Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a99f9d36-f970-481f-ae52-e74a6f8a7541/ddd19d33-ef02-34c1-abd1-aef2904b7c52.roa
File: ddd19d33-ef02-34c1-abd1-aef2904b7c52.roa (raw, json)
Hash identifier: rxAtvNAigLP9rYxuGMj5Az/uxxn/FOGTxhIiseykc2c=
Subject key identifier: 63:54:97:CA:1E:72:5B:BD:5F:FE:58:8A:7F:21:42:DD:27:F1:16:9E
Certificate issuer: /CN=a99f9d36-f970-481f-ae52-e74a6f8a7541
Certificate serial: 010D0C9F4328584854F2249A7F0A830F6E6C7F00
Authority key identifier: BC:C4:55:41:5B:83:B3:D0:6D:B9:F0:71:80:93:5B:B4:21:99:D3:9B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a99f9d36-f970-481f-ae52-e74a6f8a7541.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a99f9d36-f970-481f-ae52-e74a6f8a7541/ddd19d33-ef02-34c1-abd1-aef2904b7c52.roa
Signing time: Thu 26 Dec 2024 06:22:41 +0000
ROA not before: Thu 26 Dec 2024 06:22:41 +0000
ROA not after: Wed 26 Mar 2025 05:22:41 +0000
asID: 396996
IP address blocks: 2602:f9c8::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:54:f2:24:9a:7f:0a:83:0f:6e:6c:7f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a99f9d36-f970-481f-ae52-e74a6f8a7541
Validity
Not Before: Dec 26 06:22:41 2024 GMT
Not After : Mar 26 05:22:41 2025 GMT
Subject: CN=ec89a48c-ed3b-41d7-b7b6-5e3699a76e51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:b3:2e:1c:2c:27:b6:13:dd:30:b3:24:70:cc:
7e:27:31:c1:8b:0b:e0:31:22:1a:7c:00:fe:65:db:
81:c5:12:25:ca:c6:b3:9f:5e:18:d0:2d:60:fa:97:
6e:76:18:11:70:f6:68:21:c3:d7:16:1b:d6:33:5f:
ca:dd:cc:95:4a:8e:ba:79:a2:84:d5:ab:fc:2d:84:
16:68:0a:d2:8d:f7:40:f9:a5:d1:45:18:2b:24:bd:
a9:d3:85:c1:4b:02:80:9f:fa:90:21:61:cf:58:f2:
46:c1:e6:7d:7c:a1:7b:20:09:d3:d4:6a:8d:9d:f2:
79:6e:f9:11:a7:a0:b3:5c:58:fc:0d:0c:45:ea:3a:
7a:60:52:22:d8:b6:b6:91:83:0c:d2:5b:ae:2c:28:
ba:3a:2d:4d:34:ff:9c:38:3c:7f:ef:88:3a:7c:69:
58:33:ff:00:91:4d:21:e5:8c:d3:cd:79:46:60:a6:
e6:0b:87:79:13:ec:98:af:2a:97:81:58:74:65:91:
76:f8:95:af:16:34:4d:76:9b:04:19:75:ec:8d:93:
d2:75:40:d3:e1:9b:2a:81:9b:a0:82:cd:d0:9b:76:
ba:db:e8:2b:2d:5e:1e:af:7e:fc:5a:46:51:d6:0f:
71:ea:5f:11:04:33:fb:bb:c2:a9:9a:20:4b:e8:37:
c8:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:54:97:CA:1E:72:5B:BD:5F:FE:58:8A:7F:21:42:DD:27:F1:16:9E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a99f9d36-f970-481f-ae52-e74a6f8a7541/ddd19d33-ef02-34c1-abd1-aef2904b7c52.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a99f9d36-f970-481f-ae52-e74a6f8a7541/a99f9d36-f970-481f-ae52-e74a6f8a7541.crl
X509v3 Authority Key Identifier:
keyid:BC:C4:55:41:5B:83:B3:D0:6D:B9:F0:71:80:93:5B:B4:21:99:D3:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a99f9d36-f970-481f-ae52-e74a6f8a7541.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:f9c8::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5c:4f:74:d8:04:9e:ed:f0:b6:cc:ee:71:d0:9d:ef:4c:29:ec:
72:e4:f3:66:17:a9:e7:28:8d:73:55:53:cd:4d:11:2a:0a:7f:
21:2d:25:52:ff:6b:24:0c:8c:1c:23:94:33:2b:a1:55:9b:dd:
e6:f0:24:50:f0:12:1f:f6:05:81:eb:72:d4:86:1f:1e:7c:71:
c7:8c:d3:c4:88:10:24:dc:b0:63:24:23:66:c0:39:71:ec:2c:
0c:d7:0b:a4:c4:8a:ae:a9:0d:da:d9:aa:ec:69:75:50:d8:7f:
c7:b2:8b:b9:df:fe:25:20:6f:da:84:0d:f3:2b:59:a1:91:c2:
f4:37:b7:14:f5:fb:3a:d5:4e:28:97:d9:35:dd:98:9c:f7:25:
bc:df:18:e9:f7:57:63:5e:a1:d2:73:27:6c:36:48:87:02:44:
9c:36:0d:9b:4d:22:5d:77:d9:fd:0f:d2:08:96:26:c8:b3:37:
39:89:88:fb:0c:5f:b2:b5:66:b8:b0:31:47:b5:9d:22:20:fb:
b5:2e:18:7c:f8:a9:f6:b9:0a:90:4b:f6:89:7d:dd:95:22:67:
b4:88:14:b0:6b:7a:c4:e8:12:79:b7:81:58:03:5f:e4:2c:ee:
ef:21:2a:5a:0a:e7:4a:52:3b:62:06:e2:bc:a2:c4:99:5c:b3:
91:69:8b:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:31:05 2025 by rpki-client