Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/d3fdf038-8080-3b68-81db-64b2a8da1cbb.roa
File: d3fdf038-8080-3b68-81db-64b2a8da1cbb.roa (raw, json)
Hash identifier: y762MZxBp81CTqmqBTe8J3TtcGzVpZwUeVRDmSbapBA=
Subject key identifier: A5:35:61:81:7B:64:F3:B8:B3:20:D9:7F:56:85:D2:BD:80:06:6C:E2
Certificate issuer: /CN=73c8aa7b-fac7-4435-95df-f01200da47d9
Certificate serial: 010D0C9F43285848653037FBE9A94233C5FC2300
Authority key identifier: E3:BF:70:21:DC:44:59:AF:5C:63:F9:78:44:66:37:C6:0A:5D:B3:1C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/d3fdf038-8080-3b68-81db-64b2a8da1cbb.roa
Signing time: Wed 01 Jan 2025 02:00:40 +0000
ROA not before: Wed 01 Jan 2025 02:00:40 +0000
ROA not after: Tue 01 Apr 2025 01:00:40 +0000
asID: 16509
IP address blocks: 2602:f98b:10::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:65:30:37:fb:e9:a9:42:33:c5:fc:23:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73c8aa7b-fac7-4435-95df-f01200da47d9
Validity
Not Before: Jan 1 02:00:40 2025 GMT
Not After : Apr 1 01:00:40 2025 GMT
Subject: CN=9109b61f-c347-454a-a1cc-85951154bd95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:7d:02:00:bb:c4:bb:44:51:cb:ad:03:b3:8b:
1d:bd:9b:45:f5:2b:dc:69:0b:7f:6d:bf:44:82:51:
88:54:16:b5:21:53:31:2a:34:69:da:91:f7:2d:d7:
20:84:d4:36:10:be:f6:08:9c:58:e3:9f:d3:01:3a:
d5:d0:1a:62:cf:62:3a:5c:56:f6:82:5b:a7:22:27:
3e:cb:25:6f:41:1e:0b:fe:3e:41:f6:74:c0:07:00:
9d:d7:9b:a2:71:36:ac:ab:42:4a:f9:54:20:bf:d8:
8d:d2:35:18:14:e5:71:11:e4:13:c4:47:e5:66:93:
1e:2e:49:40:35:18:41:38:76:64:84:7a:80:9d:b6:
21:10:01:43:e4:e8:af:40:fa:a8:03:21:0c:d8:68:
7d:b0:3d:d5:18:97:47:81:cc:35:fb:6e:f7:69:72:
35:6f:a4:0e:38:fd:fa:2f:b5:ad:0d:6a:e4:c4:bc:
fe:87:af:ab:37:6f:38:67:55:3d:84:ce:48:1e:65:
82:50:e0:c2:4d:5d:53:9a:2e:f7:f9:cf:84:0a:f4:
27:81:83:7e:4d:86:e3:be:c0:f1:5e:9a:48:58:38:
2c:93:e3:af:88:28:50:77:30:7a:90:79:51:51:4f:
5f:2f:28:74:00:6d:6f:31:a2:35:c4:2d:23:36:6a:
6e:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:35:61:81:7B:64:F3:B8:B3:20:D9:7F:56:85:D2:BD:80:06:6C:E2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/d3fdf038-8080-3b68-81db-64b2a8da1cbb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/73c8aa7b-fac7-4435-95df-f01200da47d9.crl
X509v3 Authority Key Identifier:
keyid:E3:BF:70:21:DC:44:59:AF:5C:63:F9:78:44:66:37:C6:0A:5D:B3:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:f98b:10::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2a:d3:00:04:db:92:e9:72:f3:1f:b5:0f:45:c3:75:11:75:4a:
f4:80:5a:96:f2:4f:5a:28:b2:ba:74:f6:ca:26:35:bd:b5:53:
e4:bc:a4:0f:9d:b0:c5:51:5b:5b:c8:ff:17:f2:b3:b1:50:02:
c3:a7:d5:29:3d:4a:e6:00:e0:19:74:c5:50:4c:0f:c6:2a:02:
30:a7:25:3a:a8:a0:a6:31:bf:40:4b:c1:56:89:50:9f:7e:2e:
f4:f0:a8:4c:e7:2b:f6:10:cb:34:9e:a9:c3:d1:30:3e:f8:77:
2a:49:c4:23:7c:d2:74:59:d8:9e:8f:e1:df:c3:8b:66:6e:05:
ff:91:90:14:66:84:08:02:25:1e:87:67:9b:24:d5:bf:f1:77:
d6:db:a7:2c:ba:e8:c2:ba:5d:d7:09:50:87:67:7b:a5:39:a4:
ae:e2:be:e5:be:4f:22:33:81:3f:f8:ae:e1:cb:24:c7:6a:4a:
df:fb:45:76:98:b8:e2:54:28:8c:58:29:ae:40:b5:01:3f:33:
e3:38:17:1d:bf:71:d9:5b:49:48:ed:6e:d5:0f:34:8e:26:9b:
6b:f5:36:3b:45:1c:ad:3a:a2:1c:ae:62:43:17:88:ca:87:e5:
bc:9e:02:3f:08:e6:7f:51:e3:5c:70:38:05:72:c1:4b:e3:85:
f1:5a:8a:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:25:45 2025 by rpki-client