Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/65192f53-8b07-4c3f-a6b0-e9e42292d31c/8e995a78-3dbd-35dc-834f-2588245e7f22.roa
File: 8e995a78-3dbd-35dc-834f-2588245e7f22.roa (raw, json)
Hash identifier: jEC97kMk57MJGTxk6LuECCf6BhSe1IGM6g6oUfbE/5A=
Subject key identifier: AF:22:8C:E2:57:46:59:C7:A5:03:DF:5E:8D:6F:1C:55:87:0A:26:E6
Certificate issuer: /CN=65192f53-8b07-4c3f-a6b0-e9e42292d31c
Certificate serial: 010D0C9F432858480EA5142E4487C325F3DA7480
Authority key identifier: 42:5F:9D:FB:E3:9D:14:8D:07:C4:35:16:CE:E5:25:0D:38:F6:14:E2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/65192f53-8b07-4c3f-a6b0-e9e42292d31c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/65192f53-8b07-4c3f-a6b0-e9e42292d31c/8e995a78-3dbd-35dc-834f-2588245e7f22.roa
Signing time: Sun 01 Dec 2024 02:00:39 +0000
ROA not before: Sun 01 Dec 2024 02:00:39 +0000
ROA not after: Sat 01 Mar 2025 02:00:39 +0000
asID: 399976
IP address blocks: 2602:814:1000::/40 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:0e:a5:14:2e:44:87:c3:25:f3:da:74:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65192f53-8b07-4c3f-a6b0-e9e42292d31c
Validity
Not Before: Dec 1 02:00:39 2024 GMT
Not After : Mar 1 02:00:39 2025 GMT
Subject: CN=548d3a5b-7f9f-4306-bc7c-96a6ddde8d14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e6:56:2c:d4:ce:74:03:cd:fc:87:e5:91:1a:
b5:43:d3:5f:ab:bd:41:3e:bb:06:3e:61:30:95:1f:
2d:a8:54:1a:03:86:52:eb:fd:22:7e:ad:16:3a:bf:
ec:8d:95:c7:3f:a3:fc:92:76:a0:79:42:a8:88:9e:
fa:a8:75:53:b7:0f:f8:95:77:a4:ac:e4:48:06:53:
9b:b2:00:9b:2d:6a:6f:d9:8c:9e:e9:a2:e7:00:9c:
3b:92:f6:05:00:a9:aa:f2:5c:9d:29:b5:11:9a:f7:
26:04:7c:05:9b:f2:81:a0:5b:91:60:78:e1:df:12:
86:95:e0:3a:fa:76:0e:57:bc:c8:a6:3d:ec:d1:91:
d6:e0:26:3d:69:03:e7:b0:69:be:72:ef:c5:90:29:
f1:e6:53:db:ba:af:be:be:7d:6c:a3:96:4d:cc:c0:
0b:5d:7d:05:5f:b1:af:b0:27:97:34:a3:95:26:ce:
bb:ac:13:72:e5:86:34:58:46:ce:54:e0:e6:89:f4:
bd:fb:04:2e:7b:ef:8d:26:52:18:56:4c:d1:b9:26:
0e:70:ac:32:1f:26:4a:ae:34:45:b5:a4:0f:99:2f:
8b:63:82:af:a1:4c:be:93:55:83:7f:48:ed:33:b6:
47:a6:27:e0:6d:4d:bc:fe:30:a7:dc:71:92:a0:d7:
b3:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:22:8C:E2:57:46:59:C7:A5:03:DF:5E:8D:6F:1C:55:87:0A:26:E6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/65192f53-8b07-4c3f-a6b0-e9e42292d31c/8e995a78-3dbd-35dc-834f-2588245e7f22.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/65192f53-8b07-4c3f-a6b0-e9e42292d31c/65192f53-8b07-4c3f-a6b0-e9e42292d31c.crl
X509v3 Authority Key Identifier:
keyid:42:5F:9D:FB:E3:9D:14:8D:07:C4:35:16:CE:E5:25:0D:38:F6:14:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/65192f53-8b07-4c3f-a6b0-e9e42292d31c.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:814:1000::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
75:d5:97:06:b9:04:0f:de:14:48:97:2d:77:f2:bb:da:1a:db:
c7:9a:ee:a0:80:0b:a9:ec:81:a4:99:50:76:09:9b:64:4c:11:
d2:f7:cc:9a:60:b2:bf:15:35:72:47:d1:d3:20:9b:75:60:f7:
e3:56:da:99:91:38:2f:49:50:fe:b2:15:5d:eb:3f:6f:26:bb:
e7:30:61:e2:af:98:10:3a:d7:bd:38:38:c9:87:ea:9b:a0:a0:
02:2a:60:a0:76:76:c2:75:b1:76:96:ad:80:34:f3:7b:75:de:
51:62:bd:f3:de:7e:75:2b:04:36:7e:1d:73:a6:e3:15:23:a3:
2d:6f:e7:52:8c:c7:04:14:32:f9:ae:2b:42:27:93:59:0f:d4:
36:dc:fb:70:88:bb:0c:90:c6:61:d5:bc:2e:59:2c:d8:f8:5a:
16:09:6e:9b:9c:23:22:36:0c:65:24:dd:63:76:24:dd:85:1b:
87:58:fc:89:a6:ef:8d:59:af:f0:14:e6:ed:94:ee:73:f7:9a:
53:35:06:a8:5b:86:45:d5:48:78:12:15:77:f7:2e:7f:d8:1f:
b5:0a:d7:9a:9a:46:e8:26:da:13:77:c2:0b:fd:19:c5:a1:aa:
ce:ea:45:b0:e3:40:e2:1c:cb:ca:b4:ed:17:f8:e3:4f:91:0a:
50:57:a3:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 23:40:49 2025 by rpki-client