Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0ae79a05-4455-41de-a4a5-312c5d617c94/7c21021d-b3c6-3128-89cf-35ee6d572d09.roa
File: 7c21021d-b3c6-3128-89cf-35ee6d572d09.roa (raw, json)
Hash identifier: nxVHLRS+s2M1O8Vf/yegUaEVd2lz5YdsbzUW2iYCC88=
Subject key identifier: 2B:E0:3A:AB:2A:00:EC:45:B0:BE:7F:81:AC:8B:C2:1D:35:02:57:E4
Certificate issuer: /CN=0ae79a05-4455-41de-a4a5-312c5d617c94
Certificate serial: 010D0C9F4328584827C54DFD8095C7A2FB2EAAC0
Authority key identifier: 7D:08:94:80:BC:CF:85:CB:69:22:7A:85:48:0B:DC:1E:E9:C9:D9:2C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0ae79a05-4455-41de-a4a5-312c5d617c94.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0ae79a05-4455-41de-a4a5-312c5d617c94/7c21021d-b3c6-3128-89cf-35ee6d572d09.roa
Signing time: Tue 10 Dec 2024 02:00:40 +0000
ROA not before: Tue 10 Dec 2024 02:00:40 +0000
ROA not after: Mon 10 Mar 2025 01:00:40 +0000
asID: 400918
IP address blocks: 2602:f999::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:27:c5:4d:fd:80:95:c7:a2:fb:2e:aa:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ae79a05-4455-41de-a4a5-312c5d617c94
Validity
Not Before: Dec 10 02:00:40 2024 GMT
Not After : Mar 10 01:00:40 2025 GMT
Subject: CN=8ad7a5db-aa6c-45ee-aaee-b30bb0659b03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:b3:af:5b:f1:bf:6b:39:b2:49:eb:f4:23:f0:
7a:18:bb:13:d2:aa:2e:74:0d:09:9d:28:5c:e9:83:
af:c5:26:76:32:39:79:04:ce:4d:22:7c:60:c0:ba:
a7:7f:b9:15:02:5d:ff:5c:19:27:07:eb:0f:18:81:
00:b2:90:46:35:77:8c:2c:0e:43:ee:a7:19:33:54:
56:25:c8:96:5b:ec:e9:fd:0b:ec:32:02:4d:1a:39:
be:e7:18:c1:92:9b:b5:2c:2f:6a:95:fa:1c:6f:4d:
7c:67:60:82:83:4e:40:71:5a:a7:ba:fc:f0:73:72:
85:f6:aa:fa:66:09:f8:89:88:16:51:c3:7b:4b:bb:
18:f1:f3:21:ed:00:93:84:52:d6:70:78:50:89:64:
00:96:9a:72:af:fd:ae:f0:c8:27:fe:ec:27:58:0e:
0f:c4:e0:08:37:58:d6:9a:c9:d7:fb:9f:dc:c1:d8:
04:e7:73:35:13:4f:3f:66:d9:93:5c:68:f9:3e:41:
cb:87:83:65:92:8c:14:90:c7:06:6e:7f:48:8b:87:
77:d7:d7:fa:f9:40:c3:c8:57:84:e6:24:b2:c0:3f:
08:54:77:2e:d6:9c:74:18:72:b6:83:3a:c1:7f:02:
a1:ab:59:3a:69:09:14:a4:5b:e4:50:1a:5c:82:3f:
42:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:E0:3A:AB:2A:00:EC:45:B0:BE:7F:81:AC:8B:C2:1D:35:02:57:E4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0ae79a05-4455-41de-a4a5-312c5d617c94/7c21021d-b3c6-3128-89cf-35ee6d572d09.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0ae79a05-4455-41de-a4a5-312c5d617c94/0ae79a05-4455-41de-a4a5-312c5d617c94.crl
X509v3 Authority Key Identifier:
keyid:7D:08:94:80:BC:CF:85:CB:69:22:7A:85:48:0B:DC:1E:E9:C9:D9:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0ae79a05-4455-41de-a4a5-312c5d617c94.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:f999::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
95:b2:61:4d:cf:72:69:27:1b:71:6b:3c:76:d0:8f:a1:c0:e6:
3c:94:e5:92:bd:60:0c:42:a9:ff:8c:a1:ae:e3:a0:d0:db:de:
da:d4:c5:86:aa:56:45:20:62:63:fc:95:81:7b:8f:e8:2d:d9:
25:70:e5:76:5f:8a:3b:ab:2e:77:62:c8:50:5d:67:cb:2f:4d:
15:30:9f:13:c6:50:9a:ad:50:7f:47:6f:90:bf:14:c7:e0:41:
d0:f3:46:80:1c:13:13:32:c8:93:8e:23:f9:34:28:b2:b9:28:
c0:0e:3c:bc:e4:62:9e:4e:a9:30:a9:11:76:c0:30:c1:6f:d4:
65:02:21:0a:35:23:2d:6a:1d:f9:4f:e2:8c:32:cc:fd:d5:cd:
5c:39:4c:9b:f8:6b:09:63:59:45:8d:83:fc:d8:10:55:f7:b1:
b6:7b:02:1b:b8:d1:8c:36:4d:fc:85:59:0e:3e:c6:4c:e3:7d:
4e:bb:98:3a:6e:e9:9d:32:0f:de:51:21:de:95:65:f3:75:b9:
a5:9f:09:9c:02:dd:1d:dc:a6:53:e4:74:0a:ce:ae:0c:40:98:
3d:31:90:48:04:e9:fc:9a:4e:b5:16:ca:b3:c9:f6:f1:fe:97:
24:b3:e4:53:1c:2f:1c:f6:93:be:12:7d:91:16:53:4d:55:37:
b2:c7:6f:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 06:00:17 2025 by rpki-client