Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b56caea-2136-4342-baff-6f31268d4cc4/3bafc015-eee5-3b8a-82fc-f368e1449458.roa
File: 3bafc015-eee5-3b8a-82fc-f368e1449458.roa (raw, json)
Hash identifier: edFFwZF+Dt+N3BSMSE3PPRa/f5+5GK10VRD8IGAY60Y=
Subject key identifier: 3E:CF:B9:C6:FA:72:90:93:9B:F0:72:CB:8C:71:3A:DF:CE:84:B2:9C
Certificate issuer: /CN=8b56caea-2136-4342-baff-6f31268d4cc4
Certificate serial: 010D0C9F43285848C6E62FEF4B023887019ECD00
Authority key identifier: 5B:94:69:3D:08:CE:48:82:15:E6:39:96:71:21:23:0D:90:A8:C3:DD
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b56caea-2136-4342-baff-6f31268d4cc4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b56caea-2136-4342-baff-6f31268d4cc4/3bafc015-eee5-3b8a-82fc-f368e1449458.roa
Signing time: Wed 05 Feb 2025 02:00:39 +0000
ROA not before: Wed 05 Feb 2025 02:00:39 +0000
ROA not after: Tue 06 May 2025 01:00:39 +0000
asID: 49585
IP address blocks: 2602:faaf:1::/48 maxlen: 48
2602:faaf:2::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c6:e6:2f:ef:4b:02:38:87:01:9e:cd:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b56caea-2136-4342-baff-6f31268d4cc4
Validity
Not Before: Feb 5 02:00:39 2025 GMT
Not After : May 6 01:00:39 2025 GMT
Subject: CN=4f0be811-0fe9-4467-831c-4d7a0fe37b17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:87:89:2c:52:03:50:59:ca:b9:3e:71:5f:78:
a5:68:9b:7b:da:06:ba:13:ab:8c:b4:1e:f9:7d:d3:
9f:76:9d:94:72:a9:b9:3e:c0:51:1f:2c:fb:38:2b:
16:0a:d0:c7:0b:98:11:b5:f9:c0:e5:2b:18:a1:92:
6c:80:a5:42:a8:06:3b:7a:4e:b9:38:14:37:f8:79:
82:98:ec:2a:9b:ad:6c:e3:99:ea:88:21:d7:d2:bd:
12:1d:fa:02:0e:66:31:67:9a:29:bf:f2:c1:68:c8:
f7:ba:ec:4e:08:db:a3:72:c5:6c:21:c7:06:97:15:
62:f2:a4:00:95:c4:36:9a:fe:2c:a4:af:3d:d2:28:
a4:eb:ad:a3:d1:f6:58:39:c7:fc:0a:10:c9:1d:fc:
33:a4:4c:71:58:93:45:18:8a:5b:85:2a:13:97:d0:
ad:e1:fb:f4:42:00:b3:53:5c:08:aa:79:92:38:2c:
a0:a4:04:3b:d2:90:45:50:57:cb:bb:38:5d:c8:ea:
e6:39:c2:ef:5c:2e:33:89:8c:9e:f0:b5:ce:a1:ae:
6c:c9:66:7c:b2:0e:8c:58:c8:47:af:24:68:9f:0f:
c6:7f:04:b9:3c:ea:1a:91:be:f0:79:39:3f:d0:08:
98:2f:5f:79:7f:99:73:5d:41:8c:98:2f:49:0a:ff:
e6:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:CF:B9:C6:FA:72:90:93:9B:F0:72:CB:8C:71:3A:DF:CE:84:B2:9C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b56caea-2136-4342-baff-6f31268d4cc4/3bafc015-eee5-3b8a-82fc-f368e1449458.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b56caea-2136-4342-baff-6f31268d4cc4/8b56caea-2136-4342-baff-6f31268d4cc4.crl
X509v3 Authority Key Identifier:
keyid:5B:94:69:3D:08:CE:48:82:15:E6:39:96:71:21:23:0D:90:A8:C3:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b56caea-2136-4342-baff-6f31268d4cc4.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:faaf:1::-2602:faaf:2:ffff:ffff:ffff:ffff:ffff
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4e:69:ba:f6:d6:0d:99:de:c4:51:03:f7:c1:a2:db:6b:be:8b:
8e:88:2e:21:f6:45:ff:89:97:94:84:de:9a:68:bc:1d:7f:7f:
07:47:d2:8a:9f:93:64:54:05:40:49:fc:20:d6:bf:5e:12:fc:
38:e1:f0:1b:ec:00:72:df:93:d3:fd:33:9e:e7:09:74:4e:60:
cb:04:9e:f4:df:6e:c5:1c:53:70:90:3b:8d:74:0d:66:25:67:
56:46:cb:aa:f0:dc:6d:11:a8:c0:73:39:9a:27:04:6d:99:1e:
ad:9f:73:ae:32:16:b6:86:1c:d6:7f:89:dd:ed:7e:0a:6e:a4:
cb:0c:d6:c2:b6:fd:58:f4:bd:6f:a3:c9:ab:e8:a1:53:5f:fc:
d9:da:5d:d5:f3:5f:d6:91:01:b6:75:7f:50:91:8c:8d:d9:96:
30:ab:92:a4:c6:b1:3f:59:a8:74:1e:aa:77:3b:5a:0a:39:cf:
6a:94:be:de:c2:b3:7c:2a:5b:23:25:ca:a0:66:bd:ad:bd:85:
e4:1f:44:63:e9:2b:5d:52:a2:b1:27:e5:7f:33:27:35:c0:39:
25:ef:63:d1:0b:44:2a:c0:31:23:38:8d:69:e6:b2:68:7b:e7:
f8:61:79:0a:a8:66:75:a7:94:4d:57:f5:f4:90:99:f4:3c:76:
f5:9b:43:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:44:14 2025 by rpki-client