Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/304f07f6-04cc-39ec-8d73-e2fe0365d858.roa
File: 304f07f6-04cc-39ec-8d73-e2fe0365d858.roa (raw, json)
Hash identifier: yCA2q9uqKsDI+se7FKtSFvVya5gtpom/VyNN2EzabV8=
Subject key identifier: FA:4A:3A:F7:0C:3F:F0:63:DC:B4:C5:36:1F:EE:FA:87:DD:71:B9:D6
Certificate issuer: /CN=4848cc9b-e46f-485e-b3f2-4f393b5d92d6
Certificate serial: 010D0C9F432858482BF55C3EFAC63C80207D961C
Authority key identifier: B6:2A:40:95:87:55:AF:8F:01:A4:40:13:3D:22:F2:15:2B:B6:8D:EB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/304f07f6-04cc-39ec-8d73-e2fe0365d858.roa
Signing time: Wed 11 Dec 2024 14:00:52 +0000
ROA not before: Wed 11 Dec 2024 14:00:52 +0000
ROA not after: Tue 11 Mar 2025 13:00:52 +0000
asID: 18450
IP address blocks: 2602:f919:103::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2b:f5:5c:3e:fa:c6:3c:80:20:7d:96:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4848cc9b-e46f-485e-b3f2-4f393b5d92d6
Validity
Not Before: Dec 11 14:00:52 2024 GMT
Not After : Mar 11 13:00:52 2025 GMT
Subject: CN=1ba83a4e-955c-4a21-865e-0da300c7db08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:43:a9:23:3a:92:c1:c7:d7:93:29:c8:16:94:
20:f1:c5:e7:83:11:6c:78:6f:cb:ab:07:01:b0:c1:
38:3a:7f:74:ac:97:50:74:e9:27:eb:04:32:56:e7:
9a:09:a2:4f:50:4a:2f:9c:23:4c:0e:77:e4:f7:7e:
0d:e2:b1:bc:0a:e4:3e:dd:d1:d7:ac:63:9b:9d:e6:
e3:58:2d:da:af:db:a0:33:b1:3a:e5:4b:d6:16:55:
9d:86:16:62:cc:8b:83:66:f2:5e:cc:24:62:52:66:
18:dc:e0:28:15:53:71:67:65:07:8c:85:de:e7:6c:
78:d5:a6:87:91:da:10:5e:e8:9a:c5:02:80:55:87:
27:ca:c1:b9:85:96:13:58:50:c8:63:7e:80:41:a7:
b4:aa:3f:b6:45:56:ac:7e:2a:05:a5:76:84:ff:99:
0e:1c:aa:de:74:a6:09:5f:e1:2e:f9:24:8c:91:82:
08:d6:88:ac:28:9d:3c:3d:cf:22:99:ba:d7:09:a8:
b4:91:65:91:04:ce:d7:4c:8f:be:1b:09:9c:b9:53:
7e:a0:7c:c4:35:92:f1:3a:67:2a:ee:66:7c:ef:22:
5c:f4:88:56:d6:13:00:a4:60:4d:54:08:c7:19:43:
4c:84:61:a4:b3:a1:d5:01:b1:7f:a2:da:89:3d:48:
cb:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:4A:3A:F7:0C:3F:F0:63:DC:B4:C5:36:1F:EE:FA:87:DD:71:B9:D6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/304f07f6-04cc-39ec-8d73-e2fe0365d858.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.crl
X509v3 Authority Key Identifier:
keyid:B6:2A:40:95:87:55:AF:8F:01:A4:40:13:3D:22:F2:15:2B:B6:8D:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:f919:103::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7f:64:22:41:80:1f:b6:35:c0:88:9d:6d:18:40:b2:ee:2e:1f:
40:bd:a9:2c:72:80:ee:9d:5e:ac:e0:4d:3c:f1:1c:89:a1:9a:
67:92:fe:12:b2:88:e7:6f:8c:65:a5:d8:38:21:07:f3:71:91:
ac:5d:cd:27:29:6a:6a:18:47:2f:08:c6:f8:36:27:b6:4e:73:
af:fe:7c:59:58:9a:96:cd:5b:28:68:74:e1:42:b0:96:fa:61:
05:40:95:dc:f4:5e:d4:ef:be:e6:ae:39:a8:d1:c1:cd:11:16:
12:68:17:29:40:67:b2:ab:01:db:5b:4d:98:76:9c:eb:36:8d:
b4:8a:6e:0c:8d:fe:f8:3c:5b:48:d2:ad:d9:94:b7:a9:0a:38:
1c:f7:66:8a:ee:a2:e9:89:b6:4b:b3:d0:55:17:d4:a6:91:13:
98:7b:05:15:f9:b4:19:c1:99:05:90:78:97:dd:af:36:f7:2c:
38:aa:cb:b8:23:9a:aa:05:f9:3b:09:1d:c2:a4:c8:2d:a8:2b:
fa:86:b6:74:6c:e3:f8:fd:68:af:92:62:7c:85:b5:6d:b8:3e:
67:3e:e4:13:fc:a4:3b:0a:9d:c6:e4:32:b6:cc:bc:8c:62:a7:
6f:87:13:1e:b5:25:65:95:da:d3:c2:e8:b8:e1:b8:c0:ff:96:
51:1c:5b:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:01:30 2025 by rpki-client