Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/e2ece0bd-96db-3f31-969b-d90af59c4720.roa
File: e2ece0bd-96db-3f31-969b-d90af59c4720.roa (raw, json)
Hash identifier: X55V7qPsmY26L/3swSM/6cFK6EMYBXc3DkYIDRqBWuw=
Subject key identifier: 61:0D:26:F0:0E:33:48:31:0D:9C:B6:14:14:3F:65:A1:34:2C:8D:42
Certificate issuer: /CN=78a3d836-1df8-4303-a944-17cd53d7d04e
Certificate serial: 010D0C9F432858484AAADF1FAA59CB1E12AB5DC0
Authority key identifier: 89:D0:13:AC:DA:15:84:B6:C4:A7:42:B5:71:32:1D:0F:5D:0E:A2:D2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/e2ece0bd-96db-3f31-969b-d90af59c4720.roa
Signing time: Sun 22 Dec 2024 14:00:51 +0000
ROA not before: Sun 22 Dec 2024 14:00:51 +0000
ROA not after: Sat 22 Mar 2025 13:00:51 +0000
asID: 3477
IP address blocks: 2601:a000::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4a:aa:df:1f:aa:59:cb:1e:12:ab:5d:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78a3d836-1df8-4303-a944-17cd53d7d04e
Validity
Not Before: Dec 22 14:00:51 2024 GMT
Not After : Mar 22 13:00:51 2025 GMT
Subject: CN=c537c118-02b1-46f2-ba16-16d39ff489a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:fa:65:cd:29:83:f2:44:43:b4:26:1c:c0:0a:
58:19:11:43:17:15:3a:bb:fe:ec:a5:57:c8:0b:56:
cf:8b:85:f6:21:24:96:ad:de:94:cc:0c:5f:5d:0d:
1c:8a:c9:dd:e5:d2:de:44:57:c1:06:5f:42:45:68:
f3:e6:6c:75:08:c9:8e:fa:e8:36:82:e1:e3:e9:f4:
7c:21:dd:f2:37:ac:5f:7b:6b:91:ee:4b:8e:dd:3d:
69:ee:53:e3:7a:a4:0c:e1:ad:26:17:c4:8c:a6:01:
d2:11:9f:d3:dc:a6:41:13:25:75:18:ca:89:91:db:
5f:66:48:50:a6:a3:75:6e:aa:ca:74:67:6f:65:97:
75:ed:ff:54:3a:5d:18:ac:b3:3a:ad:c7:b6:39:b2:
41:e8:73:ad:e1:73:b2:75:37:54:82:07:e3:6f:72:
37:fa:1c:43:f1:bf:21:4f:b4:bd:b9:f6:6a:e6:82:
d0:51:b3:6d:3e:73:41:39:83:44:c1:9d:66:32:72:
b0:49:d5:36:74:d0:2f:45:d7:4e:86:33:f8:32:9e:
1a:6c:0a:42:8a:a4:b5:50:5e:94:9a:10:8a:71:5b:
df:28:d7:30:e8:ca:a6:09:3a:64:19:9d:b5:da:b2:
1c:cc:13:a7:d6:8a:0d:b1:31:e4:12:aa:ae:42:ee:
37:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:0D:26:F0:0E:33:48:31:0D:9C:B6:14:14:3F:65:A1:34:2C:8D:42
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/e2ece0bd-96db-3f31-969b-d90af59c4720.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.crl
X509v3 Authority Key Identifier:
keyid:89:D0:13:AC:DA:15:84:B6:C4:A7:42:B5:71:32:1D:0F:5D:0E:A2:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer
sbgp-ipAddrBlock: critical
IPv6:
2601:a000::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
71:29:e7:c4:33:ec:35:31:fc:1c:b1:b3:9a:60:61:59:6e:f3:
1d:1d:ca:2b:6d:c6:bb:78:21:dc:6d:b7:e4:fe:0f:07:0f:67:
b2:31:b4:fe:da:4c:be:81:61:77:6f:42:88:06:33:86:99:07:
8e:48:e4:b6:c7:85:73:9b:02:9e:4e:17:00:d9:4d:72:d6:97:
34:25:45:4d:15:47:47:e7:d8:dc:46:a1:c7:13:09:18:e7:37:
07:5f:11:5a:b8:bc:74:c1:cf:83:92:1d:10:ff:79:a7:dc:21:
f9:5d:0a:11:04:8a:27:8e:d4:51:64:8b:25:da:bb:7e:e8:f8:
7f:b8:60:27:cb:57:28:ab:28:e9:b4:e5:3c:54:fd:01:dc:17:
2c:05:5f:c4:98:91:84:3f:2a:a4:bc:98:cf:5f:0e:25:d8:8a:
87:06:96:24:a3:13:a5:b3:42:5d:eb:f9:99:3a:84:10:07:b3:
ec:3a:6c:15:26:71:86:3f:6c:b1:5d:cf:af:e3:65:6d:60:ce:
c6:12:99:ba:87:03:ef:60:03:b8:b7:46:27:ce:2a:37:2b:bd:
b0:15:00:75:89:15:ed:c4:15:ad:f3:c2:ef:09:ba:dd:3c:d0:
29:8f:51:d0:8c:74:b9:14:57:fd:56:e3:4d:4a:0c:43:59:ea:
35:de:5e:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:01:16 2025 by rpki-client