Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/3917548b-5868-3c3b-9b63-1aa1cdf79bef.roa
File: 3917548b-5868-3c3b-9b63-1aa1cdf79bef.roa (raw, json)
Hash identifier: YowAme/IH0XVNL9nkbGjJRl8p2Ntl+LFnuHBPhjvOL8=
Subject key identifier: 44:86:BF:14:42:12:E3:DC:8F:27:A8:6F:CC:03:0B:A1:CC:35:28:E0
Certificate issuer: /CN=4848cc9b-e46f-485e-b3f2-4f393b5d92d6
Certificate serial: 010D0C9F4328584869606AE981B1DD34B9EBD080
Authority key identifier: B6:2A:40:95:87:55:AF:8F:01:A4:40:13:3D:22:F2:15:2B:B6:8D:EB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/3917548b-5868-3c3b-9b63-1aa1cdf79bef.roa
Signing time: Thu 02 Jan 2025 14:00:52 +0000
ROA not before: Thu 02 Jan 2025 14:00:52 +0000
ROA not after: Wed 02 Apr 2025 13:00:52 +0000
asID: 23470
IP address blocks: 2602:f919:100::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:69:60:6a:e9:81:b1:dd:34:b9:eb:d0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4848cc9b-e46f-485e-b3f2-4f393b5d92d6
Validity
Not Before: Jan 2 14:00:52 2025 GMT
Not After : Apr 2 13:00:52 2025 GMT
Subject: CN=04ecc695-0b8a-4e1a-8a30-280bbd64924f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:83:77:f8:0d:0c:e4:2c:0c:b5:01:40:ce:c4:
2d:59:01:08:46:7b:d4:15:c2:77:7c:f0:94:d1:ad:
8f:5a:90:45:0b:53:15:ea:d9:1d:27:cc:25:8c:b0:
f2:ba:af:48:eb:46:12:43:9a:de:13:33:0c:6c:76:
8b:77:d9:0a:1d:9e:4a:21:bc:55:56:47:8b:66:62:
25:6a:8f:b7:5c:a2:b7:5d:0a:15:3c:d2:30:fc:93:
af:8d:ad:6e:c4:30:d5:94:bd:17:f5:9d:be:b7:1b:
cc:56:bc:1a:36:4f:0a:1a:68:3a:b8:5d:16:01:96:
7a:b2:e0:58:60:8e:89:c0:0b:a2:da:96:2e:ea:f3:
cd:54:f1:d3:29:8c:27:75:13:65:1e:14:d7:ab:31:
c6:34:51:89:e6:7e:8d:8f:e2:1d:cb:67:49:02:c5:
e0:b9:57:fa:4e:7f:8b:9b:54:7c:7b:72:9f:21:ed:
91:a4:fd:25:d5:80:77:4f:90:f7:99:d0:d8:f8:b1:
e5:a8:fe:32:e9:26:d9:c4:6d:35:ff:cc:f0:62:2f:
3b:55:85:14:39:8d:b1:a9:19:19:72:76:f4:88:c6:
12:a5:27:10:1d:8f:8b:b6:63:90:d7:3e:7f:27:42:
71:eb:2a:51:e1:ef:19:0b:69:c4:1c:2b:a6:7d:ad:
b8:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:86:BF:14:42:12:E3:DC:8F:27:A8:6F:CC:03:0B:A1:CC:35:28:E0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/3917548b-5868-3c3b-9b63-1aa1cdf79bef.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.crl
X509v3 Authority Key Identifier:
keyid:B6:2A:40:95:87:55:AF:8F:01:A4:40:13:3D:22:F2:15:2B:B6:8D:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:f919:100::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
22:08:88:c1:53:62:45:c7:28:d6:ea:0b:80:88:47:87:34:ed:
bc:82:40:78:f4:39:84:3d:32:2d:87:77:dd:cb:69:83:98:ef:
68:dc:cd:9e:e7:06:30:c8:e1:79:75:90:0c:ca:4e:24:81:d4:
90:0a:ce:cc:85:f5:33:4d:9d:4b:c4:ef:6a:8f:6e:2b:f8:da:
be:87:4f:c7:d4:37:e6:10:02:01:fa:dc:94:e5:39:ae:54:9c:
02:cd:2b:d2:df:16:a5:76:ce:cd:4a:92:95:60:1c:52:2b:5b:
cb:9f:a7:ff:e0:8c:a2:4b:cb:97:80:6b:df:43:20:dc:a9:00:
a3:8d:ca:f6:06:08:08:14:a6:fb:69:8a:4a:29:16:4b:e7:9b:
77:10:30:fd:cc:12:50:25:e1:7f:ce:cd:72:01:dc:84:20:fe:
b5:25:27:0a:9c:05:e1:74:df:72:b2:60:40:70:9f:59:98:d7:
5b:73:b7:1c:a1:4d:dc:80:82:95:e3:c3:bd:04:b2:2b:b3:6c:
cb:82:93:12:33:e0:fa:d5:91:51:5a:e2:50:83:1b:fe:26:fc:
c9:c3:e7:82:50:8b:0f:6d:f9:7a:98:95:7d:39:3c:6e:ec:1a:
05:89:fa:70:85:c4:ef:45:b8:03:91:71:ac:b5:ec:b2:58:a7:
eb:3c:a9:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:34:59 2025 by rpki-client