Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2/639c829e-62a0-3bf9-8fcc-afc0a56075c8.roa
File: 639c829e-62a0-3bf9-8fcc-afc0a56075c8.roa (raw, json)
Hash identifier: 48ySErvOmYV0PBO5En7mSAw7kdzbV9fmPZqY2/9FNVQ=
Subject key identifier: DD:84:E0:D2:AD:B2:2E:EF:9F:98:02:25:A8:D3:99:B8:F4:45:87:3F
Certificate issuer: /CN=3d2279d8-2ed5-4745-9231-9dbd10bbb1a2
Certificate serial: 010D0C9F432858488AE0A997BF14E0EB619606C0
Authority key identifier: 49:BE:C9:98:C8:3E:AE:3F:DD:EA:5C:BD:3A:ED:CA:38:82:81:1E:6E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2/639c829e-62a0-3bf9-8fcc-afc0a56075c8.roa
Signing time: Tue 14 Jan 2025 14:00:51 +0000
ROA not before: Tue 14 Jan 2025 14:00:51 +0000
ROA not after: Mon 14 Apr 2025 13:00:51 +0000
asID: 199203
IP address blocks: 2602:f9a9:1ff::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:8a:e0:a9:97:bf:14:e0:eb:61:96:06:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d2279d8-2ed5-4745-9231-9dbd10bbb1a2
Validity
Not Before: Jan 14 14:00:51 2025 GMT
Not After : Apr 14 13:00:51 2025 GMT
Subject: CN=83f70321-79bd-4ea1-a491-787a6646859c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:b4:2e:e7:ec:bc:73:9d:bd:44:28:f1:0e:bc:
28:3f:2b:49:cc:29:df:f6:fb:70:9d:8f:e2:62:1a:
8a:a3:4e:3c:36:c8:f6:7f:0d:98:9a:6a:0e:f5:8f:
af:26:13:a9:9d:4b:a9:25:eb:55:a7:3b:0d:f6:2d:
0c:89:b4:4e:58:11:b6:87:af:ce:e6:75:28:99:92:
94:6a:17:3d:fc:57:0d:e2:fa:5e:a2:9a:c6:ad:dc:
73:8c:4f:ee:8e:19:a1:64:c8:4c:21:48:c5:5b:2a:
6c:61:fa:21:0d:37:f7:ff:89:20:4c:40:86:43:e8:
a6:8b:09:f6:c1:0e:eb:42:8d:f6:1c:46:5c:bc:3d:
1b:6e:3c:8b:60:b5:c9:3c:ff:9a:fe:95:8b:89:99:
e1:f9:88:88:49:23:93:60:1c:c0:fe:df:db:7d:f2:
52:85:11:5c:9e:78:8f:78:ea:ad:57:67:66:03:16:
33:6e:3a:62:7c:a0:7a:90:db:bc:09:d5:0c:f9:df:
7a:b3:23:34:5e:e9:5e:9a:25:a9:fa:30:dc:5d:78:
20:83:a2:53:a2:90:6a:35:19:e0:54:c4:6e:02:58:
1c:d1:91:2d:52:4b:0c:d6:07:77:a0:1f:84:4b:75:
98:25:16:ef:40:59:c7:c7:cd:ff:3f:de:26:ee:b2:
ee:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:84:E0:D2:AD:B2:2E:EF:9F:98:02:25:A8:D3:99:B8:F4:45:87:3F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2/639c829e-62a0-3bf9-8fcc-afc0a56075c8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2.crl
X509v3 Authority Key Identifier:
keyid:49:BE:C9:98:C8:3E:AE:3F:DD:EA:5C:BD:3A:ED:CA:38:82:81:1E:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:f9a9:1ff::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7f:69:ef:42:6a:83:13:34:01:fe:f8:18:d5:67:8f:07:6e:79:
bd:45:dd:fd:d8:0d:4d:ad:e7:cc:ff:10:fa:8a:b0:3a:1d:f6:
85:77:99:c5:6b:0a:9b:6c:7b:36:1e:8e:97:a2:06:27:d6:a8:
38:5a:62:eb:15:c3:9d:2e:ac:38:fc:06:5e:5f:6c:a3:2f:a1:
29:44:d9:20:b8:0a:3d:63:f8:33:45:5f:af:d2:94:9e:44:9c:
a1:26:da:4c:c2:9a:a6:9d:a9:03:8b:80:4e:8b:7b:1e:f3:f3:
5d:ef:f1:8c:bf:47:ab:0a:d9:bb:12:be:16:ec:ac:c4:2d:90:
2f:3b:c3:02:c9:f9:f4:37:9b:18:75:d8:81:7f:86:cd:e3:1a:
cf:e8:1a:62:cc:29:20:a2:36:90:eb:77:8d:df:48:7a:4d:79:
48:17:27:ce:ba:91:97:d5:33:df:3f:7f:f1:8a:3c:7d:a4:43:
0e:ca:36:96:50:e6:15:7b:03:b0:d2:63:23:38:9f:02:be:99:
20:64:1a:84:71:7a:2c:df:1f:78:21:56:d5:0d:0c:bb:91:49:
ea:0f:a8:f2:2d:d4:e1:9a:e1:0b:2f:15:4c:25:5b:5b:ea:6b:
79:38:51:e5:2a:95:5d:e1:0b:ea:79:c0:08:98:b2:fd:8e:4f:
c4:aa:29:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 12:37:45 2025 by rpki-client