Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab3f3ae8-1db7-413e-9713-ab05c3fa5d75/3d7daaee-632b-306e-bcb0-783ea2fb4061.roa
File: 3d7daaee-632b-306e-bcb0-783ea2fb4061.roa (raw, json)
Hash identifier: S0VyML+/o+oXkNfXrEqemRuk9bKF57KiGz5Fp1kDWkw=
Subject key identifier: CF:59:F1:46:C2:96:AE:53:46:9E:CD:62:2F:85:B7:64:4E:0E:D7:F0
Certificate issuer: /CN=ab3f3ae8-1db7-413e-9713-ab05c3fa5d75
Certificate serial: 010D0C9F432858489340B340FAD324ABB43DCE00
Authority key identifier: 10:C3:83:01:E1:40:17:0E:14:D9:BF:C7:7D:C7:8B:B3:D8:1B:74:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab3f3ae8-1db7-413e-9713-ab05c3fa5d75.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab3f3ae8-1db7-413e-9713-ab05c3fa5d75/3d7daaee-632b-306e-bcb0-783ea2fb4061.roa
Signing time: Fri 17 Jan 2025 14:00:53 +0000
ROA not before: Fri 17 Jan 2025 14:00:53 +0000
ROA not after: Thu 17 Apr 2025 13:00:53 +0000
asID: 23368
IP address blocks: 2602:fa60::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:93:40:b3:40:fa:d3:24:ab:b4:3d:ce:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab3f3ae8-1db7-413e-9713-ab05c3fa5d75
Validity
Not Before: Jan 17 14:00:53 2025 GMT
Not After : Apr 17 13:00:53 2025 GMT
Subject: CN=fc6e6c25-b4c7-4b9d-b8f6-4082a5098b61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f3:89:7d:f8:04:bc:39:3f:33:55:b9:08:a4:
46:79:a6:bc:68:45:e7:62:c3:e3:2d:73:e7:a4:c0:
3a:c6:7f:51:43:fe:1f:af:db:83:9c:15:23:5d:17:
83:4a:89:e2:f8:ea:e3:b7:ab:1e:c6:7b:88:9b:7e:
77:20:63:68:ea:5d:8f:79:bd:25:ba:6c:7c:8c:b1:
85:9a:ab:25:f3:4a:b4:61:01:23:64:ce:6b:e8:2f:
96:f6:4b:7b:0f:80:46:cc:b2:d3:48:32:99:53:34:
0f:a8:ff:38:9b:b5:db:23:b1:05:00:4e:57:d2:aa:
00:5f:a1:e3:19:f9:05:13:6b:8e:23:73:68:dd:a1:
73:e4:b5:e2:0a:01:48:29:11:88:4a:e6:89:25:66:
9d:0e:02:18:25:86:b1:78:96:ad:0f:54:31:c2:14:
61:1a:36:58:b4:a7:98:a2:9d:6b:ad:2a:17:7d:44:
a6:c7:c2:cd:13:5e:ea:03:c9:31:d9:15:24:de:b4:
e1:84:78:70:ec:79:85:a8:df:65:b6:84:28:92:3f:
0a:c6:1a:cd:e5:ac:dd:92:9a:23:23:8c:f8:cd:34:
ce:f9:34:a7:fe:ea:aa:27:7e:8f:90:cd:f6:0f:fe:
98:a3:41:89:0d:d2:e7:43:88:64:43:db:95:7e:c5:
b5:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:59:F1:46:C2:96:AE:53:46:9E:CD:62:2F:85:B7:64:4E:0E:D7:F0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab3f3ae8-1db7-413e-9713-ab05c3fa5d75/3d7daaee-632b-306e-bcb0-783ea2fb4061.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab3f3ae8-1db7-413e-9713-ab05c3fa5d75/ab3f3ae8-1db7-413e-9713-ab05c3fa5d75.crl
X509v3 Authority Key Identifier:
keyid:10:C3:83:01:E1:40:17:0E:14:D9:BF:C7:7D:C7:8B:B3:D8:1B:74:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab3f3ae8-1db7-413e-9713-ab05c3fa5d75.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:fa60::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
50:c5:03:fb:b5:4d:36:47:16:6d:33:c2:26:b7:6d:de:02:f7:
8a:b2:07:3d:b1:61:b2:02:65:2a:90:cf:c1:7b:15:c5:e7:d7:
82:8e:61:7c:b4:6b:0e:1c:41:fd:d9:88:12:ba:9f:3b:6e:c8:
16:4f:ef:f9:78:a3:b5:01:9b:37:ed:23:55:c2:ef:47:44:b6:
92:53:35:93:47:24:f1:db:85:a9:0b:c2:d0:3f:91:a1:6b:92:
39:49:e4:17:64:c5:e6:e8:3d:cc:6d:7e:b4:fa:04:fa:c3:fb:
b7:4a:92:ca:16:b1:9a:64:11:49:a9:a1:c4:59:34:7b:11:10:
d5:83:d1:ed:06:fd:15:89:07:bf:5b:df:f2:19:52:5c:a2:07:
41:13:1e:bf:62:1d:0f:a6:83:2f:a2:7e:84:ba:d9:40:d5:91:
b4:be:d5:4f:9b:ec:99:46:53:9a:e6:00:39:e5:87:1f:42:cc:
54:8b:70:9a:c8:3f:ba:5f:5a:41:57:93:c8:21:b7:bc:4e:b4:
c6:55:5c:5a:e6:3b:80:3e:d1:61:ef:bd:5e:c9:50:48:ba:bb:
c1:63:16:23:9e:0d:fc:0a:67:55:f7:b9:9c:93:b0:d3:0a:78:
b0:dd:85:6c:d9:49:26:1c:7b:96:e2:e7:c8:24:25:78:76:5d:
be:fe:0c:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 11:29:04 2025 by rpki-client