Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c772b4b-15fb-4b38-b505-dfe915dae9cd/94c7e28b-2686-3f15-8cb6-e8b3d5538873.roa
File: 94c7e28b-2686-3f15-8cb6-e8b3d5538873.roa (raw, json)
Hash identifier: QlZ+rVCP9ektlh5KtzeGZF5NLpZ4GxedzlxKmLgXVeU=
Subject key identifier: 38:72:96:AD:91:70:A3:DF:01:45:C6:34:F7:A2:01:10:7C:88:83:22
Certificate issuer: /CN=0c772b4b-15fb-4b38-b505-dfe915dae9cd
Certificate serial: 010D0C9F432858486695B907AD59D81CDABC0E00
Authority key identifier: F1:45:52:CC:E6:22:4E:29:4E:15:2D:5C:E4:BD:DD:05:3A:08:B5:72
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c772b4b-15fb-4b38-b505-dfe915dae9cd.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c772b4b-15fb-4b38-b505-dfe915dae9cd/94c7e28b-2686-3f15-8cb6-e8b3d5538873.roa
Signing time: Wed 01 Jan 2025 14:00:53 +0000
ROA not before: Wed 01 Jan 2025 14:00:53 +0000
ROA not after: Tue 01 Apr 2025 13:00:53 +0000
asID: 968
IP address blocks: 2602:809:3008::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:66:95:b9:07:ad:59:d8:1c:da:bc:0e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c772b4b-15fb-4b38-b505-dfe915dae9cd
Validity
Not Before: Jan 1 14:00:53 2025 GMT
Not After : Apr 1 13:00:53 2025 GMT
Subject: CN=c2ccd896-b516-478f-a81b-b2a8e64a53dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:9d:25:c7:c4:4b:6c:f9:e9:e4:f1:b0:cd:80:
cc:81:df:e9:03:d4:4f:ad:e9:d2:2c:ad:33:08:bf:
8e:9d:45:85:98:08:3d:94:45:20:fb:60:74:48:30:
9c:75:c2:e3:03:f7:85:6f:0f:75:e6:4d:ff:20:60:
0a:8d:2d:ff:e1:38:36:ff:ef:42:49:53:d5:e8:a1:
6a:ed:c2:2d:d8:fc:ea:6c:1c:64:1d:d7:a8:4b:1c:
3e:76:34:6e:42:28:5d:52:e6:23:04:8a:f8:47:84:
b2:c2:ec:93:5d:9e:71:58:86:de:c3:7f:38:51:e9:
0c:16:91:8e:2c:c3:4a:30:f7:c2:5b:1b:e0:1f:86:
c2:21:69:08:79:69:e0:03:8a:42:c3:8f:76:b2:3c:
84:02:94:45:77:60:9b:df:72:78:96:ca:d7:f1:06:
e9:84:c4:47:38:fc:66:4b:c7:ae:11:2a:66:81:af:
a1:0c:64:19:85:fa:51:af:15:00:78:c2:19:fe:15:
27:2e:1e:a4:00:df:8e:68:be:4d:3a:28:f0:ed:08:
da:70:a7:e0:b1:ca:cf:e3:1e:32:d5:82:53:af:c5:
e7:d5:bf:8a:0c:fc:8c:49:1a:38:fe:ed:b3:c9:dd:
76:1c:0e:c9:c3:5a:3a:9c:81:3f:a1:37:f7:a0:be:
2f:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:72:96:AD:91:70:A3:DF:01:45:C6:34:F7:A2:01:10:7C:88:83:22
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c772b4b-15fb-4b38-b505-dfe915dae9cd/94c7e28b-2686-3f15-8cb6-e8b3d5538873.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c772b4b-15fb-4b38-b505-dfe915dae9cd/0c772b4b-15fb-4b38-b505-dfe915dae9cd.crl
X509v3 Authority Key Identifier:
keyid:F1:45:52:CC:E6:22:4E:29:4E:15:2D:5C:E4:BD:DD:05:3A:08:B5:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c772b4b-15fb-4b38-b505-dfe915dae9cd.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:809:3008::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
47:d3:3c:da:2a:53:99:88:c5:42:75:74:fa:f9:2a:24:a7:f3:
dd:f2:07:ab:e1:8d:d9:91:fc:2c:30:0a:c5:d0:15:61:58:8e:
11:b7:1e:cd:b0:b0:a0:42:28:d0:a6:d6:ac:de:ff:7c:84:24:
51:4e:80:38:f3:e5:3f:01:ae:05:c5:3e:92:7d:44:31:8e:d8:
f2:1a:75:1e:63:5d:90:12:c2:c2:9b:30:4e:a5:77:c8:82:1f:
a3:a7:eb:d4:e9:af:7e:dc:b3:c4:60:e1:f9:7b:bb:6e:d5:85:
94:9d:e8:59:5a:38:c1:a3:5d:2b:58:ee:63:10:1d:a3:7b:c7:
f0:19:c9:ff:dc:5c:f6:bf:53:bc:bb:a6:1e:7b:3f:53:d3:dc:
1d:fc:b6:9b:5a:5a:98:6e:9e:40:68:43:69:d5:53:35:4d:22:
c5:b5:62:40:5a:4d:9a:4a:97:32:75:83:32:b1:cf:b3:78:73:
27:56:33:49:b5:e9:3b:51:20:c7:4c:0c:66:85:c9:26:38:8f:
e7:cb:78:e8:d3:6c:73:48:b6:8c:9a:6d:6f:25:47:9c:c8:cf:
32:ae:19:ad:35:3a:bc:47:b6:5e:f1:8f:5d:cc:16:b9:82:5d:
6d:2e:e1:0c:e7:04:90:af:0e:44:0f:7d:13:9c:b5:9c:f2:15:
f0:d0:d0:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:11:58 2025 by rpki-client