Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/f5257e01-e887-3881-9b9a-10b1b96b1979.roa
File: f5257e01-e887-3881-9b9a-10b1b96b1979.roa (raw, json)
Hash identifier: JV5O1vECxb5poEMdheRxzW9/SiGH9QPElp6GVhDMV5k=
Subject key identifier: FF:9F:C1:93:E9:D4:18:BA:94:B1:FD:DB:D7:92:1D:A3:B9:B1:4A:CF
Certificate issuer: /CN=f7798abb-711d-4f10-bc46-bceed055e1fa
Certificate serial: 010D0C9F432858489AF79DBAD21D4B91E1FE1020
Authority key identifier: CC:90:3D:D7:AA:39:05:EC:E7:35:08:AC:CB:45:F4:6E:65:BC:1D:E1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/f5257e01-e887-3881-9b9a-10b1b96b1979.roa
Signing time: Mon 20 Jan 2025 08:20:17 +0000
ROA not before: Mon 20 Jan 2025 08:20:17 +0000
ROA not after: Sun 20 Apr 2025 07:20:17 +0000
asID: 22295
IP address blocks: 2602:fb54:1000::/36 maxlen: 39
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9a:f7:9d:ba:d2:1d:4b:91:e1:fe:10:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7798abb-711d-4f10-bc46-bceed055e1fa
Validity
Not Before: Jan 20 08:20:17 2025 GMT
Not After : Apr 20 07:20:17 2025 GMT
Subject: CN=4d49eeaf-1e6e-4950-9f9f-d2c0ffc00255
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:af:e2:72:da:b3:55:df:c9:6d:29:3f:91:71:
ed:b1:bc:61:4c:04:a9:9f:8f:6b:f6:cc:46:ff:4b:
be:ee:44:7f:0b:56:e7:74:dd:3a:33:1e:5c:cb:e9:
37:6a:39:46:47:c1:a6:d5:f4:a8:95:40:14:61:55:
5c:78:52:a1:ae:34:0d:71:2f:a3:fd:ae:b6:d4:a7:
3a:e9:b5:29:cf:54:b6:23:a8:47:ff:d5:67:05:f1:
9a:0e:5b:91:30:df:e3:0e:08:19:56:0a:36:82:0e:
87:bc:bf:c7:73:68:f7:f1:e9:bc:02:f2:a4:41:f9:
f6:c4:f8:24:ae:ea:8d:e5:4c:5b:f5:57:89:dd:f4:
cb:20:f7:fd:de:f4:9c:f3:79:53:9d:d4:db:12:ce:
42:2d:b0:3b:c8:63:1f:bc:9d:b3:04:1b:77:e2:0f:
4a:8c:e4:20:e2:ac:df:8b:01:c4:9f:49:75:73:da:
70:a1:3c:a1:5d:5c:8d:08:bc:4f:be:fc:93:29:a3:
ba:1d:fd:8f:f6:6e:33:1e:01:db:91:9e:f6:b3:a9:
e2:f9:d1:e9:cf:e0:ed:53:e5:94:32:f1:c8:f1:0a:
a3:8f:78:e6:3e:de:24:de:24:74:fc:33:74:9a:d8:
7d:ea:8d:f8:4f:e4:b4:34:89:44:02:bc:68:fb:e5:
c1:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:9F:C1:93:E9:D4:18:BA:94:B1:FD:DB:D7:92:1D:A3:B9:B1:4A:CF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/f5257e01-e887-3881-9b9a-10b1b96b1979.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/f7798abb-711d-4f10-bc46-bceed055e1fa.crl
X509v3 Authority Key Identifier:
keyid:CC:90:3D:D7:AA:39:05:EC:E7:35:08:AC:CB:45:F4:6E:65:BC:1D:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:fb54:1000::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
db:50:86:05:67:e0:ba:a6:ef:fe:a7:d6:b4:74:d5:19:6e:e7:
3c:48:a5:3d:7d:06:43:bd:7f:83:ec:35:2b:05:61:3e:58:f4:
50:b4:50:76:fb:40:30:2b:1a:78:35:24:59:cd:3a:12:72:a3:
52:36:57:85:ed:f0:a3:8e:12:a5:31:52:ca:8f:ca:59:b2:18:
a9:ad:ba:ac:dd:f1:3e:15:75:45:41:d8:aa:08:6e:e9:12:78:
fb:56:db:3f:cc:ae:b5:1e:d5:3c:c6:a9:41:da:54:ce:7f:35:
ec:48:92:37:52:46:ba:93:98:9f:87:be:2a:c2:c8:a9:4e:f2:
53:44:6d:97:38:fb:1f:d4:ed:d3:90:bc:7a:7a:94:1d:ba:a1:
0f:3b:41:7e:aa:2e:52:76:35:64:9c:d2:20:3f:91:43:b8:0f:
fd:fc:e1:03:77:2b:59:18:28:c9:1a:ab:94:b0:81:f3:6c:4f:
f9:c2:35:ac:94:a0:79:9c:88:a1:1d:a1:58:4a:46:55:7d:22:
5f:6d:c2:02:58:5b:91:57:44:cb:a6:b0:4a:a4:7a:44:82:d7:
e7:d4:92:d4:fa:c8:2c:4d:29:08:ea:3b:72:c1:b6:91:b7:c8:
5d:71:f6:f7:7a:20:67:53:87:fc:8b:94:1a:55:df:3e:aa:1a:
99:e8:40:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:54:19 2025 by rpki-client