Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7bebf1fd-be49-4771-87fb-2d0488be4cab/a28b22b2-6422-33ee-b15c-696fdbfd2aac.roa
File: a28b22b2-6422-33ee-b15c-696fdbfd2aac.roa (raw, json)
Hash identifier: i/slqvnPTBUK/mhZ3+ajKtgRHgoTLN1hkkR3A2JTjtg=
Subject key identifier: 3C:F9:36:9A:99:67:59:AB:D4:74:B0:A4:B6:15:BC:0F:12:47:5D:FA
Certificate issuer: /CN=7bebf1fd-be49-4771-87fb-2d0488be4cab
Certificate serial: 010D0C9F43285848143A7455A449EE29A1839A80
Authority key identifier: A6:AD:23:24:BF:14:90:C2:B8:53:86:42:68:F2:81:07:01:EB:97:40
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7bebf1fd-be49-4771-87fb-2d0488be4cab.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7bebf1fd-be49-4771-87fb-2d0488be4cab/a28b22b2-6422-33ee-b15c-696fdbfd2aac.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 25773
IP address blocks: 2602:fd59::/36 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3a:74:55:a4:49:ee:29:a1:83:9a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bebf1fd-be49-4771-87fb-2d0488be4cab
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=8147102d-12df-4c96-8e4a-fe0df8dc3f8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:c5:5a:11:55:26:8b:8b:a1:a0:55:cd:ba:41:
3e:c1:17:5b:37:a9:06:76:7e:ea:d7:8b:59:d6:b0:
f6:24:e2:3d:a4:97:50:22:d6:47:29:5b:9c:8b:30:
31:0c:ba:fb:b0:ce:2e:7e:f4:6a:db:f1:b5:ab:1c:
9a:99:30:dc:7a:7b:99:76:cd:45:dd:f0:e5:ae:7e:
72:ad:12:43:2a:ed:c6:1e:02:26:91:9c:c7:a1:58:
65:2b:fd:1c:d8:5a:5e:4b:77:69:0d:d8:96:1f:11:
a8:81:18:89:87:d4:4d:7f:f6:a4:f4:c2:c3:56:ee:
c2:26:fe:71:ef:de:48:a8:d7:a2:f4:ac:82:84:53:
87:c9:d0:b3:10:f9:63:d2:20:23:46:48:19:05:26:
c5:3b:4f:1c:a2:94:77:be:c3:2d:ca:9c:a8:8c:4a:
07:69:2e:69:2a:19:b4:03:7c:48:b8:40:4a:f2:08:
ed:d2:14:34:67:e4:87:ba:c3:b0:99:c8:4d:c4:fa:
35:b4:f1:85:81:a6:e8:2d:0b:6f:e0:32:0d:9b:83:
c4:56:d9:78:42:d3:69:68:63:89:2e:31:51:12:61:
ab:99:7f:d0:d2:af:04:00:be:2a:49:df:e7:f7:b6:
9b:53:38:25:c5:1b:5d:56:09:ad:4c:05:d4:48:f2:
67:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:F9:36:9A:99:67:59:AB:D4:74:B0:A4:B6:15:BC:0F:12:47:5D:FA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7bebf1fd-be49-4771-87fb-2d0488be4cab/a28b22b2-6422-33ee-b15c-696fdbfd2aac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7bebf1fd-be49-4771-87fb-2d0488be4cab/7bebf1fd-be49-4771-87fb-2d0488be4cab.crl
X509v3 Authority Key Identifier:
keyid:A6:AD:23:24:BF:14:90:C2:B8:53:86:42:68:F2:81:07:01:EB:97:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7bebf1fd-be49-4771-87fb-2d0488be4cab.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:fd59::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
67:0d:65:7a:07:1f:c2:52:6e:3d:4d:75:2e:cc:f7:45:4f:85:
de:dd:7c:16:0d:25:8f:50:3b:d9:5d:e5:d5:7d:01:fa:0d:79:
03:33:a6:bc:50:9f:56:28:ee:5a:a9:c4:c3:2d:7d:3f:28:bb:
74:1c:82:b1:e4:b2:00:53:bc:ed:8f:9a:fa:ce:2a:2e:62:82:
7c:cd:8f:c1:ec:f3:d4:6b:bd:2a:3e:0f:b1:a6:74:a5:97:66:
81:63:fb:4b:18:94:5f:d7:3d:f6:f6:77:07:35:ce:06:ee:22:
76:99:be:18:0a:c6:55:69:78:93:8a:5b:b9:ce:f9:67:5e:8d:
78:03:03:c9:57:ce:70:da:db:5f:8c:13:6d:3a:55:69:8b:6a:
06:9a:54:2c:aa:b2:d3:23:cd:1b:11:d1:ca:89:c4:30:23:12:
ab:e9:59:8e:27:ae:cb:af:fa:5c:96:2c:4e:81:17:25:5c:18:
50:53:09:2f:4e:c1:7c:04:4c:04:f1:c0:d5:0d:f8:8c:9a:98:
50:1c:70:ed:ce:a0:24:4e:5b:24:91:5b:4d:7d:34:e4:f0:ad:
9a:fa:77:33:16:4e:be:7a:fa:d4:30:e7:c0:bd:25:39:0d:ee:
9a:e7:6d:c8:15:ca:b5:1e:0b:16:44:89:c6:00:13:67:c0:e2:
86:4d:eb:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 01:41:55 2025 by rpki-client