Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7ff6878d-3b7e-4c67-a91a-e21f1042f9e8/f4d8a2fb-b1ee-3843-85c5-8cd472065071.roa
File: f4d8a2fb-b1ee-3843-85c5-8cd472065071.roa (raw, json)
Hash identifier: FSqw1Ae04vZBnXNqsRV0KZGgGDGLIALUg6YacP4jXag=
Subject key identifier: BB:3E:16:93:F9:36:97:0B:A7:1C:DA:2F:02:4D:BD:3B:35:3D:B7:48
Certificate issuer: /CN=7ff6878d-3b7e-4c67-a91a-e21f1042f9e8
Certificate serial: 010D0C9F4328584817050E410B307A3524C2CD80
Authority key identifier: 48:84:03:73:7A:40:DD:51:C9:F1:4B:CD:11:48:90:6D:E1:DD:0C:9D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7ff6878d-3b7e-4c67-a91a-e21f1042f9e8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7ff6878d-3b7e-4c67-a91a-e21f1042f9e8/f4d8a2fb-b1ee-3843-85c5-8cd472065071.roa
Signing time: Wed 04 Dec 2024 02:00:39 +0000
ROA not before: Wed 04 Dec 2024 02:00:39 +0000
ROA not after: Tue 04 Mar 2025 02:00:39 +0000
asID: 55254
IP address blocks: 2602:ffcd::/36 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:17:05:0e:41:0b:30:7a:35:24:c2:cd:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ff6878d-3b7e-4c67-a91a-e21f1042f9e8
Validity
Not Before: Dec 4 02:00:39 2024 GMT
Not After : Mar 4 02:00:39 2025 GMT
Subject: CN=c7dc252d-4b96-477e-ba88-bfe4694047ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f4:55:cd:20:41:4b:30:06:ec:f4:c2:6f:c2:
fe:a2:ef:32:7f:ed:1e:02:71:26:95:9c:42:d6:82:
19:f3:2f:51:10:4b:19:6d:52:62:61:43:3c:90:64:
07:e6:98:96:33:f4:0a:27:8b:8f:8d:a7:9c:a8:3b:
40:e9:e8:64:1a:65:18:46:f9:94:c8:01:46:73:d1:
2a:02:37:ac:95:95:51:6e:14:ab:cd:73:1f:8f:05:
e8:72:04:74:88:4e:6a:54:d8:9e:22:80:69:61:ed:
b2:66:33:73:e1:ae:5c:69:91:98:a7:6c:55:23:1a:
d9:28:b9:96:c5:e1:73:ef:2c:a2:df:8b:47:f2:f6:
0d:61:fe:16:9c:bb:cf:89:ab:37:6f:23:b9:94:e7:
82:86:8d:d2:5c:be:5a:5f:a7:6c:27:ce:d0:da:da:
dc:25:07:5f:0e:6a:7c:2a:3b:bb:2d:f6:3c:46:5c:
1c:c5:e8:08:5f:6d:5b:fe:69:a7:7d:2e:3b:e6:41:
20:1b:5e:d3:99:84:e4:a0:db:c7:2e:5a:59:f6:09:
1f:96:fa:76:0d:ae:7b:31:93:a8:d6:74:18:8d:84:
38:b7:60:b3:bf:a3:bf:6a:d6:f1:2c:29:f7:d3:02:
b1:00:91:c3:55:c7:40:2b:b9:80:72:28:05:1d:68:
5f:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:3E:16:93:F9:36:97:0B:A7:1C:DA:2F:02:4D:BD:3B:35:3D:B7:48
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7ff6878d-3b7e-4c67-a91a-e21f1042f9e8/f4d8a2fb-b1ee-3843-85c5-8cd472065071.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7ff6878d-3b7e-4c67-a91a-e21f1042f9e8/7ff6878d-3b7e-4c67-a91a-e21f1042f9e8.crl
X509v3 Authority Key Identifier:
keyid:48:84:03:73:7A:40:DD:51:C9:F1:4B:CD:11:48:90:6D:E1:DD:0C:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7ff6878d-3b7e-4c67-a91a-e21f1042f9e8.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:ffcd::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
30:6d:1d:ee:e1:13:73:62:e9:54:f6:3f:b3:23:f8:33:f3:b7:
3e:1c:f4:71:bb:8a:20:18:c9:ae:12:ee:b3:96:55:65:7a:bc:
81:2a:f8:26:0e:41:46:48:3d:db:6e:96:ea:04:16:09:5c:33:
89:1e:2d:dc:23:80:41:53:18:71:b1:a8:fb:3d:62:8a:e2:c6:
7e:66:2f:f7:41:28:b6:5b:47:d7:7a:86:6b:c7:19:f7:4a:66:
f4:51:f9:ae:29:42:e4:78:8e:49:47:84:29:01:97:6c:51:e6:
2e:92:ac:27:b1:4a:b7:17:e3:82:94:d2:ab:9c:74:dd:da:db:
11:3a:91:92:8c:df:ac:70:68:09:35:9c:68:e8:dd:4e:9f:45:
3f:35:d3:73:c9:3b:61:28:8c:f8:a6:9a:31:17:c6:9a:3b:6c:
fa:16:94:91:85:d7:2b:49:2c:35:73:81:49:65:02:f2:51:a2:
b0:2f:f0:bd:d4:e9:1d:f1:9f:47:2b:d6:b7:8b:75:7a:cc:6d:
15:21:ef:b4:c0:a5:2f:8b:07:4a:07:8a:8e:8d:ae:41:24:a5:
a8:e1:64:9b:05:ac:65:09:00:6d:5c:ee:96:c8:9d:91:d7:68:
5d:26:2c:83:7f:8f:1e:d6:ca:f8:53:95:ca:2d:c0:7a:4c:3c:
ce:d3:70:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:48:04 2025 by rpki-client