d0:35:ad:ce:d9:46:
8d:ea:a2:d2:41:59:dd:23:99:8e:2f:06:b6:af:24:0e:63:28:
25:64:cb:58:70:11:9a:c6:ca:e7:f1:34:92:2e:a9:9e:aa:84:
05:a1:2d:65:de:6d:35:f0:06:b0:f2:3a:e3:15:0a:21:98:4a:
04:cc:57:dd:2d:f2:39:eb:0a:20:68:5e:73:d6:b2:55:ea:82:
86:0e:59:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 03:26:34 2025 by rpki-client