Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/57f9cfef-e787-4c93-b24d-29ad31dc2128/2f87e556-cd20-3582-a238-c3d71f78eb10.roa
File: 2f87e556-cd20-3582-a238-c3d71f78eb10.roa (raw, json)
Hash identifier: AorqSQjMejz0s5zeVQVFcAubGBGXPFy7aU5vjYZQ3nE=
Subject key identifier: 0A:44:BA:93:8B:26:86:A7:1F:A4:9B:4E:62:31:65:5B:4F:9D:FC:C3
Certificate issuer: /CN=57f9cfef-e787-4c93-b24d-29ad31dc2128
Certificate serial: 010D0C9F432858487B85B4BC21E5E31C6AD1DB80
Authority key identifier: D4:96:EB:8D:A7:B5:A3:A3:C4:E5:BB:A4:2C:E8:2E:57:2D:DD:85:A1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/57f9cfef-e787-4c93-b24d-29ad31dc2128.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/57f9cfef-e787-4c93-b24d-29ad31dc2128/2f87e556-cd20-3582-a238-c3d71f78eb10.roa
Signing time: Thu 09 Jan 2025 02:00:40 +0000
ROA not before: Thu 09 Jan 2025 02:00:40 +0000
ROA not after: Wed 09 Apr 2025 01:00:40 +0000
asID: 398291
IP address blocks: 2602:fb10:5f::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7b:85:b4:bc:21:e5:e3:1c:6a:d1:db:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57f9cfef-e787-4c93-b24d-29ad31dc2128
Validity
Not Before: Jan 9 02:00:40 2025 GMT
Not After : Apr 9 01:00:40 2025 GMT
Subject: CN=3e0943d0-702d-4ee2-9c30-7809bbf96a6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:0e:da:bb:b0:2a:48:11:21:47:11:cf:43:1a:
1f:29:b5:de:26:4c:01:32:18:ad:79:66:45:e4:59:
ec:7f:b6:47:86:c0:31:c9:7a:43:a3:d1:65:ce:2d:
6b:5c:47:ff:65:6a:c8:fc:23:5f:06:8c:72:bc:d3:
26:ba:0a:a2:e9:65:7d:d7:b9:e4:7d:04:8a:a3:32:
fd:88:e1:27:76:95:d3:d0:cf:83:8b:77:68:76:31:
07:7f:9c:ac:57:de:b2:45:d1:64:4d:2e:09:e0:57:
7e:eb:d9:e7:0b:4e:d7:cb:13:32:4b:c2:ed:8f:66:
53:ed:5b:00:e9:a2:e3:f3:22:df:45:23:ba:fa:7c:
52:5b:aa:03:5b:73:15:46:2f:98:ed:42:4f:aa:89:
19:6a:c2:f8:ac:b8:a6:e8:a1:f6:d7:b3:11:f4:e1:
d8:5c:7a:77:0c:61:89:9d:e0:1d:89:39:28:21:c5:
56:0b:a2:ea:19:3c:ad:a8:77:7c:9e:9c:46:90:10:
41:1a:b0:79:fe:76:e4:bb:40:a0:f2:92:2d:9c:eb:
df:fd:76:d9:eb:4e:d8:3a:c1:33:35:8e:9f:27:70:
d0:9f:3f:fa:57:ff:3a:3e:f7:a6:4a:0f:84:f3:2b:
9a:73:8e:aa:1c:d9:d6:4c:63:7e:12:19:5e:ff:d2:
75:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:44:BA:93:8B:26:86:A7:1F:A4:9B:4E:62:31:65:5B:4F:9D:FC:C3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/57f9cfef-e787-4c93-b24d-29ad31dc2128/2f87e556-cd20-3582-a238-c3d71f78eb10.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/57f9cfef-e787-4c93-b24d-29ad31dc2128/57f9cfef-e787-4c93-b24d-29ad31dc2128.crl
X509v3 Authority Key Identifier:
keyid:D4:96:EB:8D:A7:B5:A3:A3:C4:E5:BB:A4:2C:E8:2E:57:2D:DD:85:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/57f9cfef-e787-4c93-b24d-29ad31dc2128.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:fb10:5f::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8f:91:9e:cc:88:24:17:fb:7d:38:6a:27:e4:9e:2a:cb:48:ce:
46:5d:a3:4e:7d:f4:12:8d:53:d6:dd:15:f9:87:d4:41:67:d0:
34:5d:16:15:6b:98:63:55:33:c8:6e:9c:a0:2f:c6:6e:ef:56:
28:19:a6:a4:9b:20:b6:7f:2e:6e:b6:33:e5:a6:a6:02:b4:26:
90:70:1d:78:90:e2:01:f8:5f:73:48:e6:6b:95:af:7d:f2:a5:
43:9b:47:a1:68:8b:c4:e5:c6:5b:5c:fc:65:02:8d:22:da:8e:
ac:3e:6d:62:08:b7:fd:b6:98:6d:85:08:5c:8a:99:a0:7a:15:
60:8a:be:ff:78:a0:1b:85:e8:53:b5:52:f4:74:a0:11:21:3f:
57:39:d8:8d:1e:d7:87:20:dd:46:b4:49:81:96:45:d1:42:89:
05:7d:9e:e7:ec:1d:12:60:08:b6:60:a3:7a:4d:ff:25:f7:7f:
3b:60:ea:25:59:45:ba:b2:13:d9:48:fa:dd:91:89:2e:e9:79:
42:61:f3:59:a0:ef:a9:bd:79:5d:08:95:54:ce:7b:fc:3f:30:
df:e3:a3:b9:50:f4:82:1a:a5:11:c7:90:ae:a7:5c:99:3b:99:
97:d4:cb:d8:7e:94:b8:4b:32:13:1b:71:2e:35:5c:5b:af:c0:
77:0b:5f:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:01:58 2025 by rpki-client