Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/2269899c-82be-30a7-af5a-9936dbfc1a1d.roa
File: 2269899c-82be-30a7-af5a-9936dbfc1a1d.roa (raw, json)
Hash identifier: 9+WZVJl+G0bdmW7cX9NgKXalevgqCOgncKWwAuqyHoQ=
Subject key identifier: 2B:8C:18:4B:2E:29:12:AC:67:89:17:96:02:B3:CC:28:C7:D6:CE:3B
Certificate issuer: /CN=f7798abb-711d-4f10-bc46-bceed055e1fa
Certificate serial: 010D0C9F43285847EFEF7C73869212722FC26C00
Authority key identifier: CC:90:3D:D7:AA:39:05:EC:E7:35:08:AC:CB:45:F4:6E:65:BC:1D:E1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/2269899c-82be-30a7-af5a-9936dbfc1a1d.roa
Signing time: Wed 20 Nov 2024 02:00:39 +0000
ROA not before: Wed 20 Nov 2024 02:00:39 +0000
ROA not after: Tue 18 Feb 2025 02:00:39 +0000
asID: 20473
IP address blocks: 2602:fb54:220::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ef:ef:7c:73:86:92:12:72:2f:c2:6c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7798abb-711d-4f10-bc46-bceed055e1fa
Validity
Not Before: Nov 20 02:00:39 2024 GMT
Not After : Feb 18 02:00:39 2025 GMT
Subject: CN=f7318ae0-3287-4d3d-a057-91e04afd36bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:bf:98:eb:f3:d6:2c:33:05:b6:55:ae:6c:e8:
7d:21:ba:80:9d:0d:37:29:34:45:25:f8:e0:60:b0:
d0:25:8c:2b:75:fd:f2:90:cd:52:a5:ac:6a:d2:44:
99:df:5e:af:91:02:01:95:ef:74:0a:cd:71:5e:ef:
c7:dd:47:d8:02:81:05:a6:6b:86:24:ec:b2:0f:a9:
69:f5:c2:89:d5:ff:fb:f9:ae:a7:13:56:41:49:df:
14:1f:0b:e4:56:a4:27:d0:53:ce:a3:43:85:05:ac:
7e:bf:c7:53:95:67:f9:03:87:27:03:53:01:6b:12:
2b:a9:06:e1:4c:fa:06:ef:63:4f:e1:ce:60:64:e6:
56:a0:c2:2c:27:1e:1b:41:22:f5:fe:ff:37:5f:79:
40:74:d7:90:53:db:c4:0c:08:ac:70:6d:b9:72:2a:
38:e8:9c:36:4e:4c:bb:fe:c9:ed:27:21:2f:25:88:
3f:ae:e7:40:2b:af:22:7b:43:e9:0d:4f:30:fb:14:
23:1e:e1:bf:c9:3d:6d:ee:8a:da:11:e2:20:dc:ae:
55:d3:d9:f3:f9:11:20:ab:63:ab:3f:ab:69:4f:3f:
a3:e8:e6:e9:2d:a1:33:02:c4:56:f4:82:88:d7:4f:
5e:0e:e8:d6:bd:79:b5:34:b5:47:3a:5e:10:f4:3b:
c2:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:8C:18:4B:2E:29:12:AC:67:89:17:96:02:B3:CC:28:C7:D6:CE:3B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/2269899c-82be-30a7-af5a-9936dbfc1a1d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/f7798abb-711d-4f10-bc46-bceed055e1fa.crl
X509v3 Authority Key Identifier:
keyid:CC:90:3D:D7:AA:39:05:EC:E7:35:08:AC:CB:45:F4:6E:65:BC:1D:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:fb54:220::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
63:b0:47:43:92:40:a5:47:a4:c7:99:7b:9b:7d:cb:b8:71:20:
0c:80:62:88:ed:cd:f2:ec:d6:9e:28:d0:f0:f5:86:b6:47:d0:
b2:a8:45:6f:8f:06:d9:20:0d:f4:5f:6e:ad:5a:d7:23:3d:37:
b8:5d:b7:e0:f3:8d:07:3b:11:04:b0:af:42:cb:ed:f1:df:90:
bf:67:e5:4d:14:32:89:8a:90:03:67:8b:e4:c1:c6:8e:7a:50:
fa:de:d6:a3:5e:0b:26:25:85:06:4a:e3:4e:2b:44:35:1a:4a:
49:51:65:c9:a7:91:36:f5:4b:11:10:bc:27:59:96:7f:e6:62:
96:ad:9b:f0:3e:b3:13:04:88:e0:49:3a:cf:63:b0:09:87:dc:
7b:fc:ad:25:ba:71:de:4f:29:8e:30:ba:84:be:56:64:d5:c6:
60:e7:be:bd:ae:89:08:7e:13:26:60:f7:24:3e:62:7a:eb:d9:
b6:d2:f0:57:91:0e:82:97:ed:70:71:84:09:12:51:e1:4f:a7:
fd:93:3c:1b:ed:f0:7f:57:e8:1e:27:d6:52:fc:5e:01:97:c1:
28:0c:92:20:22:60:d9:10:54:c6:9d:26:75:f0:15:81:ff:a9:
0e:f6:7e:77:f4:30:3f:1a:55:9a:d5:e5:1c:d5:9c:2c:e7:56:
e0:50:a5:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 16:21:01 2025 by rpki-client