Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/4521230d-a7d3-3539-b54c-49378e8313e8.roa
File: 4521230d-a7d3-3539-b54c-49378e8313e8.roa (raw, json)
Hash identifier: iqPbD4+i4VnznaCuY61KhctMeDysEpFVXALNkvFvL18=
Subject key identifier: 07:A0:2A:42:32:C1:3F:51:C2:7B:C5:5A:3C:8C:C7:BD:78:A4:21:47
Certificate issuer: /CN=c898c122-b98e-4ce4-95b4-fe5f25fdd261
Certificate serial: 010D0C9F4328584837200CB4B02E182B0B3F34C0
Authority key identifier: BF:BD:22:C6:52:94:69:9B:E6:2D:47:97:CC:1B:CD:9B:BF:2E:34:BC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/4521230d-a7d3-3539-b54c-49378e8313e8.roa
Signing time: Sun 15 Dec 2024 14:00:53 +0000
ROA not before: Sun 15 Dec 2024 14:00:53 +0000
ROA not after: Sat 15 Mar 2025 13:00:53 +0000
asID: 38047
IP address blocks: 2602:f83b:a201::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:37:20:0c:b4:b0:2e:18:2b:0b:3f:34:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c898c122-b98e-4ce4-95b4-fe5f25fdd261
Validity
Not Before: Dec 15 14:00:53 2024 GMT
Not After : Mar 15 13:00:53 2025 GMT
Subject: CN=bb7076bf-b636-465a-8a16-21f9ed2adfc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:6f:1d:28:3f:ae:ba:f2:d1:77:93:24:6d:0f:
50:88:b7:a8:b4:42:75:a8:d5:43:00:38:26:ac:89:
b2:1f:87:26:d9:3d:0c:a2:36:b9:75:71:58:c3:6c:
5a:f0:46:9c:1b:3a:2d:b2:94:90:86:82:1c:e4:06:
a7:34:00:b7:ac:bd:47:a0:66:88:28:83:17:b8:4f:
fc:38:ca:14:c6:c4:fd:10:2d:11:e2:be:15:a9:5d:
3f:5e:32:cc:d5:bb:1e:c7:47:27:d5:d9:48:c8:5f:
77:96:0d:42:e7:fe:32:7e:19:f8:00:04:56:61:f4:
33:62:75:6e:c4:b5:42:20:5f:af:c0:19:8c:1a:04:
75:69:89:f3:fc:da:af:93:72:d1:1d:ff:3f:18:8d:
31:6f:18:3c:89:02:81:e3:fa:b7:59:e5:70:37:43:
89:73:65:bd:2b:1f:e0:08:e0:e2:b3:82:b5:81:37:
f8:24:61:9c:f6:93:6c:05:48:f1:44:88:03:63:0f:
2e:27:73:f6:d6:28:77:16:35:83:24:95:c7:83:9d:
6b:9a:54:06:bd:9e:0d:e2:5f:cf:42:bf:89:20:72:
71:63:ae:f7:40:f4:f1:db:15:dd:96:c7:19:f9:43:
60:eb:30:9b:6e:fb:9d:5b:5d:a7:a1:49:ce:88:99:
3f:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:A0:2A:42:32:C1:3F:51:C2:7B:C5:5A:3C:8C:C7:BD:78:A4:21:47
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/4521230d-a7d3-3539-b54c-49378e8313e8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/c898c122-b98e-4ce4-95b4-fe5f25fdd261.crl
X509v3 Authority Key Identifier:
keyid:BF:BD:22:C6:52:94:69:9B:E6:2D:47:97:CC:1B:CD:9B:BF:2E:34:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:f83b:a201::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5e:d2:c9:e6:eb:69:a4:a0:68:10:af:01:bd:91:28:0e:d1:9a:
8d:1d:c9:14:3c:7e:92:d9:7d:4c:6f:70:56:8a:6d:24:f2:78:
5d:4c:18:68:b1:f1:5a:f3:e2:b0:81:dd:0e:f4:cb:13:ef:4e:
32:b4:d2:06:1a:e4:63:e9:df:45:69:18:12:72:e8:92:45:97:
c0:bc:5f:a5:4c:6e:30:4e:59:67:53:e5:1f:5e:28:10:84:a2:
fa:ef:17:4d:73:aa:43:20:a0:f5:14:e2:1d:4e:0c:76:6e:a7:
f1:cd:51:95:df:3a:bb:5a:b5:b2:9a:ef:2b:68:7b:50:1e:47:
78:8d:9f:a6:63:26:0c:56:27:b2:ef:cb:7f:04:fa:7a:51:c3:
f9:15:10:1e:40:17:f3:e3:b2:1f:21:48:c9:22:44:05:6f:1b:
66:6d:d9:d9:11:b8:fa:d1:5d:63:22:bb:64:00:9a:ac:d7:e5:
ca:6d:77:ee:c3:28:ec:2c:f5:06:cf:bd:50:06:06:a0:5b:ce:
0e:21:70:59:39:b1:c5:93:3c:cd:8d:90:ab:d1:b6:8f:54:fb:
aa:f2:1f:2b:e9:08:2e:47:9e:4d:18:ae:60:68:76:7f:59:ba:
37:bc:b0:c4:48:15:47:48:a2:c0:14:45:5f:f4:b4:12:bd:0f:
8d:ff:69:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 16:44:43 2025 by rpki-client