Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/dacb0047-4725-424f-a3e9-b6f212c4c5e3/589da0a2-d425-3d1f-92f5-29c36941c1a5.roa
File: 589da0a2-d425-3d1f-92f5-29c36941c1a5.roa (raw, json)
Hash identifier: fnLSs5lpMQNA2LasaNmU3LMVDtyCoUkg067772q/Heg=
Subject key identifier: 4A:AE:41:E9:90:B8:60:D3:CA:05:38:1B:58:49:B8:BB:24:9A:13:39
Certificate issuer: /CN=dacb0047-4725-424f-a3e9-b6f212c4c5e3
Certificate serial: 010D0C9F4328584937D943002295B820B10B5980
Authority key identifier: 8A:97:87:F5:9B:AF:E2:9E:8A:04:00:52:AF:25:84:7D:11:C7:E3:C2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/dacb0047-4725-424f-a3e9-b6f212c4c5e3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/dacb0047-4725-424f-a3e9-b6f212c4c5e3/589da0a2-d425-3d1f-92f5-29c36941c1a5.roa
Signing time: Mon 17 Mar 2025 13:00:52 +0000
ROA not before: Mon 17 Mar 2025 13:00:52 +0000
ROA not after: Sun 15 Jun 2025 13:00:52 +0000
asID: 401541
IP address blocks: 2602:f757::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:37:d9:43:00:22:95:b8:20:b1:0b:59:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dacb0047-4725-424f-a3e9-b6f212c4c5e3
Validity
Not Before: Mar 17 13:00:52 2025 GMT
Not After : Jun 15 13:00:52 2025 GMT
Subject: CN=56e02816-6d5d-48d2-a24e-bf2f66409573
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:78:a7:c9:85:3f:0b:17:53:08:86:7d:66:75:
e9:e8:32:fe:be:f8:73:0f:90:51:4f:69:e0:2d:36:
54:87:f7:1d:6d:6d:2d:01:1e:66:0c:3c:36:ae:ea:
a8:30:0f:96:2e:88:b0:5b:1a:e9:43:38:5d:cf:58:
c3:6c:ef:0c:00:09:86:bb:23:48:9e:43:1d:f6:6f:
26:cb:e9:4b:5e:f5:41:28:d3:16:85:f6:1a:e3:7b:
6a:f2:e7:15:ed:41:1a:40:07:f9:e4:4b:d7:4c:62:
a5:cb:52:7c:8b:c7:5f:d0:03:0f:d5:02:52:cb:77:
b4:84:4d:00:32:aa:25:5a:b4:d1:7d:92:e8:26:5e:
48:cb:90:5f:c6:78:5c:01:60:f4:89:62:5a:d9:45:
e8:00:d0:da:ec:5a:ac:9a:36:4b:28:9e:36:8c:7d:
60:54:21:a5:ee:b2:28:62:a4:c0:2e:85:39:da:ee:
03:eb:44:e1:f4:fe:25:02:5c:0a:bf:0b:c7:06:d1:
b3:89:82:1b:8d:26:5a:a1:a2:61:97:6f:cf:74:ed:
dc:e1:3d:e8:e4:f6:59:78:df:46:25:42:2d:45:5b:
5b:fc:93:a2:f1:23:8a:a0:01:4b:88:fa:5c:20:d3:
1f:fb:48:41:e6:a3:df:a3:76:0d:02:ea:dd:49:f9:
6b:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:AE:41:E9:90:B8:60:D3:CA:05:38:1B:58:49:B8:BB:24:9A:13:39
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/dacb0047-4725-424f-a3e9-b6f212c4c5e3/589da0a2-d425-3d1f-92f5-29c36941c1a5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/dacb0047-4725-424f-a3e9-b6f212c4c5e3/dacb0047-4725-424f-a3e9-b6f212c4c5e3.crl
X509v3 Authority Key Identifier:
keyid:8A:97:87:F5:9B:AF:E2:9E:8A:04:00:52:AF:25:84:7D:11:C7:E3:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/dacb0047-4725-424f-a3e9-b6f212c4c5e3.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:f757::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1a:ba:7e:de:41:46:fd:13:9a:0f:e6:63:a7:ba:f2:ce:44:24:
a8:f6:1b:13:96:ac:74:51:a6:88:27:1f:72:00:0c:99:d3:16:
7e:3c:bf:97:d6:97:a6:74:0c:8c:93:3a:27:d0:94:00:30:76:
d0:d9:40:0a:f9:fe:d5:d3:ca:eb:00:a0:53:71:36:8c:c0:fc:
3a:2d:e3:43:36:87:ff:61:57:83:b5:d7:3d:dc:4f:d3:40:9e:
6c:a0:e0:77:5b:41:98:0e:fe:fd:80:73:ec:b6:19:31:5a:94:
6e:eb:a8:e8:5e:a8:b5:0d:d1:57:30:70:02:b8:17:ec:49:3a:
c1:86:9e:2d:2b:b2:1b:4b:58:b9:de:30:32:8d:f6:09:76:13:
3b:c6:2f:d6:32:19:cc:d8:1e:c9:36:1d:18:72:ac:79:b6:04:
28:f4:08:53:3d:63:54:11:a1:93:5b:e0:0e:f9:a8:1d:75:6a:
a0:e2:20:10:13:41:4c:57:b6:0c:e3:e5:b1:41:02:46:4f:d9:
b3:76:18:72:b8:bc:78:bc:07:5e:87:f6:bc:12:c2:5e:6d:cf:
f5:e2:e2:4a:f6:1b:d5:d9:67:b1:32:eb:2e:c7:37:53:2f:f1:
9b:39:f0:93:57:28:df:0b:46:11:60:27:01:31:da:05:1e:ce:
4e:a9:69:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:12:52 2025 by rpki-client