Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/36906e46-bec5-3393-be66-d1b8539c5d00.roa
File: 36906e46-bec5-3393-be66-d1b8539c5d00.roa (raw, json)
Hash identifier: m7nj6Nh3k2m85ToArvoUvTbcywGwT8qQ3BaLo7yovh8=
Subject key identifier: 08:C3:51:55:7B:61:B7:50:80:03:16:94:47:76:1D:5B:9B:C7:15:86
Certificate issuer: /CN=5933af70-fae4-44c6-9e42-2b9eda3c1e0e
Certificate serial: 010D0C9F43285847F584F0B8554D23611FC41400
Authority key identifier: 5F:4A:62:AF:2E:C7:84:2A:E0:C5:DA:E6:B6:94:D8:89:17:4F:D5:1A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/36906e46-bec5-3393-be66-d1b8539c5d00.roa
Signing time: Fri 22 Nov 2024 02:00:40 +0000
ROA not before: Fri 22 Nov 2024 02:00:40 +0000
ROA not after: Thu 20 Feb 2025 02:00:40 +0000
asID: 400226
IP address blocks: 2602:fc05::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:f5:84:f0:b8:55:4d:23:61:1f:c4:14:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5933af70-fae4-44c6-9e42-2b9eda3c1e0e
Validity
Not Before: Nov 22 02:00:40 2024 GMT
Not After : Feb 20 02:00:40 2025 GMT
Subject: CN=ef5ec9a2-fb5a-4c19-8183-89b84f394adc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:21:17:61:f3:98:a7:c4:d5:20:14:00:db:19:
61:18:68:3b:fa:a1:f5:dc:17:4b:93:5a:f1:4b:e4:
12:7a:c3:9a:74:35:35:dd:fd:d6:e9:e4:30:0c:b7:
97:d3:bd:71:b0:73:00:b6:a6:96:df:71:39:6b:fb:
b6:bd:3a:cc:f8:d4:62:f0:b8:cd:3a:42:48:29:9d:
b7:f0:2e:0e:90:52:e2:e1:62:d9:bb:ae:42:e0:3e:
f4:40:17:f7:66:68:32:b4:ec:cf:05:63:8d:37:1e:
28:0f:a4:87:06:d1:71:3c:aa:e9:8f:e0:6f:cd:62:
7a:33:7f:db:64:a4:22:75:06:61:88:21:3b:43:1f:
f5:36:32:94:c2:49:fb:92:db:19:08:91:5e:2a:3b:
11:65:ce:1f:9e:6e:f7:34:8c:d1:50:c4:a4:bf:ed:
2f:56:76:9f:98:b0:7c:41:88:b7:3f:4f:5a:18:4a:
ec:bf:00:a3:2e:a6:58:b8:ad:6e:fe:6c:16:8c:2a:
30:68:49:dc:7b:49:c3:ab:a3:e5:7a:73:50:a5:dc:
d9:5f:b2:36:36:69:2b:33:f3:ea:9d:e3:20:e5:be:
e1:c2:3a:1e:a0:d1:b7:73:ce:66:8d:4f:87:28:3c:
39:77:77:58:59:ad:30:bb:00:d6:e5:e7:dc:04:36:
ff:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:C3:51:55:7B:61:B7:50:80:03:16:94:47:76:1D:5B:9B:C7:15:86
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/36906e46-bec5-3393-be66-d1b8539c5d00.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/5933af70-fae4-44c6-9e42-2b9eda3c1e0e.crl
X509v3 Authority Key Identifier:
keyid:5F:4A:62:AF:2E:C7:84:2A:E0:C5:DA:E6:B6:94:D8:89:17:4F:D5:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:fc05::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bf:d8:2e:19:e9:8b:03:28:0d:70:6c:e9:32:eb:60:ff:3b:d0:
86:a9:9e:de:a1:4a:22:7a:1c:e0:e5:fb:ac:b8:78:b1:3e:9a:
6e:8d:25:b5:5d:29:f5:ff:25:69:89:e1:9b:69:29:72:b4:94:
bb:b6:8b:7f:88:bb:28:3a:1f:a1:f2:bd:48:bd:78:91:fe:83:
e7:fa:93:4b:e4:da:2a:e9:a3:57:9a:36:6f:5c:1c:22:5c:f5:
dc:4d:97:a0:64:be:bf:72:71:64:90:0c:8e:e8:38:06:db:e1:
54:8c:61:65:9b:6f:85:33:fd:39:cd:df:34:f7:67:b6:c1:3c:
62:22:04:7c:ba:8b:ce:90:a4:28:c9:a8:d7:cd:1a:eb:7d:c6:
61:85:8e:9d:ae:6c:8e:0f:15:0b:4e:af:a7:0d:0b:6e:2b:65:
50:49:ee:fc:da:ee:e2:0c:ec:ae:ab:26:98:f7:85:de:0c:1d:
db:f6:b7:4d:0f:2f:d0:d8:b6:cc:75:58:5a:69:c8:5b:b0:3b:
ec:4d:b8:b1:31:fb:00:95:dc:90:d0:43:11:93:ee:1d:bc:82:
f2:eb:89:ee:95:2e:ae:fc:b0:60:4b:a9:63:79:9c:c7:35:a2:
fb:b4:36:7b:35:1f:7c:d3:04:88:7f:58:8d:92:b2:46:cc:3a:
83:6e:a0:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 06:59:47 2025 by rpki-client