Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4aeeea60-e12e-4570-a310-cac6f50c2bef/7bb7f7a5-c834-38c1-b5d7-b9693c9ee10e.roa
File: 7bb7f7a5-c834-38c1-b5d7-b9693c9ee10e.roa (raw, json)
Hash identifier: RSLx7Q5ZGWpWgAB+3kNbAgOb5JM6W8i5TR8ZVtCFXjo=
Subject key identifier: 10:BE:7C:CB:0E:ED:5A:C8:5A:60:11:2B:BE:F9:3D:6D:19:54:B8:1A
Certificate issuer: /CN=4aeeea60-e12e-4570-a310-cac6f50c2bef
Certificate serial: 010D0C9F432858484C1025D03715F3ECD8CCB000
Authority key identifier: A4:90:E4:D6:08:C1:5F:55:64:10:75:70:7D:C1:E6:A5:2D:43:9D:8F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4aeeea60-e12e-4570-a310-cac6f50c2bef.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4aeeea60-e12e-4570-a310-cac6f50c2bef/7bb7f7a5-c834-38c1-b5d7-b9693c9ee10e.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 210630
IP address blocks: 2602:fc24:10::/48 maxlen: 48
2602:fc24:11::/48 maxlen: 48
2602:fc24:12::/48 maxlen: 48
2602:fc24:13::/48 maxlen: 48
2602:fc24:100::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:10:25:d0:37:15:f3:ec:d8:cc:b0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4aeeea60-e12e-4570-a310-cac6f50c2bef
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=658a9bc3-e380-4a60-9798-aa5b6f219d03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:0b:f5:dc:03:57:6d:17:d5:2d:83:2b:5c:b5:
cc:a8:10:a2:99:2e:d2:78:47:10:36:c3:70:2d:d8:
d9:e0:52:2a:75:93:d2:89:10:51:9d:51:b4:95:f2:
1f:9c:61:ef:b7:5d:f8:36:4e:a1:86:78:41:85:e8:
75:25:ea:78:a7:39:2d:bd:41:56:c5:27:56:34:15:
d2:b7:10:18:a3:f0:75:8f:23:d0:5b:02:4a:14:74:
ab:d9:f5:c1:26:70:23:cb:25:29:aa:96:99:75:35:
da:0d:d9:65:e2:7c:49:56:c6:df:a1:65:77:0c:dc:
cf:7f:69:ef:c1:f5:c3:e1:2f:2a:5b:1e:25:c0:0f:
41:af:62:60:e7:85:e9:1e:b7:0f:ff:82:97:37:d5:
8a:ce:da:c1:7e:08:70:e9:c1:ed:02:0a:e6:ba:eb:
cf:c7:e8:6b:da:00:b9:64:ad:66:0d:06:b5:26:56:
43:74:c0:14:46:be:b8:83:7e:ff:2e:53:3c:37:d3:
d5:1f:a1:b0:f1:93:c7:83:4f:b3:90:ed:2e:51:e3:
b7:7c:8f:ac:c8:63:a8:06:fd:62:03:7c:c9:45:22:
78:ec:e5:14:23:b6:3d:13:a9:14:9c:09:54:91:83:
39:1c:ef:ba:e1:9d:29:dc:af:ad:61:8e:e2:74:83:
34:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:BE:7C:CB:0E:ED:5A:C8:5A:60:11:2B:BE:F9:3D:6D:19:54:B8:1A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4aeeea60-e12e-4570-a310-cac6f50c2bef/7bb7f7a5-c834-38c1-b5d7-b9693c9ee10e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4aeeea60-e12e-4570-a310-cac6f50c2bef/4aeeea60-e12e-4570-a310-cac6f50c2bef.crl
X509v3 Authority Key Identifier:
keyid:A4:90:E4:D6:08:C1:5F:55:64:10:75:70:7D:C1:E6:A5:2D:43:9D:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4aeeea60-e12e-4570-a310-cac6f50c2bef.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:fc24:10::/46
2602:fc24:100::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4c:99:09:40:89:52:7e:11:14:20:a6:40:3e:6b:58:20:88:88:
e4:7b:06:3a:37:bf:20:40:a3:03:9c:c9:85:fe:d0:ce:77:8b:
f3:37:ae:f3:d4:3d:0b:31:4f:1c:7f:69:14:7e:f5:2f:5b:b7:
a8:c9:0d:06:d3:c2:e5:d0:76:8a:c2:c5:1c:51:7d:bf:a8:fe:
2f:b3:16:ed:81:32:eb:15:71:18:71:7c:d1:c6:1e:f6:1f:06:
ca:67:ff:ef:18:65:d0:0c:3d:2a:75:d5:22:69:58:2c:a8:5a:
08:ef:a0:0d:78:f7:04:06:5d:9f:fe:af:db:fb:c4:04:53:39:
bb:b7:5e:b6:c7:5a:dc:ee:5b:c9:66:bb:d6:df:5b:02:bd:25:
69:8a:f8:c5:cd:ac:3f:bf:06:be:82:28:d4:9f:c7:12:b8:53:
f5:79:b5:5e:28:bf:e4:c0:ff:5a:93:09:df:fd:d8:7f:3f:cd:
33:23:07:e5:8a:98:d4:2a:4b:50:05:9d:17:5f:ad:e6:19:40:
82:e6:0c:76:33:fa:e5:e6:e6:86:25:aa:e1:62:6f:c5:a0:72:
fa:37:ac:dd:6a:dc:dd:33:de:8e:06:7a:a9:cc:de:d8:47:fb:
d0:9a:0c:ba:4d:a4:ee:c8:63:18:75:39:34:e2:d1:10:2c:5f:
f7:85:e2:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 07:45:53 2025 by rpki-client