Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0b71e1b2-5595-44cf-aa4d-6b5d35ad380e/a2d85e43-7190-3d58-bed4-0482d8c5fa33.roa
File: a2d85e43-7190-3d58-bed4-0482d8c5fa33.roa (raw, json)
Hash identifier: Po7JVgy84KpZ2WPxn/KwJ2dH4POnEMv3SP3fN/iceQc=
Subject key identifier: 70:45:52:6B:7A:31:1C:AC:F8:54:EE:47:95:29:C4:2B:9E:35:F8:3A
Certificate issuer: /CN=0b71e1b2-5595-44cf-aa4d-6b5d35ad380e
Certificate serial: 010D0C9F432858412058C99F228AEBB5D7B908E0
Authority key identifier: 08:F6:D4:68:F1:09:F2:E8:3E:A1:E9:A5:0B:29:2E:88:DB:B8:F0:7F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0b71e1b2-5595-44cf-aa4d-6b5d35ad380e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0b71e1b2-5595-44cf-aa4d-6b5d35ad380e/a2d85e43-7190-3d58-bed4-0482d8c5fa33.roa
Signing time: Tue 28 Feb 2023 18:57:57 +0000
ROA not before: Tue 28 Feb 2023 18:57:57 +0000
ROA not after: Mon 02 Jun 2025 04:00:00 +0000
asID: 399970
IP address blocks: 2602:fc3b:100::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:20:58:c9:9f:22:8a:eb:b5:d7:b9:08:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b71e1b2-5595-44cf-aa4d-6b5d35ad380e
Validity
Not Before: Feb 28 18:57:57 2023 GMT
Not After : Jun 2 04:00:00 2025 GMT
Subject: CN=4069fd7c-6388-4382-bdc9-87c0ff4299ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:a8:52:47:af:50:be:43:3a:e8:d4:2d:cb:1d:
f9:a7:f7:75:fd:12:05:6a:e3:fe:92:7d:91:98:8d:
02:3b:c6:10:9e:d8:9a:fc:91:6d:5a:d7:dc:1f:87:
8f:71:2c:9f:c6:1f:1a:49:7a:b4:28:83:2d:7d:54:
a0:78:d7:a3:49:31:df:09:4d:02:e8:f1:d4:26:98:
af:65:51:54:ad:4d:7e:da:e2:10:6a:70:38:1f:e4:
32:05:8e:7c:76:d8:aa:83:19:03:7a:4c:0b:db:ad:
76:cc:0e:9e:e7:f4:50:59:c5:6b:68:08:33:96:9f:
0b:60:3d:fb:03:78:44:cb:95:e2:2d:84:fb:4d:00:
1a:16:3c:21:df:43:2f:88:32:75:ca:af:49:00:f4:
0c:c8:41:93:4f:7f:a0:49:08:85:b7:5d:4c:c8:10:
1b:7e:c8:eb:57:33:a0:dc:6f:15:57:46:34:54:39:
21:57:40:b9:c8:ea:61:22:53:e5:3e:f7:98:89:17:
ec:10:e2:47:6e:83:5b:09:d6:5a:84:e4:a6:41:44:
5c:d7:64:73:70:4c:dd:7c:23:91:bf:57:ce:d4:10:
24:2f:93:03:12:fd:da:c5:9f:df:b7:f0:ff:3b:b0:
d5:ab:f6:d0:f5:13:4a:99:0b:6d:67:dd:dd:4e:18:
f6:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:45:52:6B:7A:31:1C:AC:F8:54:EE:47:95:29:C4:2B:9E:35:F8:3A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0b71e1b2-5595-44cf-aa4d-6b5d35ad380e/a2d85e43-7190-3d58-bed4-0482d8c5fa33.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0b71e1b2-5595-44cf-aa4d-6b5d35ad380e/0b71e1b2-5595-44cf-aa4d-6b5d35ad380e.crl
X509v3 Authority Key Identifier:
keyid:08:F6:D4:68:F1:09:F2:E8:3E:A1:E9:A5:0B:29:2E:88:DB:B8:F0:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0b71e1b2-5595-44cf-aa4d-6b5d35ad380e.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:fc3b:100::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
32:78:ff:5e:13:b9:2d:eb:d5:e6:02:3b:7c:58:09:9f:2e:c0:
82:1d:b3:32:42:79:d6:58:87:eb:22:30:e5:32:65:d1:d2:55:
25:b5:af:0f:91:74:18:85:53:1e:15:66:7c:2e:d0:34:82:13:
61:30:34:4d:df:5e:6c:e6:a4:b8:ca:2e:cb:48:bd:b3:39:e8:
21:70:3e:3d:bb:76:68:8b:8f:36:ce:49:ab:ed:fd:df:9c:34:
11:27:a8:0f:09:38:7e:81:36:4e:5b:68:24:4a:29:f5:a3:f9:
97:e8:7a:c1:cc:58:f9:be:76:c4:51:2f:f2:f6:9f:ce:7d:12:
df:de:96:81:c2:5c:6c:96:bf:f2:5f:29:23:c2:dd:28:d7:0d:
c1:71:6d:08:cd:c4:08:ec:db:57:22:c8:6a:de:92:b3:35:c4:
63:65:29:9c:2e:69:9d:4c:70:41:ef:de:24:f8:49:84:df:40:
94:93:41:46:22:8b:5a:6f:51:20:0a:f1:a6:93:73:ec:97:31:
7d:05:ad:f7:50:f8:4e:fd:e7:dd:4d:a0:51:9e:97:a0:30:ba:
1c:18:e9:fe:bc:5c:1f:d0:8e:c9:83:aa:fa:7e:6b:28:9d:2f:
7e:6e:20:b1:dd:23:37:d4:5a:5f:8d:53:a0:94:6e:56:f1:76:
d6:b8:65:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:45:57 2025 by rpki-client