Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6/afe60bc1-a510-3dfa-be6e-31001c9934b4.roa
File: afe60bc1-a510-3dfa-be6e-31001c9934b4.roa (raw, json)
Hash identifier: ZtH6++2afI3ZptKPDDMnYWe7hwEWBsX1Q5dfoFVZ234=
Subject key identifier: 6F:75:74:FF:FB:46:27:03:A7:86:2D:CF:6E:B2:49:49:F6:4A:16:96
Certificate issuer: /CN=3d291b6a-1b30-4fc0-b1dd-582ab98347d6
Certificate serial: 010D0C9F43285848617C1F644F76FDE9B7533EC0
Authority key identifier: BC:F7:6D:C8:7E:F4:7A:0B:B2:C7:B8:46:A4:17:5E:45:ED:F8:72:11
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6/afe60bc1-a510-3dfa-be6e-31001c9934b4.roa
Signing time: Mon 30 Dec 2024 18:10:23 +0000
ROA not before: Mon 30 Dec 2024 18:10:23 +0000
ROA not after: Sun 30 Mar 2025 17:10:23 +0000
asID: 10952
IP address blocks: 2610:28:3020::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:61:7c:1f:64:4f:76:fd:e9:b7:53:3e:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d291b6a-1b30-4fc0-b1dd-582ab98347d6
Validity
Not Before: Dec 30 18:10:23 2024 GMT
Not After : Mar 30 17:10:23 2025 GMT
Subject: CN=61bc07d2-9d10-43e6-967c-f05b79253270
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:e9:bd:7f:2a:10:e4:e4:f2:af:76:4c:cd:f7:
ef:14:df:a2:f4:13:e6:5d:41:de:8b:b0:20:b6:2f:
37:44:ac:5e:c4:24:ad:74:58:08:58:6f:7f:df:be:
b7:87:61:a5:75:c0:de:ac:98:41:67:08:c9:54:b9:
8e:8b:9f:d5:03:b8:e9:5a:a3:bf:2a:76:ed:4a:a3:
1d:6b:11:f3:da:33:b2:67:30:2d:02:31:71:c8:ff:
cc:fb:81:22:d4:04:e7:58:25:0c:54:8a:d5:99:59:
be:b4:47:e3:6b:26:17:7b:35:a8:2b:ea:9c:36:49:
07:e3:b4:21:c2:23:af:a3:5d:73:0a:d8:d7:d5:42:
c5:00:e1:22:32:ef:30:9e:bd:02:21:5b:7a:78:8b:
fa:1a:3d:f1:52:be:5e:54:ca:ea:58:11:69:be:a1:
2c:bf:25:3e:65:f0:61:de:72:dc:aa:cd:e6:fa:3b:
70:23:c8:fc:74:d8:65:b8:d4:bb:1a:42:0c:73:72:
73:ea:be:26:6c:e3:ce:5a:38:1a:07:6e:cf:be:80:
87:88:78:d9:e3:05:2b:80:ae:14:99:9e:22:01:a1:
3d:a0:01:b4:6b:3d:49:62:ae:81:2f:dc:42:03:6a:
43:3e:96:ee:a3:26:30:95:98:9d:cf:83:ec:54:d1:
77:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:75:74:FF:FB:46:27:03:A7:86:2D:CF:6E:B2:49:49:F6:4A:16:96
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6/afe60bc1-a510-3dfa-be6e-31001c9934b4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6/3d291b6a-1b30-4fc0-b1dd-582ab98347d6.crl
X509v3 Authority Key Identifier:
keyid:BC:F7:6D:C8:7E:F4:7A:0B:B2:C7:B8:46:A4:17:5E:45:ED:F8:72:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6.cer
sbgp-ipAddrBlock: critical
IPv6:
2610:28:3020::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
28:0d:ed:ce:f2:df:6b:de:b6:37:09:49:76:7f:4f:21:69:ae:
61:41:fa:96:42:11:0b:1a:d3:27:8e:74:30:5a:e2:14:4a:00:
99:f8:e3:ae:36:87:2a:55:5c:e9:23:b9:62:6f:20:aa:47:7b:
13:11:8f:04:c2:dc:6c:5d:6f:51:2a:81:3b:66:2c:27:a5:51:
31:89:5b:a5:fd:9b:45:6e:29:e7:13:cb:9a:fb:66:44:af:aa:
93:9f:2c:8b:28:2c:75:f8:61:5f:63:01:67:c4:97:bf:0e:44:
c6:63:64:60:97:ea:c1:ae:93:56:34:86:d8:68:da:5c:f8:ec:
6d:43:fa:3a:f8:f9:c9:48:7a:a7:e9:d3:85:d5:d5:92:db:65:
ba:58:fd:55:0b:0c:a3:fb:89:b1:e3:7c:ed:8b:7b:8f:15:9a:
85:0b:ec:52:e4:d6:b5:c1:06:4b:27:7f:84:ad:7d:84:b9:63:
30:6f:9d:0c:e1:04:0a:ac:7d:29:77:3c:24:b5:93:88:8d:57:
42:4a:67:fa:66:b6:35:33:6c:14:21:64:00:cc:38:fd:c2:64:
ec:0a:87:fe:ee:99:ef:e2:8a:c5:88:e6:3a:d6:d7:02:21:f6:
18:26:d8:43:86:1b:e3:32:41:6d:40:42:e1:12:6e:02:1b:db:
c8:29:d7:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:30:37 2025 by rpki-client