Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac65e460-1633-4b44-9dc5-be303c8b3f09/6a401fb8-1d9c-370f-8da6-e632403dbeb6.roa
File: 6a401fb8-1d9c-370f-8da6-e632403dbeb6.roa (raw, json)
Hash identifier: VhXRtrBbLgSmL4vEN/h7BgZ5LLo57JPPnsr/8lsCpYU=
Subject key identifier: 90:5D:F7:C8:59:E6:2E:8D:F2:B3:67:1D:F0:A4:8D:05:78:5F:1B:92
Certificate issuer: /CN=ac65e460-1633-4b44-9dc5-be303c8b3f09
Certificate serial: 010D0C9F43285848F8A1DB66D8C704DA8D5EBC80
Authority key identifier: 20:A0:6F:E0:40:2F:37:1F:59:03:00:DD:95:67:73:32:9F:7E:CC:2D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac65e460-1633-4b44-9dc5-be303c8b3f09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac65e460-1633-4b44-9dc5-be303c8b3f09/6a401fb8-1d9c-370f-8da6-e632403dbeb6.roa
Signing time: Sat 22 Feb 2025 21:33:29 +0000
ROA not before: Sat 22 Feb 2025 21:33:29 +0000
ROA not after: Fri 23 May 2025 20:33:29 +0000
asID: 46486
IP address blocks: 2602:f700:c0::/43 maxlen: 43
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f8:a1:db:66:d8:c7:04:da:8d:5e:bc:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac65e460-1633-4b44-9dc5-be303c8b3f09
Validity
Not Before: Feb 22 21:33:29 2025 GMT
Not After : May 23 20:33:29 2025 GMT
Subject: CN=8e520da1-c1ca-42d2-85d8-79a9a193d8c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:27:41:50:1f:bc:98:40:49:45:69:7a:ce:d2:
70:06:1d:ea:e8:3c:85:ec:60:3b:fc:a0:c5:1b:11:
48:50:9d:bd:1a:a5:c8:c6:97:d6:f0:3f:9c:2f:c4:
f9:2f:36:b9:17:e3:39:83:b4:0d:64:da:65:79:e9:
ad:f3:87:42:76:5b:c4:dd:98:ed:39:69:78:05:f3:
17:2e:7f:9e:4c:2d:ea:96:e7:1d:3d:84:0a:a1:69:
36:13:31:3b:bc:0b:bb:92:2f:5a:55:a8:06:cf:91:
c9:23:c3:f4:31:60:03:74:c5:eb:b6:e5:be:48:c3:
1a:ac:22:61:e9:b2:9c:98:dd:84:ff:93:cb:c1:8a:
86:d9:7c:f9:9e:58:5f:2a:1d:3c:d9:f1:32:7f:f4:
73:da:00:7c:f1:58:12:c7:d4:e1:4a:97:1f:6a:94:
27:d0:5e:78:91:6b:e2:7d:65:dc:e7:58:84:3d:2d:
bd:7a:eb:bf:c3:e8:de:1b:8e:4a:b3:06:22:ef:6b:
f3:5b:ad:68:ae:43:33:b5:25:ce:c0:0f:48:59:bb:
65:69:03:b0:d5:21:e9:3a:1d:c0:cc:e2:cd:45:b1:
e3:d3:8b:f1:b5:e0:aa:e4:ef:45:ec:9e:20:7d:08:
f1:53:89:fd:93:c5:5f:6e:d3:41:c9:9a:aa:6f:e0:
d6:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:5D:F7:C8:59:E6:2E:8D:F2:B3:67:1D:F0:A4:8D:05:78:5F:1B:92
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac65e460-1633-4b44-9dc5-be303c8b3f09/6a401fb8-1d9c-370f-8da6-e632403dbeb6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac65e460-1633-4b44-9dc5-be303c8b3f09/ac65e460-1633-4b44-9dc5-be303c8b3f09.crl
X509v3 Authority Key Identifier:
keyid:20:A0:6F:E0:40:2F:37:1F:59:03:00:DD:95:67:73:32:9F:7E:CC:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac65e460-1633-4b44-9dc5-be303c8b3f09.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:f700:c0::/43
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
23:b3:ed:50:ad:99:0f:02:f0:bc:e2:1e:8f:07:b5:83:06:82:
c5:36:b6:9b:c6:fb:df:ae:32:82:b8:60:c6:24:5e:d6:f1:b9:
f9:33:38:ce:4f:a6:b3:b1:4c:07:a9:b8:a0:83:89:d8:85:ed:
dd:90:45:f4:95:fa:85:2e:6d:96:7a:14:83:40:f8:70:92:fd:
bc:6d:60:a3:26:33:71:93:33:55:94:72:1d:95:0e:22:4c:88:
40:bb:1f:fc:ac:0e:fe:a8:6a:86:61:2a:61:f1:24:e6:21:80:
7c:a7:b2:2d:c4:ae:7c:92:8d:75:92:0d:12:a9:2a:8a:ea:08:
15:2a:1e:41:80:ba:ac:f5:1b:be:dc:fb:5d:08:1a:ac:b7:3f:
11:02:d3:d4:18:a3:fc:c6:f6:a8:a0:88:80:e4:74:25:84:b8:
e9:c4:bd:a3:a8:90:be:05:2e:24:ae:e6:7d:d1:45:e0:40:b3:
1c:47:2a:fd:83:dc:fc:b0:28:b5:35:92:b0:98:7b:59:ed:1f:
c6:90:fe:87:5b:af:5c:08:c4:9d:e7:bb:d8:79:3a:4e:38:c6:
a1:9b:db:82:53:11:41:a0:76:a2:6c:3c:45:2a:a0:78:13:9f:
6d:e8:ce:0a:1d:b5:22:b4:79:48:e6:9e:29:e6:59:9c:04:8f:
41:0a:2f:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:05:46 2025 by rpki-client