Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dcf7f6fb-0bae-4c21-bcf2-2f998541db3f/3d3b872a-6456-3cf2-9c9f-b5b3162691e5.roa
File: 3d3b872a-6456-3cf2-9c9f-b5b3162691e5.roa (raw, json)
Hash identifier: BV+6F0MuDy6Ekqbl47tZIHL2jfAHvaYYBtxQXb55L+w=
Subject key identifier: 76:FF:2B:60:13:D3:6F:71:4C:38:9E:F6:E4:64:47:CB:19:97:FB:13
Certificate issuer: /CN=dcf7f6fb-0bae-4c21-bcf2-2f998541db3f
Certificate serial: 010D0C9F432858485A057ED08B79635D89C97100
Authority key identifier: CC:2F:9D:6D:CC:B6:1C:CE:1E:E3:50:39:63:91:EA:63:D1:8F:B8:02
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dcf7f6fb-0bae-4c21-bcf2-2f998541db3f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dcf7f6fb-0bae-4c21-bcf2-2f998541db3f/3d3b872a-6456-3cf2-9c9f-b5b3162691e5.roa
Signing time: Sat 28 Dec 2024 02:00:38 +0000
ROA not before: Sat 28 Dec 2024 02:00:38 +0000
ROA not after: Fri 28 Mar 2025 01:00:38 +0000
asID: 400701
IP address blocks: 2602:fb74::/36 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:5a:05:7e:d0:8b:79:63:5d:89:c9:71:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcf7f6fb-0bae-4c21-bcf2-2f998541db3f
Validity
Not Before: Dec 28 02:00:38 2024 GMT
Not After : Mar 28 01:00:38 2025 GMT
Subject: CN=f9525e50-e364-4e37-b073-d4a39223be61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:91:0e:36:d4:93:d3:c5:f5:43:51:26:bb:4d:
d1:9d:d2:d9:63:cf:3b:83:f6:5a:a1:33:21:ec:fb:
22:4a:ef:07:ea:f8:53:73:dd:3a:bb:c9:07:6e:3b:
98:8d:a4:a7:ab:81:1a:9e:27:7e:37:c9:54:77:71:
9a:21:c7:60:92:a0:e2:51:72:20:85:af:7c:90:76:
be:76:80:98:af:d9:64:24:30:e4:84:62:78:9c:08:
9e:15:70:5b:07:9d:7b:3c:f9:67:87:61:ef:c8:b8:
1e:00:ba:2f:69:9c:e5:f9:11:af:c3:ef:22:8c:4e:
fc:a9:57:8c:c3:52:80:32:9b:94:9e:e9:2e:77:61:
58:b7:74:2f:39:3e:78:53:05:b3:b6:2a:44:cc:2f:
85:74:be:72:44:be:bb:82:02:77:b0:ac:3f:40:90:
ab:80:94:3c:a9:74:b6:6b:ca:c1:75:d3:5a:09:6f:
ef:46:10:d7:7b:12:11:0d:4f:3e:88:7c:aa:05:bb:
6e:ef:fe:b8:ff:25:38:b5:df:d4:4c:03:45:77:c8:
2b:31:bd:e6:90:0d:1c:c8:2d:54:4d:85:9b:26:11:
f1:96:93:98:bd:d9:48:37:80:a5:b3:08:37:61:26:
f0:d7:86:57:41:f8:8c:1a:17:8d:7e:9f:f9:eb:93:
0b:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:FF:2B:60:13:D3:6F:71:4C:38:9E:F6:E4:64:47:CB:19:97:FB:13
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dcf7f6fb-0bae-4c21-bcf2-2f998541db3f/3d3b872a-6456-3cf2-9c9f-b5b3162691e5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dcf7f6fb-0bae-4c21-bcf2-2f998541db3f/dcf7f6fb-0bae-4c21-bcf2-2f998541db3f.crl
X509v3 Authority Key Identifier:
keyid:CC:2F:9D:6D:CC:B6:1C:CE:1E:E3:50:39:63:91:EA:63:D1:8F:B8:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dcf7f6fb-0bae-4c21-bcf2-2f998541db3f.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:fb74::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
37:0e:4b:33:3f:44:88:35:6f:cf:60:f6:67:7c:b5:46:9d:bb:
26:4a:18:70:c5:36:91:64:3c:6a:91:18:87:a7:2a:75:94:2e:
2d:5b:59:2f:9c:39:c6:9f:70:32:5b:4d:3b:af:66:f6:77:4b:
b3:64:d5:50:1a:2e:ad:cb:a9:4d:ed:c5:c5:85:fa:c2:ba:a8:
64:3e:a4:69:24:dc:cc:95:5a:52:a6:e6:d4:df:8b:e3:5c:94:
6f:45:a6:64:05:7b:59:25:50:aa:0f:9d:ee:57:32:01:7a:3c:
a0:cb:39:82:69:9c:44:5b:92:78:ad:3d:d2:67:8d:68:ac:97:
0e:43:9a:23:f0:14:f3:b7:a6:a7:5f:15:2b:63:59:de:59:90:
44:a2:4f:ac:8e:14:cc:33:89:11:67:fc:fc:1a:39:74:93:c6:
30:85:1d:97:b0:6d:94:79:77:aa:e6:cb:b7:cb:34:16:96:1e:
e5:44:ee:ea:07:ec:a0:67:2d:c1:cc:a4:65:e6:e1:2b:97:5f:
90:d6:b2:d2:20:6b:f5:23:82:90:cc:5d:35:f4:28:51:a6:4f:
7d:17:a8:20:f4:b5:bd:24:01:03:5f:a5:72:63:59:d6:d6:b2:
4d:69:00:e1:5c:ed:a4:f9:12:20:e0:dd:03:28:7f:0f:a4:41:
2b:e5:8b:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 21:05:31 2025 by rpki-client