Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d/f63d3a03-da41-32c6-a664-041678577cb0.roa
File: f63d3a03-da41-32c6-a664-041678577cb0.roa (raw, json)
Hash identifier: dV3Ov+ZlGut6OozgOEN5+lLOcYeNEP49Va/Y5jwQkRI=
Subject key identifier: 3E:42:D4:21:C8:36:66:3E:58:78:D8:A8:AA:37:C3:E2:E8:95:44:76
Certificate issuer: /CN=a3630f82-169c-4b03-ad42-aa6f5b71d91d
Certificate serial: 010D0C9F432858487325B7AB55D8CE7C39AF7680
Authority key identifier: 8C:BB:12:0E:88:E0:E4:10:DC:79:9A:11:CC:5E:E0:EA:C1:40:0E:46
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d/f63d3a03-da41-32c6-a664-041678577cb0.roa
Signing time: Mon 06 Jan 2025 02:00:40 +0000
ROA not before: Mon 06 Jan 2025 02:00:40 +0000
ROA not after: Sun 06 Apr 2025 01:00:40 +0000
asID: 16509
IP address blocks: 2602:fa28:6a::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:73:25:b7:ab:55:d8:ce:7c:39:af:76:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3630f82-169c-4b03-ad42-aa6f5b71d91d
Validity
Not Before: Jan 6 02:00:40 2025 GMT
Not After : Apr 6 01:00:40 2025 GMT
Subject: CN=5fce30dd-e63b-4f54-90df-921bbdd07817
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:cf:de:29:2c:e6:cb:84:b2:5b:d6:4f:ba:4e:
80:86:27:1d:c0:bb:a6:5d:10:aa:09:8f:21:54:38:
68:5a:37:bf:62:8c:82:cc:51:b5:e4:57:96:3d:1b:
00:aa:eb:ed:7a:30:a3:0d:19:38:a0:03:d3:90:00:
da:f7:4b:ce:7a:46:11:30:25:e8:be:c6:d5:a5:2d:
5d:5b:96:40:2e:84:2d:27:cd:b0:5d:a0:0f:10:a9:
5c:f8:bc:5b:62:f8:a9:f0:60:30:26:b5:3c:83:37:
af:0d:ce:6f:f7:36:53:a6:53:ae:7e:1c:24:f0:85:
a6:bd:fc:36:21:06:e1:47:32:95:74:12:7c:af:ea:
45:05:b1:f4:19:af:c5:27:93:58:01:dc:ca:df:94:
33:60:83:cd:bd:5a:6a:42:7b:20:c5:45:a0:18:8d:
e5:fc:49:f5:33:a7:99:90:03:6e:bb:33:8a:b0:ef:
54:32:06:e6:e5:5f:03:d5:e0:d6:6b:f8:66:3c:3f:
a2:eb:c2:a1:f7:a2:cd:aa:84:3d:70:89:18:09:57:
4d:52:eb:4f:00:bf:29:91:56:6c:36:10:5b:c3:a5:
b3:cc:b6:02:c9:be:52:4d:08:16:9f:c1:4d:81:0c:
12:05:2a:aa:7d:3e:9e:4b:7f:84:52:ff:87:dd:0e:
df:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:42:D4:21:C8:36:66:3E:58:78:D8:A8:AA:37:C3:E2:E8:95:44:76
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d/f63d3a03-da41-32c6-a664-041678577cb0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d/a3630f82-169c-4b03-ad42-aa6f5b71d91d.crl
X509v3 Authority Key Identifier:
keyid:8C:BB:12:0E:88:E0:E4:10:DC:79:9A:11:CC:5E:E0:EA:C1:40:0E:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:fa28:6a::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4a:80:35:b0:5d:65:49:55:cd:98:18:80:2c:5c:da:ea:9f:dd:
e3:09:e4:1c:62:fc:ac:e3:77:29:79:f5:5d:be:a0:69:a9:87:
e7:11:d5:d9:83:8a:72:f5:f1:d2:86:77:d7:fc:ec:1d:51:2c:
cb:25:59:5e:a1:5e:55:4f:00:47:39:c6:8b:fa:cf:83:c1:6c:
d0:83:60:7e:09:87:38:0d:90:53:ae:db:ce:f2:37:6d:d4:76:
a6:72:44:1e:ea:41:be:85:4e:e3:de:10:77:91:56:1e:74:c1:
2a:dc:4f:6a:0d:76:01:79:68:4d:0a:fe:41:f0:91:06:a3:ef:
39:ff:7f:9c:00:e2:6d:fc:74:28:2d:68:ed:d7:39:0c:71:b9:
8f:8b:2c:c9:ba:54:04:6d:fd:cf:d6:9a:f6:e1:dc:ce:6a:3d:
ec:0e:16:96:8c:58:69:de:a1:78:81:ea:92:71:d5:fe:2a:04:
f2:0f:65:0c:64:f9:ec:59:f1:4d:06:e7:e4:0f:7a:45:4b:14:
3f:3b:8d:1f:9b:c6:f9:8f:8f:2f:3d:5e:be:7e:db:f6:f6:da:
5b:2b:3c:78:7f:1b:97:eb:2a:69:44:62:b3:19:a8:85:10:d0:
8f:af:1a:b4:0b:c3:93:75:6f:ab:18:6b:c5:05:94:69:74:29:
9d:35:2f:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:24:46 2025 by rpki-client