Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/3be9c053-770e-31e3-93e1-7b7b5a308e4d.roa
File: 3be9c053-770e-31e3-93e1-7b7b5a308e4d.roa (raw, json)
Hash identifier: LUcySZxJ9u+EI4C9pEhAcMFcjc4os43GMqSkFeiQDaU=
Subject key identifier: 86:22:FD:4D:D6:21:8B:B9:7A:C1:A7:14:9F:93:24:42:98:8B:77:A0
Certificate issuer: /CN=9d06ed66-9fdd-4048-8645-e33e8cec1d41
Certificate serial: 010D0C9F4328584838855EFFF08069552A878CB0
Authority key identifier: 02:44:4D:5E:6D:0A:9E:ED:FD:DC:F5:34:D7:31:63:B9:CB:7A:C2:0C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/3be9c053-770e-31e3-93e1-7b7b5a308e4d.roa
Signing time: Mon 16 Dec 2024 02:00:39 +0000
ROA not before: Mon 16 Dec 2024 02:00:39 +0000
ROA not after: Sun 16 Mar 2025 01:00:39 +0000
asID: 1218
IP address blocks: 2602:fdaa:80::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:38:85:5e:ff:f0:80:69:55:2a:87:8c:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d06ed66-9fdd-4048-8645-e33e8cec1d41
Validity
Not Before: Dec 16 02:00:39 2024 GMT
Not After : Mar 16 01:00:39 2025 GMT
Subject: CN=2a150d9b-18c2-49ca-8bb5-143a37e38875
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:21:eb:cd:de:a5:21:97:b4:46:68:c1:d7:cc:
29:22:a3:f9:33:d2:44:73:e7:e3:a0:b3:11:73:a0:
05:87:3d:af:e8:8f:01:e3:0d:59:93:1e:33:6f:2b:
46:f1:69:2b:28:8a:95:1e:5d:25:7b:fc:bf:9a:51:
b0:f8:ed:7e:a5:a6:9b:80:35:3a:c7:ae:ad:12:3b:
c5:41:ea:eb:c7:97:29:e9:e4:3a:6e:bd:8a:6f:2f:
fc:16:a3:5c:b7:e5:f0:cc:88:5f:64:fd:31:8b:81:
a1:01:23:1e:5f:8e:49:12:82:71:94:77:2b:4f:67:
00:22:8c:d7:5b:20:f7:6f:ca:2e:0a:d1:99:0d:18:
60:29:90:85:39:b7:f7:35:f7:27:0e:34:c1:fa:a8:
1d:35:c5:d0:d4:b4:d1:28:87:83:e2:a2:39:69:ee:
6c:93:8c:19:69:84:fe:a3:c2:29:12:b3:d3:88:72:
be:f4:1a:bb:da:ed:89:aa:80:de:25:7a:0b:ab:28:
5a:64:dd:08:13:2e:2a:b1:0e:f2:59:ad:45:96:da:
15:e6:3f:38:dc:79:e4:50:c9:e9:b0:47:e4:a5:eb:
5b:ba:a2:f3:e2:dc:36:f0:96:74:eb:7b:45:2b:d0:
da:54:77:8b:76:eb:e1:03:a7:72:41:74:ee:7f:fa:
0f:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:22:FD:4D:D6:21:8B:B9:7A:C1:A7:14:9F:93:24:42:98:8B:77:A0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/3be9c053-770e-31e3-93e1-7b7b5a308e4d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/9d06ed66-9fdd-4048-8645-e33e8cec1d41.crl
X509v3 Authority Key Identifier:
keyid:02:44:4D:5E:6D:0A:9E:ED:FD:DC:F5:34:D7:31:63:B9:CB:7A:C2:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:fdaa:80::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1c:f4:ab:68:07:78:13:be:a2:e7:0a:cb:15:95:8b:3f:1b:6e:
e1:94:9b:9a:3c:ce:72:02:cc:ad:f0:7d:5f:6e:ab:77:dd:88:
ff:3b:12:ec:9a:69:48:b6:ee:7f:e6:8c:c2:9d:c9:55:82:00:
15:f9:fb:5e:d4:aa:fd:39:11:5d:b7:df:cc:0d:6b:f1:2f:4b:
bb:cc:da:21:be:d6:94:ae:cb:0a:8f:93:4b:bf:23:c7:9c:e7:
da:c7:b0:d4:81:42:9d:a4:d5:d4:f8:fe:e2:a8:52:07:e1:05:
21:8f:a3:80:89:bb:41:e7:56:68:51:93:89:a5:aa:12:3f:cf:
e4:8c:29:d9:e6:6a:08:83:fd:df:f6:53:25:1c:97:38:ac:5a:
d3:04:20:4c:c8:9d:66:3d:6f:cb:32:97:d4:31:f5:64:95:b7:
82:fc:82:4c:42:56:27:a2:ca:87:ea:44:0c:0d:78:17:64:83:
84:72:2e:20:6f:52:c3:4c:e1:8c:a1:a8:f4:41:df:6c:57:1a:
e1:6e:24:36:15:b6:4f:bb:ac:05:65:ea:04:57:f3:e3:2d:e9:
9f:20:d4:e0:48:80:13:9f:db:3d:bb:70:5b:39:e2:5a:cc:e7:
7b:c9:50:4c:bf:b7:34:1a:1f:c4:af:9b:0e:51:5f:de:7b:03:
37:ad:93:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 21:27:47 2025 by rpki-client