Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/443e93d6-47f3-4dff-a7d2-d7de4a2a04ce/38aa2871-1127-35de-be08-5b917c38fae4.roa
File: 38aa2871-1127-35de-be08-5b917c38fae4.roa (raw, json)
Hash identifier: pK4JWEFRMh4rBLo6F7KGVV9Ej3Ujs1QRGrhlTRuU3BY=
Subject key identifier: EC:F6:A4:85:5A:C9:DC:E7:C6:51:BF:DF:4F:A0:63:DD:94:13:EB:FA
Certificate issuer: /CN=443e93d6-47f3-4dff-a7d2-d7de4a2a04ce
Certificate serial: 010D0C9F432858480EA50F1E9F358C1CA3C92680
Authority key identifier: A0:76:4E:8D:13:F2:EB:39:E7:16:02:EC:C0:26:5D:8A:D5:93:E2:5B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/443e93d6-47f3-4dff-a7d2-d7de4a2a04ce.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/443e93d6-47f3-4dff-a7d2-d7de4a2a04ce/38aa2871-1127-35de-be08-5b917c38fae4.roa
Signing time: Sun 01 Dec 2024 02:00:39 +0000
ROA not before: Sun 01 Dec 2024 02:00:39 +0000
ROA not after: Sat 01 Mar 2025 02:00:39 +0000
asID: 16509
IP address blocks: 2602:2df::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:0e:a5:0f:1e:9f:35:8c:1c:a3:c9:26:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=443e93d6-47f3-4dff-a7d2-d7de4a2a04ce
Validity
Not Before: Dec 1 02:00:39 2024 GMT
Not After : Mar 1 02:00:39 2025 GMT
Subject: CN=b5efeeec-671b-45c1-a620-415e90468678
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:db:f7:50:75:bc:61:f7:c2:5e:9f:77:cf:0a:
87:ac:ba:6d:0d:e5:13:f4:27:53:96:e7:54:ea:84:
c4:3e:a9:5b:1e:e4:13:57:04:02:99:3b:31:2c:83:
62:37:08:98:19:af:f6:6a:e1:6c:30:d5:fd:6b:08:
28:85:46:8b:9e:34:4d:27:e1:e1:6e:1f:bf:4b:8d:
e1:40:eb:b2:ab:98:d9:1b:54:d5:ad:8c:11:bf:94:
2f:d8:b8:1b:05:42:6c:7b:f5:e1:ba:d1:1a:8e:1c:
18:49:b8:8d:bc:9f:a2:14:ba:2f:76:43:e7:23:a2:
35:06:24:85:ec:d7:b2:20:f6:4e:ae:bb:e7:43:68:
91:97:1b:18:a6:e3:cb:72:f6:6a:76:03:72:aa:d6:
f4:9c:f4:18:86:4c:f3:15:42:aa:51:ad:0b:be:15:
86:25:79:eb:f4:c6:f2:df:bd:25:6a:3e:03:b5:e6:
4a:bf:ca:83:6d:62:9e:27:b5:28:4c:c8:6e:e4:5b:
e6:db:b3:d3:0b:82:0b:38:44:d1:8f:fa:da:7e:26:
56:37:3e:e4:7e:49:13:d5:e6:1f:4b:af:c3:f8:b3:
7b:fd:cc:b7:69:11:56:8c:2d:42:30:cd:8c:5c:8c:
86:69:1c:53:ad:fb:23:ec:44:77:71:41:d0:d8:c4:
8b:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:F6:A4:85:5A:C9:DC:E7:C6:51:BF:DF:4F:A0:63:DD:94:13:EB:FA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/443e93d6-47f3-4dff-a7d2-d7de4a2a04ce/38aa2871-1127-35de-be08-5b917c38fae4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/443e93d6-47f3-4dff-a7d2-d7de4a2a04ce/443e93d6-47f3-4dff-a7d2-d7de4a2a04ce.crl
X509v3 Authority Key Identifier:
keyid:A0:76:4E:8D:13:F2:EB:39:E7:16:02:EC:C0:26:5D:8A:D5:93:E2:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/443e93d6-47f3-4dff-a7d2-d7de4a2a04ce.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:2df::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
00:be:cf:7a:29:ac:10:5c:22:70:07:04:4a:7b:17:44:52:04:
25:74:0d:e8:a4:46:bd:af:ec:d0:f5:98:fe:e3:1e:31:bb:e3:
58:1b:ce:9b:c6:61:30:cf:a7:90:4c:26:4f:3a:7a:cb:f2:5f:
ea:18:9a:10:d3:33:e4:04:1c:f0:22:5c:e8:14:61:72:5e:bc:
2b:b6:c2:82:e9:65:61:6e:69:59:d0:e6:96:1f:0f:f3:44:7b:
c4:ad:e4:14:f7:3c:3d:82:e7:14:d3:a4:b8:3d:29:98:31:5f:
b1:26:3d:df:d2:aa:40:d3:cd:9e:88:1a:00:f7:76:f9:23:c5:
f1:6c:6a:e9:d5:a3:e9:76:96:67:3b:ec:dc:a2:89:a5:a5:9e:
86:ec:f7:d8:47:00:bb:66:cf:e4:0d:05:65:a3:d7:fc:af:8b:
c8:32:00:0e:bf:ba:4f:b2:5f:b5:dd:09:3d:a4:a4:1c:47:90:
fe:39:36:3c:ed:ac:a8:ad:91:a4:54:c1:28:e3:ca:cc:ca:59:
7f:b3:7e:67:ab:8c:8d:51:86:10:f0:40:e0:a2:f6:86:f0:f5:
30:89:60:c0:7f:ec:70:e8:db:ce:21:8b:14:91:dd:f7:39:d6:
0d:50:f3:e4:b9:2b:43:ce:21:e9:cc:76:2b:ca:b9:0f:ab:ef:
c0:9a:a2:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:25:41 2025 by rpki-client