Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7bebf1fd-be49-4771-87fb-2d0488be4cab/4570ad1f-c97b-3736-a481-a836efbbee20.roa
File: 4570ad1f-c97b-3736-a481-a836efbbee20.roa (raw, json)
Hash identifier: sh/q2H5XWHrM7rYT107A5/ZTIvknfc/3Mcpph6ZNHYk=
Subject key identifier: 2F:79:86:72:71:B7:B8:F9:66:AB:4F:00:A9:23:89:EC:F8:4C:01:DE
Certificate issuer: /CN=7bebf1fd-be49-4771-87fb-2d0488be4cab
Certificate serial: 010D0C9F43285848143A746B548445A9E99F7580
Authority key identifier: A6:AD:23:24:BF:14:90:C2:B8:53:86:42:68:F2:81:07:01:EB:97:40
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7bebf1fd-be49-4771-87fb-2d0488be4cab.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7bebf1fd-be49-4771-87fb-2d0488be4cab/4570ad1f-c97b-3736-a481-a836efbbee20.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 48851
IP address blocks: 2602:fd59::/36 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3a:74:6b:54:84:45:a9:e9:9f:75:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bebf1fd-be49-4771-87fb-2d0488be4cab
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=c25382ff-facc-4dbf-90a0-fc78578cbbbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:44:37:06:ab:d6:46:2c:82:a9:f4:90:1f:bd:
42:83:a3:fe:dc:f4:bb:ce:46:87:5d:ac:dc:f2:0b:
ff:e0:d8:77:4c:d9:86:a6:6f:ea:87:a4:90:b3:d3:
ed:2f:ea:1a:e1:70:9d:9b:27:b4:1a:4e:19:12:c9:
f0:3a:4b:7d:ab:fe:8b:c1:98:58:01:e4:16:91:41:
3f:cf:54:ad:da:a1:53:92:38:ff:fa:85:67:46:46:
cb:ca:8a:b9:4b:ab:8a:58:44:92:2d:75:04:8e:ee:
47:01:d5:65:c6:4b:f4:14:5b:df:03:06:f0:db:e6:
c8:e9:76:0b:39:30:79:eb:16:4b:66:a1:b2:41:01:
73:f2:7b:8a:4e:af:0d:96:54:c0:b9:48:48:f2:5a:
54:e2:5f:72:d9:3c:94:45:3d:c6:6b:8b:0f:36:dc:
5c:77:bd:dc:df:84:39:9d:d2:de:fc:58:16:e6:02:
5f:4c:a1:4c:88:ad:dc:70:7f:a2:f9:0e:ff:93:ce:
a3:80:83:c1:ca:44:fb:23:33:d6:90:94:71:dd:09:
e4:f6:53:36:cd:da:e9:93:b4:90:da:f5:86:92:b5:
c0:d4:df:22:c0:c5:ab:32:fb:1c:5b:36:cd:97:2f:
11:c6:00:93:ff:93:51:46:1f:cc:74:45:ae:f3:f4:
e5:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:79:86:72:71:B7:B8:F9:66:AB:4F:00:A9:23:89:EC:F8:4C:01:DE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7bebf1fd-be49-4771-87fb-2d0488be4cab/4570ad1f-c97b-3736-a481-a836efbbee20.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7bebf1fd-be49-4771-87fb-2d0488be4cab/7bebf1fd-be49-4771-87fb-2d0488be4cab.crl
X509v3 Authority Key Identifier:
keyid:A6:AD:23:24:BF:14:90:C2:B8:53:86:42:68:F2:81:07:01:EB:97:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7bebf1fd-be49-4771-87fb-2d0488be4cab.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:fd59::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4c:37:71:ed:03:d6:af:3a:e2:94:a4:85:af:e1:13:bf:e5:29:
48:35:df:dd:76:b0:4c:dd:0a:4d:fc:91:e7:cc:1b:da:db:6e:
d0:45:2d:a9:72:f6:91:78:68:9f:7a:5b:d6:e1:bb:3e:c6:69:
37:12:24:29:c4:29:c1:15:51:b1:ea:cf:e6:7e:02:02:66:01:
11:5c:e6:cb:f8:03:87:59:ec:12:d6:7e:05:72:c8:7f:34:d8:
0f:bb:d0:cf:a2:c7:8b:cc:49:0a:96:30:c4:7a:83:6c:af:fc:
19:0e:aa:ec:dd:d2:1d:28:bf:8f:2e:42:44:43:1a:5d:22:70:
c1:2c:69:f7:b8:b4:c0:75:9f:e0:71:a6:eb:67:a8:1d:8f:18:
c2:7c:3c:40:50:24:a8:21:b5:d1:61:54:85:00:75:06:c8:ef:
f4:16:b0:d1:b8:3a:3f:f8:e5:b7:4a:56:14:9b:f7:fc:3d:ca:
d5:58:84:c6:ea:aa:e1:c6:cf:30:58:b9:e7:2c:98:78:ff:ab:
69:b7:34:4c:0f:ac:75:d2:97:ba:25:81:0c:e1:44:48:d0:73:
cb:66:35:6d:cc:c5:c2:ba:b8:44:63:f9:ab:13:cd:de:85:0a:
7e:e3:91:d5:e5:dd:45:a2:0f:31:72:8d:97:32:92:48:68:1f:
44:e0:66:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:56:22 2025 by rpki-client