Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f8838580-1598-45e5-8353-b551ae78b110/c2aea0a5-d30c-3f98-baa0-892a8a6b9c70.roa
File: c2aea0a5-d30c-3f98-baa0-892a8a6b9c70.roa (raw, json)
Hash identifier: awd4/pMRs/zKNk+uEsp8QNKce0x5ivtjjd5QvTkXnDY=
Subject key identifier: DD:0E:95:FA:AC:AB:BE:9F:FC:BA:5F:4E:26:B1:5B:A0:1F:9E:B5:5E
Certificate issuer: /CN=f8838580-1598-45e5-8353-b551ae78b110
Certificate serial: 010D0C9F4328584819CFCC311359EC531F655A00
Authority key identifier: DE:86:FB:F2:FD:F0:F5:78:BE:83:FB:65:0F:14:BB:E7:FE:75:7C:D4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f8838580-1598-45e5-8353-b551ae78b110.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f8838580-1598-45e5-8353-b551ae78b110/c2aea0a5-d30c-3f98-baa0-892a8a6b9c70.roa
Signing time: Thu 05 Dec 2024 02:00:39 +0000
ROA not before: Thu 05 Dec 2024 02:00:39 +0000
ROA not after: Wed 05 Mar 2025 02:00:39 +0000
asID: 63350
IP address blocks: 2602:808:a000::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:19:cf:cc:31:13:59:ec:53:1f:65:5a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8838580-1598-45e5-8353-b551ae78b110
Validity
Not Before: Dec 5 02:00:39 2024 GMT
Not After : Mar 5 02:00:39 2025 GMT
Subject: CN=afd7d5d1-b9e5-40d0-bc75-e4ce31f738c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ef:84:02:3a:f7:31:cd:82:64:5f:dd:9b:d6:
69:5a:cd:6d:bf:ba:ec:1e:10:c0:f0:cb:07:b4:8a:
9a:89:19:fa:85:46:6d:23:ee:00:43:43:6f:ce:8c:
30:7b:dc:98:b1:3d:19:51:86:d8:3c:de:f2:92:a4:
fc:81:bf:ed:02:93:84:dd:d1:53:93:67:94:b6:1b:
16:bb:44:89:7f:e3:52:f1:92:b6:86:a7:f8:91:70:
5a:1d:12:50:f6:af:40:d2:fc:d7:50:ea:d7:91:7a:
82:63:f8:81:74:98:c3:4b:41:7c:e2:9c:6a:63:d8:
5c:0d:60:f2:f9:6d:65:f7:bb:7f:92:d1:2e:55:28:
91:4e:aa:c8:04:16:b8:c0:b6:14:4a:a6:05:52:25:
1d:94:e1:24:4b:5b:a9:8e:e0:ed:7c:9c:a5:6b:68:
bc:71:b1:ec:ef:14:4b:35:78:de:67:20:e6:bb:d6:
53:d8:2f:23:74:33:57:5a:91:d8:b0:3c:a0:a9:a3:
63:1b:01:b5:0b:1d:fe:21:d1:08:d3:17:b3:63:f3:
9f:41:a2:94:89:5c:6a:3e:11:28:63:e6:6e:15:5e:
55:16:77:a1:f2:81:af:65:da:dc:a6:c6:59:20:1c:
37:0e:0f:b1:36:cd:65:a3:6f:e1:14:67:9c:a1:f0:
95:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:0E:95:FA:AC:AB:BE:9F:FC:BA:5F:4E:26:B1:5B:A0:1F:9E:B5:5E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f8838580-1598-45e5-8353-b551ae78b110/c2aea0a5-d30c-3f98-baa0-892a8a6b9c70.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f8838580-1598-45e5-8353-b551ae78b110/f8838580-1598-45e5-8353-b551ae78b110.crl
X509v3 Authority Key Identifier:
keyid:DE:86:FB:F2:FD:F0:F5:78:BE:83:FB:65:0F:14:BB:E7:FE:75:7C:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f8838580-1598-45e5-8353-b551ae78b110.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:808:a000::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2f:e6:b4:03:75:4d:15:7a:6f:f7:d5:68:e0:e2:09:c7:eb:ff:
08:67:81:bf:85:7f:d0:3a:26:dc:b1:ba:c4:b5:3e:d5:59:1c:
5d:2e:07:33:7d:fa:30:a7:61:94:7e:21:d4:15:51:42:cb:36:
7f:c8:e4:77:0c:c4:c7:49:8e:1f:16:54:36:b7:a6:c2:b0:53:
09:2d:d3:11:28:a9:1b:4c:f2:58:81:b3:64:3e:f0:fe:18:15:
34:5c:a5:d8:6b:5d:a2:f0:32:d6:25:76:ce:4f:24:04:ad:1f:
3b:a2:57:dd:bb:51:c3:5d:fc:19:34:73:3e:9c:b1:dc:91:76:
5d:bb:15:3b:57:10:16:9b:bb:b5:87:2f:48:4e:9f:91:56:0f:
54:5b:14:20:3d:2e:c2:e4:a6:14:42:38:78:c1:ec:66:f7:31:
21:b7:f3:5f:9f:b5:75:71:16:a4:f3:1d:19:8c:f9:76:a9:fe:
5a:22:30:a0:ac:92:2b:11:a2:23:19:11:d1:06:e1:37:90:9c:
d6:50:67:07:88:50:2e:c0:42:f5:25:60:f4:fa:d3:14:8c:e8:
96:83:7f:bf:e7:0f:66:f8:58:10:49:69:4f:a3:95:7d:17:07:
88:22:00:73:80:ca:3d:76:0c:91:08:d2:39:7b:d3:4d:d9:6f:
c9:0b:a5:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 11:31:57 2025 by rpki-client