Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac65e460-1633-4b44-9dc5-be303c8b3f09/d16ffc38-7c25-32e8-be52-77ea562c0470.roa
File: d16ffc38-7c25-32e8-be52-77ea562c0470.roa (raw, json)
Hash identifier: SC7I8tgV+zMhFag71MlZFKj73Qz/cXGjq/7i78DfG+U=
Subject key identifier: 18:92:68:24:F2:B2:69:CD:AC:33:E7:1A:68:33:10:2B:3C:3D:4D:4A
Certificate issuer: /CN=ac65e460-1633-4b44-9dc5-be303c8b3f09
Certificate serial: 010D0C9F43285848F89F57E10C7F32E30525E300
Authority key identifier: 20:A0:6F:E0:40:2F:37:1F:59:03:00:DD:95:67:73:32:9F:7E:CC:2D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac65e460-1633-4b44-9dc5-be303c8b3f09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac65e460-1633-4b44-9dc5-be303c8b3f09/d16ffc38-7c25-32e8-be52-77ea562c0470.roa
Signing time: Sat 22 Feb 2025 21:28:25 +0000
ROA not before: Sat 22 Feb 2025 21:28:25 +0000
ROA not after: Fri 23 May 2025 20:28:25 +0000
asID: 213683
IP address blocks: 2602:f700:80::/42 maxlen: 42
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f8:9f:57:e1:0c:7f:32:e3:05:25:e3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac65e460-1633-4b44-9dc5-be303c8b3f09
Validity
Not Before: Feb 22 21:28:25 2025 GMT
Not After : May 23 20:28:25 2025 GMT
Subject: CN=500fcbb9-e8b3-455b-bff0-7c4733e9083a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:75:12:71:d7:0f:38:bf:5b:51:44:29:2d:9e:
79:51:51:3f:f6:39:38:cb:f2:85:a4:67:8b:cc:d5:
e9:c8:8d:9f:bf:9a:7f:99:48:3a:68:d7:f2:61:c5:
b6:21:4a:99:be:27:bc:bc:0a:e6:1d:13:48:a0:93:
de:f7:c9:43:a4:30:1f:2d:17:c7:bf:a0:b9:ce:6f:
a9:35:bd:9d:28:75:bf:4a:92:a8:0b:ac:c6:1d:d4:
8b:fd:64:b3:ba:15:53:4d:49:dd:5f:b5:2f:c9:b5:
6b:9f:03:f2:49:10:85:aa:29:94:36:5a:ea:ac:87:
ce:ac:fc:d5:1b:71:be:27:e0:d8:2b:83:e1:ff:af:
c3:a1:3e:1b:43:a4:23:87:f8:84:3a:31:ac:a7:cf:
ec:e8:8a:a2:40:fb:60:c3:5c:2f:2b:0e:be:6f:34:
f4:e9:c6:61:4c:6b:2c:97:49:fd:ca:7e:42:27:0d:
2a:6e:64:ee:a2:31:20:76:36:51:ba:b9:9b:5b:d7:
f0:f3:df:09:14:19:e5:80:ec:91:e2:f3:de:1b:f3:
c1:4f:68:9f:11:62:61:e2:65:b4:a4:ee:de:97:09:
a6:ea:99:69:8a:98:b2:5f:39:1f:98:fa:0e:19:72:
ed:4b:d5:1c:f8:a1:c9:fd:b7:0d:45:47:88:a4:1b:
31:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:92:68:24:F2:B2:69:CD:AC:33:E7:1A:68:33:10:2B:3C:3D:4D:4A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac65e460-1633-4b44-9dc5-be303c8b3f09/d16ffc38-7c25-32e8-be52-77ea562c0470.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac65e460-1633-4b44-9dc5-be303c8b3f09/ac65e460-1633-4b44-9dc5-be303c8b3f09.crl
X509v3 Authority Key Identifier:
keyid:20:A0:6F:E0:40:2F:37:1F:59:03:00:DD:95:67:73:32:9F:7E:CC:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac65e460-1633-4b44-9dc5-be303c8b3f09.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:f700:80::/42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
73:ee:11:14:75:3a:dd:ca:f5:db:8a:a5:ab:9a:d3:3d:83:79:
82:01:04:70:8b:1f:96:e1:dd:5b:8a:78:32:8a:1f:e8:f0:90:
12:5a:62:0e:f7:73:87:21:d8:4f:0a:35:77:b0:18:6e:da:e1:
56:6d:28:83:c3:72:d2:8b:2b:b3:4f:30:a9:4b:67:b5:1f:db:
f1:95:a8:7b:8e:3b:62:00:45:c1:28:29:d6:ec:87:4d:44:34:
7e:2c:3a:b2:da:ce:84:3e:b1:26:90:7b:6b:d0:7e:dc:66:e9:
cd:6a:b4:ab:1f:db:25:8c:6d:e3:79:3a:1e:92:8d:e4:48:24:
bc:5c:45:4f:25:8c:0f:a7:07:21:6d:fb:84:20:d0:11:14:ce:
ff:e5:59:44:44:bb:05:5a:bf:e7:01:2e:21:07:6b:e6:bc:91:
e2:a6:2a:34:bc:57:60:8b:9d:67:c2:a2:a2:8a:61:0b:94:69:
8f:b3:d5:87:6f:72:ac:a9:9d:99:fc:2f:36:c5:d7:fb:03:b7:
83:40:aa:61:6b:d6:60:43:24:a2:25:cc:b1:9f:93:6b:2a:6f:
35:a4:96:9b:69:15:ce:75:f1:b6:f7:36:38:fd:37:de:d3:ed:
14:bb:ea:d9:6f:1b:41:97:14:4a:e6:f6:70:7c:0b:bf:a1:db:
5e:64:b5:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:21:56 2025 by rpki-client