Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7746dca1-2236-41ce-ab1a-952e06f4769c/c2da9bcc-494d-3e68-93b5-47a329f4d38f.roa
File: c2da9bcc-494d-3e68-93b5-47a329f4d38f.roa (raw, json)
Hash identifier: C5vBoypzEMTTXCykm4zCn5d1b5WOavv5q2iz0g1EsTI=
Subject key identifier: D9:32:2D:6E:D6:46:6A:BF:EA:13:9C:F1:76:32:EB:CF:80:73:0C:28
Certificate issuer: /CN=7746dca1-2236-41ce-ab1a-952e06f4769c
Certificate serial: 010D0C9F43285848B6261C10FDF4CB64480F2200
Authority key identifier: 0A:E6:84:83:00:60:D5:76:67:3F:01:3B:83:A3:7B:45:F1:C2:1B:FE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7746dca1-2236-41ce-ab1a-952e06f4769c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7746dca1-2236-41ce-ab1a-952e06f4769c/c2da9bcc-494d-3e68-93b5-47a329f4d38f.roa
Signing time: Thu 30 Jan 2025 02:00:40 +0000
ROA not before: Thu 30 Jan 2025 02:00:40 +0000
ROA not after: Wed 30 Apr 2025 01:00:40 +0000
asID: 16725
IP address blocks: 2602:fa68::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b6:26:1c:10:fd:f4:cb:64:48:0f:22:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7746dca1-2236-41ce-ab1a-952e06f4769c
Validity
Not Before: Jan 30 02:00:40 2025 GMT
Not After : Apr 30 01:00:40 2025 GMT
Subject: CN=78ba0cf8-102b-4cfb-aeca-abe8abeae4b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f4:17:1c:26:b4:95:3c:0a:12:41:45:ba:d0:
2b:61:32:2e:60:4f:90:b6:53:db:34:ce:0d:d2:64:
d5:51:d8:11:e0:9e:be:01:5a:94:8e:ea:8f:f3:14:
4c:2b:c5:c3:8a:da:ff:f8:8d:89:e1:86:c4:c8:4e:
fe:51:52:ce:69:d6:a3:38:bc:46:1a:af:28:b7:a8:
de:0f:4c:18:f4:e7:25:9d:c2:11:a5:0d:6b:b8:a3:
e1:a6:b5:ed:d2:ab:0e:3b:68:d1:11:ee:0a:0d:42:
00:b9:e4:ef:1d:26:ce:d1:73:85:ec:34:a9:d0:b2:
fb:40:a8:20:1a:a5:02:e8:cf:fa:07:8c:cc:14:4a:
b4:46:34:5c:0e:86:4a:f2:0b:aa:4a:3c:2e:1a:ee:
fb:7b:e1:bb:0e:2e:77:55:1e:79:6c:9f:34:56:40:
aa:86:69:66:8f:50:89:90:58:31:87:76:16:a6:e4:
ef:30:6c:22:83:87:bc:6b:09:71:19:d8:40:43:73:
7f:d1:0b:8c:a9:84:d9:28:ce:fc:5e:66:6c:f7:de:
e3:57:f6:9c:92:0c:37:88:3d:8f:a2:7d:8b:db:90:
cd:ae:28:81:8b:af:85:7e:34:da:b3:d5:e9:27:d9:
03:ed:90:d8:b4:78:0c:be:db:ff:1f:bb:31:42:30:
12:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:32:2D:6E:D6:46:6A:BF:EA:13:9C:F1:76:32:EB:CF:80:73:0C:28
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7746dca1-2236-41ce-ab1a-952e06f4769c/c2da9bcc-494d-3e68-93b5-47a329f4d38f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7746dca1-2236-41ce-ab1a-952e06f4769c/7746dca1-2236-41ce-ab1a-952e06f4769c.crl
X509v3 Authority Key Identifier:
keyid:0A:E6:84:83:00:60:D5:76:67:3F:01:3B:83:A3:7B:45:F1:C2:1B:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7746dca1-2236-41ce-ab1a-952e06f4769c.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:fa68::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
25:e7:20:f9:f7:f5:a0:89:80:1a:4d:86:47:dd:88:72:4c:d4:
96:d3:cf:93:24:4b:39:b8:9d:a7:82:23:00:e5:ac:63:71:70:
af:e7:dc:50:15:22:b5:5c:15:af:44:7d:1d:1b:b6:be:b8:3f:
9d:bb:27:86:04:eb:34:64:7b:9a:90:63:9d:f2:e1:aa:ca:48:
fd:3a:f7:d8:0d:22:a7:e9:f0:c3:9e:2e:37:8b:04:30:5e:59:
c7:65:b7:bf:33:41:84:b4:68:ac:a1:80:be:07:b9:8a:9f:b6:
b7:2f:f6:5d:87:c4:bb:6b:1d:f5:c9:ef:30:f4:95:45:fb:74:
a2:d8:fd:7f:ef:e6:f0:e9:3d:ad:78:63:53:dc:52:b0:2a:65:
c9:cb:97:c7:53:00:0e:80:b7:ae:46:c3:7d:30:db:4b:b7:3a:
94:79:07:f5:c2:26:76:45:d2:3d:49:36:d3:07:98:aa:fc:5a:
07:e6:b1:ce:88:e4:ff:ff:28:68:90:9b:65:44:27:ee:5a:00:
2c:ce:36:16:25:52:cc:41:02:9d:e3:76:d0:f2:6e:ab:1f:52:
25:53:0c:e4:95:87:85:67:45:c7:bf:ac:3d:9e:43:83:07:ce:
c7:16:16:44:da:00:20:3f:a0:a3:e9:4e:d8:2c:92:30:47:cf:
84:6e:88:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 10:10:46 2025 by rpki-client