Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cda047c8-1dc9-4cca-b1de-b651af254414/c005238f-e667-357a-9bf5-bdf33e9305cc.roa
File: c005238f-e667-357a-9bf5-bdf33e9305cc.roa (raw, json)
Hash identifier: /m5VFiptH3/5rcbdF7VIqP1TsJCHrqYB7QuTU6hlVTA=
Subject key identifier: 66:CF:25:A7:8A:C0:93:19:F5:E9:71:3B:1F:38:80:1C:BA:0C:86:C1
Certificate issuer: /CN=cda047c8-1dc9-4cca-b1de-b651af254414
Certificate serial: 010D0C9F43285848D3506571E843E74344FE99C0
Authority key identifier: C5:47:3E:9D:27:46:CC:54:40:32:8B:E9:74:8C:3D:D1:93:28:82:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cda047c8-1dc9-4cca-b1de-b651af254414.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cda047c8-1dc9-4cca-b1de-b651af254414/c005238f-e667-357a-9bf5-bdf33e9305cc.roa
Signing time: Sun 09 Feb 2025 12:44:26 +0000
ROA not before: Sun 09 Feb 2025 12:44:26 +0000
ROA not after: Sat 10 May 2025 11:44:26 +0000
asID: 36832
IP address blocks: 2602:f91d::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d3:50:65:71:e8:43:e7:43:44:fe:99:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cda047c8-1dc9-4cca-b1de-b651af254414
Validity
Not Before: Feb 9 12:44:26 2025 GMT
Not After : May 10 11:44:26 2025 GMT
Subject: CN=fe6b92d4-0ca8-4e2d-b00b-d75e9a7fe127
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:4e:f3:25:c4:ab:a6:4f:45:13:26:23:24:58:
46:c0:a8:1b:d2:3b:53:ec:da:d6:41:df:c5:73:b5:
78:e6:5d:89:77:c5:6a:55:2e:cf:f1:94:77:31:71:
44:bf:53:fa:78:e6:cb:32:6e:a9:d7:09:d0:8d:7b:
55:87:a2:94:0c:ad:df:74:68:8d:d3:02:4d:87:c6:
d5:21:48:e5:d1:f4:cd:11:b0:1a:af:b7:92:d6:4a:
be:9d:e0:29:35:9f:c9:15:09:7d:b0:6a:51:d2:b9:
36:ab:1a:f7:05:a5:6b:03:c5:ca:bd:24:3a:53:50:
dc:cb:57:47:74:49:93:c3:35:a8:11:36:65:ea:0b:
91:96:f4:d9:1a:a5:99:46:fc:e2:e0:d2:db:6e:4f:
2c:c8:85:44:0e:43:07:c0:60:39:23:2e:b3:28:e4:
fa:81:18:e2:b5:4f:10:23:ff:f8:7e:72:e0:7a:50:
a3:59:2d:f5:7c:b5:b2:17:9e:97:06:c1:d2:d1:9b:
10:13:3b:88:d7:ad:f1:ab:23:b9:37:44:88:e6:cf:
7e:a0:5f:92:d4:ab:d7:75:4e:55:7a:0d:8c:55:5d:
fd:03:c1:2e:83:88:95:ff:f7:89:60:7f:f2:11:87:
97:81:8f:18:ed:4a:c7:38:0b:fa:e3:8b:81:0e:cf:
15:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:CF:25:A7:8A:C0:93:19:F5:E9:71:3B:1F:38:80:1C:BA:0C:86:C1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cda047c8-1dc9-4cca-b1de-b651af254414/c005238f-e667-357a-9bf5-bdf33e9305cc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cda047c8-1dc9-4cca-b1de-b651af254414/cda047c8-1dc9-4cca-b1de-b651af254414.crl
X509v3 Authority Key Identifier:
keyid:C5:47:3E:9D:27:46:CC:54:40:32:8B:E9:74:8C:3D:D1:93:28:82:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cda047c8-1dc9-4cca-b1de-b651af254414.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:f91d::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
13:84:f3:96:71:c9:ba:27:7c:72:fa:c3:bb:02:ce:1a:9b:f5:
81:11:ef:85:a9:59:c5:18:87:e4:18:fd:62:47:ef:5f:2f:90:
36:96:23:2d:a5:54:b1:a3:fb:cb:75:32:70:d1:ab:38:d3:b0:
ad:1a:2c:3e:8a:e1:5c:ee:91:b2:42:46:19:7b:60:a9:0f:d2:
d8:d0:85:a5:de:f0:63:dd:d3:0a:93:ef:14:e8:0c:10:42:b0:
ab:66:f8:eb:d0:ef:65:b7:d2:ff:e9:a9:4a:f3:77:08:72:2c:
3d:05:40:6a:5c:7a:cc:0b:7f:7b:f0:22:09:61:70:ad:09:ee:
cc:bb:1f:eb:86:db:a7:03:4a:c7:ac:60:1e:36:2d:6c:63:81:
05:d6:fd:fc:5e:4c:55:68:19:da:f4:7c:64:b0:4b:0c:85:06:
c9:35:be:a9:da:32:a2:83:6f:af:7f:b6:54:25:a5:ed:50:5d:
54:d6:22:b7:d4:07:ea:cf:22:34:e2:64:e7:ea:51:5f:b9:ed:
84:56:b6:3a:43:b4:aa:0c:3a:9d:fe:5d:ea:91:7e:71:27:cb:
4d:33:cf:1d:19:b4:d2:73:84:0a:ab:ec:26:38:fb:45:48:67:
99:10:31:6f:d9:a6:79:a1:e7:80:e5:07:50:83:e1:7c:40:c3:
92:f5:2a:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:41:30 2025 by rpki-client