Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9de2e0c2-2707-42c9-b26d-59fe7d0b342f/075de4d6-ac9a-33be-b7cc-f8d6a1002804.roa
File: 075de4d6-ac9a-33be-b7cc-f8d6a1002804.roa (raw, json)
Hash identifier: gWA+wGoyQB6SOeUdogZd9jyZnU42trX5puT0d1upaEI=
Subject key identifier: F5:A7:48:8F:22:A7:0B:39:97:4A:8D:D2:A1:A6:53:22:74:FD:9D:3C
Certificate issuer: /CN=9de2e0c2-2707-42c9-b26d-59fe7d0b342f
Certificate serial: 010D0C9F43285847EBBF8343F05819B2428C7480
Authority key identifier: 44:24:09:83:D6:FE:E5:17:5D:60:BD:AC:DC:B3:27:E5:CC:C5:BF:21
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9de2e0c2-2707-42c9-b26d-59fe7d0b342f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9de2e0c2-2707-42c9-b26d-59fe7d0b342f/075de4d6-ac9a-33be-b7cc-f8d6a1002804.roa
Signing time: Mon 18 Nov 2024 14:00:40 +0000
ROA not before: Mon 18 Nov 2024 14:00:40 +0000
ROA not after: Sun 16 Feb 2025 14:00:40 +0000
asID: 399542
IP address blocks: 2602:f8ef:fd::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:eb:bf:83:43:f0:58:19:b2:42:8c:74:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9de2e0c2-2707-42c9-b26d-59fe7d0b342f
Validity
Not Before: Nov 18 14:00:40 2024 GMT
Not After : Feb 16 14:00:40 2025 GMT
Subject: CN=f3338c82-cc06-4294-9b7e-483de65f7e97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:50:fa:05:75:b6:3a:98:73:ab:af:cb:c5:b8:
ba:e8:e2:a5:d5:b6:c4:af:17:f6:be:96:cd:b9:12:
e7:5a:94:e5:3a:29:5b:ac:d2:1d:6e:c9:2e:b0:60:
c0:76:66:f0:d3:72:23:f0:b3:33:51:bc:ad:0c:ee:
3c:15:bc:1a:b7:00:5a:ff:45:69:2e:87:84:2a:31:
07:6e:ca:63:7a:5a:14:99:02:05:5c:d4:2b:1e:50:
09:8b:77:49:fc:81:a0:d0:39:60:f5:58:07:34:d1:
33:b6:2c:60:a9:1b:21:b0:a2:c4:e0:77:02:0d:27:
be:9a:b2:16:65:01:86:63:09:d7:82:6e:d7:5f:14:
e6:f8:0b:47:e8:05:d8:94:b7:ab:8c:26:c4:4f:c3:
54:2c:5e:1d:cd:a7:73:a4:11:51:fe:f2:4c:50:e0:
0b:f7:4c:42:15:23:14:fa:2a:70:be:fa:e5:72:6e:
c7:2e:48:f3:29:0d:aa:ba:ec:70:1c:d7:e3:cf:ca:
ff:91:62:aa:7f:44:ea:6b:ca:52:05:9c:46:c7:58:
1e:fe:a9:5c:d1:ee:58:e1:14:2e:bd:4c:16:92:d3:
48:73:15:18:58:42:05:7a:1a:98:af:fd:13:03:cf:
94:cb:56:12:35:9f:5e:6c:70:5a:60:c8:36:f8:4b:
e3:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:A7:48:8F:22:A7:0B:39:97:4A:8D:D2:A1:A6:53:22:74:FD:9D:3C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9de2e0c2-2707-42c9-b26d-59fe7d0b342f/075de4d6-ac9a-33be-b7cc-f8d6a1002804.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9de2e0c2-2707-42c9-b26d-59fe7d0b342f/9de2e0c2-2707-42c9-b26d-59fe7d0b342f.crl
X509v3 Authority Key Identifier:
keyid:44:24:09:83:D6:FE:E5:17:5D:60:BD:AC:DC:B3:27:E5:CC:C5:BF:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9de2e0c2-2707-42c9-b26d-59fe7d0b342f.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:f8ef:fd::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
00:8e:88:97:1f:b6:a4:74:5a:1b:ea:c7:c2:3a:e1:86:9e:b5:
e3:37:55:ea:0d:8b:16:ff:7c:5b:bb:b1:cd:a4:66:da:17:d6:
01:2e:35:4f:35:52:38:2e:5a:0b:3f:ec:bb:ed:42:83:4a:0d:
85:49:25:2a:1b:76:b3:8f:b2:b3:91:72:da:f0:c3:d8:8f:ec:
84:9c:de:46:2b:a2:a8:e2:e4:9c:25:a4:0b:d8:9e:79:aa:a1:
59:e8:70:a4:67:94:03:2f:d8:89:5e:a0:81:38:77:5e:84:94:
cb:89:9d:33:9d:16:24:40:c2:49:f9:6b:c3:e4:25:fb:fb:65:
11:3b:b1:96:20:c8:83:99:74:ec:eb:be:18:f5:c0:23:d2:93:
45:da:8e:8e:e8:dd:d1:26:5a:8c:d2:6d:08:95:5c:ed:51:ee:
74:0a:71:d7:59:ab:1a:59:84:93:50:71:c1:d5:e3:08:0e:c9:
fe:81:d8:f6:40:85:b4:13:54:0e:6d:d0:1d:66:02:0a:1a:08:
c9:f4:db:46:97:72:f3:65:c8:6e:96:c7:cb:10:a3:0f:04:d1:
04:3c:5a:e2:2b:ac:d2:5c:81:d0:0f:90:70:72:e7:ec:59:95:
2c:64:14:c3:b3:cf:1d:38:03:22:c1:78:4f:86:0e:a5:b9:10:
8e:44:36:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 14:20:45 2025 by rpki-client