Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/8d974757-d4d2-3d3e-98aa-88aa4187535f.roa
File: 8d974757-d4d2-3d3e-98aa-88aa4187535f.roa (raw, json)
Hash identifier: L51hy0xLkHj5vSQ8FblyPArN40zRdh65gQHByebDCBA=
Subject key identifier: D4:32:5D:1C:53:56:BC:50:56:28:1E:98:3F:CC:17:B1:8A:DF:D9:EC
Certificate issuer: /CN=98161ef7-249b-450b-ba6a-5819e613ed63
Certificate serial: 010D0C9F432858489BA0B2B6DA567DF7B4C62660
Authority key identifier: D4:19:D4:44:4B:11:89:5C:8C:6D:68:65:FD:EB:4B:4F:F2:AC:1A:76
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/8d974757-d4d2-3d3e-98aa-88aa4187535f.roa
Signing time: Mon 20 Jan 2025 14:00:51 +0000
ROA not before: Mon 20 Jan 2025 14:00:51 +0000
ROA not after: Sun 20 Apr 2025 13:00:51 +0000
asID: 21738
IP address blocks: 2602:2b7:d00::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9b:a0:b2:b6:da:56:7d:f7:b4:c6:26:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98161ef7-249b-450b-ba6a-5819e613ed63
Validity
Not Before: Jan 20 14:00:51 2025 GMT
Not After : Apr 20 13:00:51 2025 GMT
Subject: CN=4bd3fd91-a679-4619-bd6b-203db9db06eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c1:10:93:fb:97:ca:fd:c9:4a:8c:50:29:5a:
44:8b:f6:65:61:32:e8:f9:17:40:46:a5:77:b0:50:
21:aa:8b:2e:19:d0:8c:00:17:0d:b5:b5:93:68:c2:
50:ff:3e:77:bb:c8:d6:90:ae:04:6a:32:87:4e:3d:
42:86:d1:ef:2d:d8:66:1e:37:21:2f:07:b7:32:e1:
ab:03:ef:ef:91:58:f8:42:96:c4:c4:20:06:eb:6e:
c7:06:d9:d2:aa:1b:1f:7c:e3:e3:f1:c3:9e:93:b9:
2f:b5:40:70:fd:67:93:08:98:4e:a2:47:27:e4:ae:
40:0f:85:33:46:d5:37:78:fd:6b:2e:4e:97:3f:61:
c2:05:1a:20:7f:2b:17:26:bf:e8:3f:79:fb:3e:dd:
0e:e1:6b:c0:5d:1d:fa:23:a7:24:12:b1:6a:f6:12:
23:18:88:fd:66:72:37:ad:d4:1e:19:f8:06:ad:db:
22:6f:30:34:a3:50:94:d7:14:0e:33:73:21:34:96:
e2:7d:50:54:4a:e7:df:fc:81:0f:9d:7e:89:b5:88:
28:4e:0a:51:f0:43:d7:56:66:4a:45:de:50:6e:50:
b1:95:6e:a4:e9:d8:8d:7e:44:39:5a:ee:26:31:7d:
fa:de:1f:e5:dc:da:1a:52:bb:ea:ed:99:0c:b8:39:
3c:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:32:5D:1C:53:56:BC:50:56:28:1E:98:3F:CC:17:B1:8A:DF:D9:EC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/8d974757-d4d2-3d3e-98aa-88aa4187535f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/98161ef7-249b-450b-ba6a-5819e613ed63.crl
X509v3 Authority Key Identifier:
keyid:D4:19:D4:44:4B:11:89:5C:8C:6D:68:65:FD:EB:4B:4F:F2:AC:1A:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:2b7:d00::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
44:17:48:4d:4e:9e:96:33:69:13:e1:57:2e:24:0f:e6:b2:d9:
98:12:1d:f5:89:59:02:92:ff:0e:3c:21:c7:39:ae:d0:a3:fc:
46:09:c1:4b:6c:ff:f2:e6:30:93:1f:0a:94:1b:1f:61:ac:53:
da:63:2e:86:85:14:31:bd:3b:5b:97:eb:ca:63:e3:6b:73:f6:
6d:b7:6c:08:f2:bf:8d:c1:e3:75:1a:fe:e8:d3:6b:d2:b7:01:
cf:39:42:cf:25:c4:b9:96:95:27:66:df:4c:82:6c:8c:80:e9:
9a:e3:67:3d:61:1d:06:88:ef:c7:f2:e9:47:27:e7:50:df:56:
91:00:05:57:e8:2f:a4:57:9f:29:7b:dc:96:fc:24:1b:2a:5b:
e7:11:f7:0e:be:04:89:34:7f:b3:ff:19:21:c4:c7:da:73:74:
04:6f:86:8a:8c:1b:b4:0e:45:7c:84:51:36:38:ce:28:01:cf:
19:07:6e:97:73:72:b7:a0:0b:12:dd:d6:a8:a3:fe:ae:2e:14:
72:ad:c1:79:9c:58:99:fe:78:4c:a0:53:e9:23:bb:8d:e2:5a:
05:36:20:0e:11:75:6f:09:c1:54:de:56:b6:d2:66:c2:76:0b:
39:ee:7d:92:f9:00:73:38:e7:3f:c4:55:19:99:f7:2a:d2:fd:
af:e5:15:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:25:34 2025 by rpki-client