Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/02b28ee3-3109-3680-b083-8c9065ff6f4b.roa
File: 02b28ee3-3109-3680-b083-8c9065ff6f4b.roa (raw, json)
Hash identifier: JsT9MbI0344/n0gC6mRztFEveVlIhwqXAsEptFBgW2Q=
Subject key identifier: CB:42:02:B5:C5:F1:3D:53:DD:71:6F:69:83:F3:78:34:A5:A7:AD:10
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F43285849218438CDEF94FE413268A500
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/02b28ee3-3109-3680-b083-8c9065ff6f4b.roa
Signing time: Sun 09 Mar 2025 13:00:52 +0000
ROA not before: Sun 09 Mar 2025 13:00:52 +0000
ROA not after: Sat 07 Jun 2025 13:00:52 +0000
asID: 22394
IP address blocks: 2001:4888:a603::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:21:84:38:cd:ef:94:fe:41:32:68:a5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Mar 9 13:00:52 2025 GMT
Not After : Jun 7 13:00:52 2025 GMT
Subject: CN=a3c564bd-bacb-4db5-a829-3dbe228418c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:b1:57:47:8e:43:01:5e:6a:a9:e1:7c:3e:aa:
05:c5:d3:79:ec:c5:b0:04:6d:f2:ba:db:e2:22:d2:
d6:96:4f:1c:15:12:32:ba:c9:3c:b6:3d:d5:1f:b5:
c8:63:94:f4:0a:69:74:ae:9a:ec:3f:5d:fb:91:c2:
e6:e3:2e:6b:8a:3a:8a:af:83:2d:c9:8e:2f:a8:f0:
6a:72:f2:b3:f4:2a:c1:8a:6d:a0:e5:a4:e0:1d:c6:
10:5e:d1:36:84:d6:f4:07:43:a5:8a:36:bb:50:28:
e3:73:33:68:67:d3:5c:bf:a4:82:47:32:5f:26:07:
8b:9e:b1:c7:21:23:70:7a:6d:aa:5e:f5:ac:dd:5a:
1a:96:0f:c6:2c:2a:ce:30:9f:d0:d0:b8:07:43:13:
eb:18:70:1a:9e:cf:43:56:65:77:24:97:7b:e0:0b:
90:80:f1:70:45:b5:19:33:58:ca:1e:c9:3c:bf:03:
d4:78:6b:0d:91:cf:37:06:e7:3a:1e:33:fe:32:0e:
95:5f:03:3e:47:9d:51:7d:e9:3f:fb:6b:66:ef:b7:
0c:63:8f:5d:27:ba:50:0a:9f:bb:60:d6:d7:f2:24:
3e:dc:55:9f:b5:90:ff:b9:b5:fb:0d:1c:9f:8e:f5:
bf:f0:9f:8a:40:e0:cc:54:12:46:72:14:a5:34:c5:
74:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:42:02:B5:C5:F1:3D:53:DD:71:6F:69:83:F3:78:34:A5:A7:AD:10
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/02b28ee3-3109-3680-b083-8c9065ff6f4b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:4888:a603::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
13:c9:27:b5:5b:81:8b:d4:ce:08:69:ad:91:56:12:83:2a:b4:
a1:88:c5:5e:fa:cf:b4:4a:48:7c:c3:e0:e4:c8:98:f5:77:5f:
68:c0:c0:86:64:02:d6:12:7a:3f:16:70:8a:af:c1:84:0a:f2:
18:a2:b1:72:8e:20:b6:dd:11:9b:47:6c:ef:77:24:26:1e:e6:
19:a3:47:91:32:6d:63:db:47:8b:0c:79:8c:f7:72:25:49:5e:
35:71:6d:df:98:81:b8:17:1a:52:91:df:6e:86:61:90:53:bc:
58:03:2e:94:97:61:84:34:f1:11:eb:f2:1c:38:92:5c:c3:2d:
1d:ad:3f:bd:82:cc:df:bc:39:0e:83:5a:7a:2f:f3:b1:b1:59:
9e:8d:1c:0e:63:9a:0a:b4:db:14:ce:f5:e1:ef:05:2c:20:c8:
93:8f:80:24:c5:5e:01:0a:f3:25:0e:aa:60:25:24:5d:2d:3f:
b7:6d:7d:7d:b0:6a:2c:72:43:fa:f4:3c:a3:4e:c7:e7:10:3a:
88:f7:e5:46:ea:b5:f5:7a:e5:9c:9a:61:34:39:23:be:34:77:
c7:99:62:ad:26:c5:c7:df:83:27:f0:7f:4b:5a:f4:54:a8:af:
80:9a:98:b9:96:82:c9:ca:3b:b4:f7:58:29:41:04:c9:34:b8:
98:1a:58:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:05:21 2025 by rpki-client