Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/dfa13ca2-8a87-3b38-9706-132ae3f66301.roa
File: dfa13ca2-8a87-3b38-9706-132ae3f66301.roa (raw, json)
Hash identifier: u/PO4lXMyVqu05nHLrhg5a61PRrHk0kaC0iKe2S/t5I=
Subject key identifier: 85:3F:D9:9F:F5:D9:E6:7E:7E:E5:81:56:48:EB:37:2C:AE:5B:F1:B1
Certificate issuer: /CN=36ee0355-1d23-4ead-8858-b26a81c6add0
Certificate serial: 010D0C9F432858483A23BFB27AB2EC8D55B08070
Authority key identifier: A3:BB:BA:23:A0:43:B3:7B:2C:CA:AF:E0:AA:44:10:AB:11:93:70:95
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/dfa13ca2-8a87-3b38-9706-132ae3f66301.roa
Signing time: Mon 16 Dec 2024 15:55:48 +0000
ROA not before: Mon 16 Dec 2024 15:55:48 +0000
ROA not after: Sun 16 Mar 2025 14:55:48 +0000
asID: 3423
IP address blocks: 2602:fbdc:89::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:3a:23:bf:b2:7a:b2:ec:8d:55:b0:80:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36ee0355-1d23-4ead-8858-b26a81c6add0
Validity
Not Before: Dec 16 15:55:48 2024 GMT
Not After : Mar 16 14:55:48 2025 GMT
Subject: CN=a0842f98-00d3-4cd1-8eb6-bc8e1bf5f823
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:c4:6f:ef:6b:0d:d2:c7:a8:e4:01:2a:51:7a:
9c:80:41:3e:1f:57:cd:3c:8a:14:ef:d9:6d:5a:46:
ec:af:57:8a:7c:dc:63:28:c8:bb:ce:52:ef:86:d5:
31:34:c2:63:eb:f8:9a:5b:da:30:bb:7e:af:e0:bd:
ba:4e:52:2f:86:d5:43:c3:46:25:a3:9f:a1:fd:81:
6a:2e:db:8f:79:32:f9:d1:64:07:5d:10:41:48:34:
61:a0:8d:b8:01:99:e4:7b:db:cd:f2:33:59:43:0d:
69:fd:87:80:b6:75:10:01:8c:12:e7:d2:ed:cd:e0:
93:f0:5d:a6:46:81:ec:24:54:53:0c:21:56:de:70:
03:f0:c1:32:aa:fa:72:7c:81:9c:ca:ac:01:c6:08:
10:e8:35:ff:dd:f8:6d:c3:5f:f7:98:8e:99:52:2b:
e0:f4:92:55:66:eb:76:90:e7:ea:6d:a2:b9:fe:93:
98:22:20:1a:d1:c3:ae:b0:92:48:92:4d:93:03:94:
fd:da:88:56:56:d5:01:11:5d:45:7f:98:e1:83:df:
a1:91:71:40:95:0e:fd:e0:d6:12:1d:9d:f5:36:1d:
f0:70:af:0b:e3:e8:f5:5d:65:d6:9e:2d:ec:ff:da:
72:75:bc:d5:58:d6:bc:61:2f:f9:30:d4:44:6c:d7:
6c:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:3F:D9:9F:F5:D9:E6:7E:7E:E5:81:56:48:EB:37:2C:AE:5B:F1:B1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/dfa13ca2-8a87-3b38-9706-132ae3f66301.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/36ee0355-1d23-4ead-8858-b26a81c6add0.crl
X509v3 Authority Key Identifier:
keyid:A3:BB:BA:23:A0:43:B3:7B:2C:CA:AF:E0:AA:44:10:AB:11:93:70:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:fbdc:89::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
77:d9:7d:3a:ab:d1:ca:64:fb:8d:1b:99:a2:9b:fc:b1:36:15:
73:e2:64:7e:e4:d6:a1:15:7d:04:7b:51:df:c7:4a:92:d2:93:
3f:e0:d0:9b:d7:5a:b4:81:93:75:37:cd:f3:0c:87:78:17:cc:
69:73:e4:8f:48:ea:34:79:62:de:5d:42:d8:8b:38:f7:d5:0b:
b4:89:90:a2:81:e5:ca:19:05:b5:8f:b5:cb:bd:85:18:74:43:
60:1f:eb:2f:92:bb:9a:d7:de:f2:f7:d0:e2:24:88:16:c5:e5:
0e:53:1c:23:fc:b0:c3:0f:79:da:2f:e9:1e:f0:52:f9:d6:27:
1b:5e:57:ae:4a:c4:b2:0e:f4:4c:5b:f0:23:ab:c6:a9:c9:24:
fd:bf:ab:5a:6b:18:b8:38:96:4d:ce:1c:8b:f0:be:8f:e6:03:
a4:a5:22:b4:dc:76:ab:56:45:b7:60:70:60:91:f8:10:6e:a0:
cf:19:2d:0d:38:3d:e0:4c:12:0e:eb:0e:38:92:94:d5:74:d0:
76:05:e0:b9:fe:a4:72:26:a2:a5:13:d4:df:c7:38:fc:cf:5c:
2a:10:e8:03:d6:1b:11:c5:d0:2d:13:9d:43:6c:ae:05:f4:9f:
a8:ac:dc:38:31:34:9d:1e:3e:a0:14:cc:71:6c:e6:df:e6:42:
60:9c:36:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:11:23 2025 by rpki-client