Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f1b5aa9-fc5a-4fb7-892d-0fabf9b63814/a05e816d-14ac-367c-876a-ed9f65d71b90.roa
File: a05e816d-14ac-367c-876a-ed9f65d71b90.roa (raw, json)
Hash identifier: uw32AV/ZJOFbI0eWo1tYquCl2KS85V+DQa2Pmq9XQrc=
Subject key identifier: A8:22:E0:64:EA:69:3E:D4:89:69:71:D0:F2:28:B6:CC:28:AB:CC:CE
Certificate issuer: /CN=3f1b5aa9-fc5a-4fb7-892d-0fabf9b63814
Certificate serial: 010D0C9F43285847FF4A477030FFE609F24A3100
Authority key identifier: AE:5A:17:D4:5E:19:27:94:CE:6C:CF:74:F7:18:5D:98:55:8B:CD:9B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f1b5aa9-fc5a-4fb7-892d-0fabf9b63814.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f1b5aa9-fc5a-4fb7-892d-0fabf9b63814/a05e816d-14ac-367c-876a-ed9f65d71b90.roa
Signing time: Mon 25 Nov 2024 14:00:39 +0000
ROA not before: Mon 25 Nov 2024 14:00:39 +0000
ROA not after: Sun 23 Feb 2025 14:00:39 +0000
asID: 35008
IP address blocks: 2602:2d5::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ff:4a:47:70:30:ff:e6:09:f2:4a:31:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f1b5aa9-fc5a-4fb7-892d-0fabf9b63814
Validity
Not Before: Nov 25 14:00:39 2024 GMT
Not After : Feb 23 14:00:39 2025 GMT
Subject: CN=e30697bb-578e-4c7f-b3b9-25bc733aa056
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:2d:4b:f8:c2:15:fd:2c:fb:c5:c4:3e:a9:39:
75:4f:15:6d:33:c9:29:d1:14:44:67:2c:21:95:94:
00:4f:c8:70:f5:ba:3b:af:e8:0d:4a:3c:3b:58:7a:
7b:fe:d1:7a:b1:45:a0:ad:83:7a:7c:f2:a5:fb:d0:
67:64:01:d2:8c:ae:2d:ee:a2:1b:da:3b:96:b1:3b:
59:42:a4:ad:73:ec:f3:bb:c0:32:b9:5c:60:73:32:
e8:aa:1a:44:57:97:c2:ca:d8:93:15:51:92:0e:4c:
db:1b:53:70:3b:37:39:56:77:85:1b:93:aa:75:4d:
bb:c2:39:34:0e:b9:3c:4a:ea:2e:5c:16:c5:ce:f8:
ca:2c:99:c2:79:f1:a4:2c:0b:7d:ea:76:81:1d:42:
41:f2:0d:20:1c:66:ac:81:2d:51:24:01:2e:c0:d9:
91:89:c6:f6:49:d1:d6:5c:05:35:fc:7d:18:46:8d:
e2:30:74:88:de:88:39:39:7f:72:07:c1:ea:ea:35:
64:4b:cc:f8:18:88:ee:08:03:2a:04:39:bf:fc:42:
4d:28:a4:e3:a0:3c:2d:f6:91:46:a5:69:0d:c9:d3:
00:44:44:f7:a2:92:00:ea:6e:bb:6f:91:37:96:97:
8f:82:a7:ae:f7:7e:d5:c8:18:c2:97:91:e7:1c:a3:
d8:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:22:E0:64:EA:69:3E:D4:89:69:71:D0:F2:28:B6:CC:28:AB:CC:CE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f1b5aa9-fc5a-4fb7-892d-0fabf9b63814/a05e816d-14ac-367c-876a-ed9f65d71b90.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f1b5aa9-fc5a-4fb7-892d-0fabf9b63814/3f1b5aa9-fc5a-4fb7-892d-0fabf9b63814.crl
X509v3 Authority Key Identifier:
keyid:AE:5A:17:D4:5E:19:27:94:CE:6C:CF:74:F7:18:5D:98:55:8B:CD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f1b5aa9-fc5a-4fb7-892d-0fabf9b63814.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:2d5::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
30:a9:ea:35:b2:d7:a7:e3:81:b9:1f:04:bb:26:de:2c:2a:ee:
56:bb:65:c1:aa:41:d2:3f:a1:70:c6:aa:bd:2c:2e:7c:e1:bc:
0c:38:a3:c6:3a:f2:ef:06:37:bd:ae:f6:e9:71:13:16:c3:bd:
85:16:8f:33:32:57:68:87:3f:81:df:4f:08:07:83:d8:cd:7e:
e8:51:a0:5f:87:12:73:27:97:70:8b:d3:70:a1:24:08:76:3e:
10:46:0a:e0:23:cc:8b:d5:02:1f:f4:93:8b:3a:5f:5b:2c:1f:
df:10:d7:09:5c:97:94:9a:b9:01:93:27:55:0f:38:1d:d3:96:
cc:eb:00:81:26:46:9a:34:b3:5f:b6:16:1f:4b:04:f1:e9:2b:
7f:b3:18:74:a5:75:1d:99:65:1a:d2:ec:4d:93:cb:e2:71:70:
a0:a3:36:b2:75:6b:0b:ef:e5:db:94:bd:56:fb:67:06:8b:d6:
65:31:a8:1c:97:fd:9b:18:0e:0c:3a:a3:8c:72:9b:27:1b:9d:
ba:ab:64:c6:87:81:f7:d4:70:31:2f:9e:f8:63:b9:d6:a0:a9:
74:5d:88:b0:74:10:a8:fd:ae:43:5c:70:6f:9c:32:6d:eb:86:
bb:d4:d7:2d:97:e5:ad:dd:50:f1:48:ac:19:6a:86:22:da:b0:
86:ca:cb:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:50:56 2025 by rpki-client