Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/cffa80ce-dddf-3206-be5e-b60edcafd97d.roa
File: cffa80ce-dddf-3206-be5e-b60edcafd97d.roa (raw, json)
Hash identifier: ALbfLcCHwAhTGcrzv3BNGA4+ghVeGj89amAvXNV+csI=
Subject key identifier: 90:09:4E:C7:53:60:E5:DA:E1:DC:E7:50:3D:96:96:E5:39:B4:B4:2E
Certificate issuer: /CN=158d5f15-a892-4134-840b-026e68357d71
Certificate serial: 010D0C9F43285848064507A56750083C2367F080
Authority key identifier: 2E:21:55:11:DC:0A:3B:36:0C:CD:F2:06:D4:9D:E6:DF:C9:C7:39:BA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/cffa80ce-dddf-3206-be5e-b60edcafd97d.roa
Signing time: Thu 28 Nov 2024 02:00:38 +0000
ROA not before: Thu 28 Nov 2024 02:00:38 +0000
ROA not after: Wed 26 Feb 2025 02:00:38 +0000
asID: 210645
IP address blocks: 2602:2c9:2::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:06:45:07:a5:67:50:08:3c:23:67:f0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=158d5f15-a892-4134-840b-026e68357d71
Validity
Not Before: Nov 28 02:00:38 2024 GMT
Not After : Feb 26 02:00:38 2025 GMT
Subject: CN=2c358f98-06cf-49f5-812e-5145af800114
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:dd:9e:5e:63:60:0b:24:38:de:51:93:10:8d:
b6:af:5a:40:42:d0:a5:7e:5e:d3:e1:fd:0f:00:68:
47:8a:60:f3:07:75:af:ac:b3:84:4c:d1:a5:cd:3b:
bb:bd:01:b7:00:34:70:dd:38:9c:e7:97:1f:de:ce:
ed:46:b1:0a:cb:8f:45:f2:f2:da:76:24:2b:bc:fe:
39:7f:d7:24:e1:bd:f5:8d:c8:03:07:2a:26:8b:77:
23:f7:c4:87:c9:d5:4a:96:ef:45:9b:e3:ee:29:ea:
54:dc:51:8a:36:e6:59:09:5e:1b:e0:2a:a8:26:dd:
dc:75:c7:8d:19:e5:7d:c9:e5:62:27:fa:65:be:66:
71:bc:b3:59:41:61:3a:99:af:c2:df:53:01:ee:8e:
5a:7f:51:bb:d3:ed:b9:4d:a9:7a:6c:90:f7:14:da:
e3:10:0f:3f:58:47:d4:05:d6:4e:7b:8a:6b:c9:a8:
1a:90:ff:11:a6:66:c3:44:1f:d7:6e:bc:61:e9:47:
61:55:3f:84:b6:06:43:73:a2:9a:fb:18:0a:ca:90:
f1:be:e0:66:a4:1f:6c:e1:21:12:fc:5d:87:e0:7c:
06:e4:b0:f6:3a:7b:38:7f:03:c5:d0:06:c4:3c:44:
74:98:4c:87:a6:93:a0:7c:2f:64:9d:d2:a4:64:b2:
50:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:09:4E:C7:53:60:E5:DA:E1:DC:E7:50:3D:96:96:E5:39:B4:B4:2E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/cffa80ce-dddf-3206-be5e-b60edcafd97d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/158d5f15-a892-4134-840b-026e68357d71.crl
X509v3 Authority Key Identifier:
keyid:2E:21:55:11:DC:0A:3B:36:0C:CD:F2:06:D4:9D:E6:DF:C9:C7:39:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:2c9:2::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
18:0c:f5:be:bf:a3:b0:ba:d2:09:20:84:79:c5:3e:0c:06:4e:
40:64:7b:ff:f8:6e:a8:74:b8:b6:0d:4c:cd:c8:e8:48:68:0d:
8f:01:98:f4:c0:e5:57:63:92:72:dc:ad:c6:5c:34:cb:b8:0f:
95:b3:cc:fa:57:31:bc:a8:6b:66:dd:9f:84:9e:2d:13:d1:8a:
e2:c7:ec:20:f9:81:c6:53:cb:b5:63:ed:12:47:3d:f0:97:87:
bf:3e:42:a6:32:7b:da:64:17:47:98:93:35:ae:a1:a6:59:3b:
c3:a7:ee:42:f5:19:a2:6e:33:57:18:af:06:cd:58:08:dd:6b:
5a:b1:6d:9f:da:f6:c2:ab:01:71:d3:f4:b8:b2:0a:bd:dd:cb:
7b:9b:80:b4:57:82:9a:0c:fa:0b:dd:6c:8a:b1:8c:7c:e3:19:
74:84:9a:1b:05:01:53:8d:88:2b:f9:f8:cf:eb:6c:cf:df:02:
19:f6:a7:6a:70:b3:fa:19:cc:95:57:ad:e2:44:ed:ee:c2:b8:
80:7e:ab:a3:0f:31:1d:d3:9c:55:d0:2e:b1:e6:2a:00:76:51:
13:7f:6b:0e:1e:a1:be:54:fd:62:6b:3b:90:1f:9f:2c:83:6d:
e6:0a:d2:65:93:13:7b:58:23:51:24:d9:01:e1:7a:3b:17:b3:
e2:37:1a:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 23:56:40 2025 by rpki-client