Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/813aad25-25fa-4b5c-bb84-15fabea23f87/cf3eb7fa-6f22-3694-a962-2c0233945c68.roa
File: cf3eb7fa-6f22-3694-a962-2c0233945c68.roa (raw, json)
Hash identifier: RbI7wt2cHXTBH91puCwXb2KNgFYnbYOxKAauq4Na1Yo=
Subject key identifier: AD:6E:70:1E:5A:51:40:8A:2C:5A:56:4B:58:67:BF:45:6D:FF:EC:09
Certificate issuer: /CN=813aad25-25fa-4b5c-bb84-15fabea23f87
Certificate serial: 010D0C9F432858487A208C927B866503C055C780
Authority key identifier: 5E:97:21:19:44:A8:9C:ED:47:8B:39:3B:EB:C7:36:9C:33:01:CB:8A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/813aad25-25fa-4b5c-bb84-15fabea23f87.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/813aad25-25fa-4b5c-bb84-15fabea23f87/cf3eb7fa-6f22-3694-a962-2c0233945c68.roa
Signing time: Wed 08 Jan 2025 14:00:51 +0000
ROA not before: Wed 08 Jan 2025 14:00:51 +0000
ROA not after: Tue 08 Apr 2025 13:00:51 +0000
asID: 17024
IP address blocks: 2602:2d1::/38 maxlen: 38
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7a:20:8c:92:7b:86:65:03:c0:55:c7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=813aad25-25fa-4b5c-bb84-15fabea23f87
Validity
Not Before: Jan 8 14:00:51 2025 GMT
Not After : Apr 8 13:00:51 2025 GMT
Subject: CN=890d73cf-2ebb-43ff-8cb3-5159aa3447f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:93:b6:af:34:0c:52:02:83:62:c1:c7:78:a3:
01:7f:70:f9:bc:d0:26:b1:db:5a:af:02:0a:b7:06:
cd:33:f6:1a:7f:ae:c3:4e:58:de:0c:c2:e6:80:42:
2a:cb:4a:ad:e9:2c:19:12:6c:7d:92:7e:b0:bc:24:
8b:6b:d3:be:a5:11:71:73:06:51:a3:a6:ec:57:03:
ed:4b:0b:89:00:bf:8e:7e:a1:03:56:61:82:2f:05:
38:19:4c:58:59:18:da:6c:ab:3c:18:92:81:c8:0b:
35:c0:15:62:c7:5d:45:ee:66:20:d2:06:9c:c7:45:
37:b3:56:d4:50:34:70:2e:d9:77:a8:10:d2:c8:c2:
6a:2f:25:43:be:90:19:83:03:ef:0f:99:6b:ac:ba:
17:df:36:e0:a8:42:f2:25:01:91:62:ac:6c:1c:4a:
46:86:cf:8e:c6:00:54:e0:94:4f:fb:0e:41:d2:69:
8e:82:bf:9c:2a:68:61:54:0e:4f:db:1c:28:fd:59:
f1:13:f4:90:1a:4e:47:ef:ed:88:cc:9a:6e:1b:da:
a6:f2:3c:3d:8a:ed:30:0e:49:25:0a:0d:59:f3:84:
25:8b:40:5d:0f:dd:51:b4:1b:99:fb:3e:c9:08:6c:
bd:4e:06:4d:3f:20:e9:92:9c:0c:7e:2a:d7:f4:e7:
28:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:6E:70:1E:5A:51:40:8A:2C:5A:56:4B:58:67:BF:45:6D:FF:EC:09
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/813aad25-25fa-4b5c-bb84-15fabea23f87/cf3eb7fa-6f22-3694-a962-2c0233945c68.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/813aad25-25fa-4b5c-bb84-15fabea23f87/813aad25-25fa-4b5c-bb84-15fabea23f87.crl
X509v3 Authority Key Identifier:
keyid:5E:97:21:19:44:A8:9C:ED:47:8B:39:3B:EB:C7:36:9C:33:01:CB:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/813aad25-25fa-4b5c-bb84-15fabea23f87.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:2d1::/38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
29:24:b6:3d:a7:08:72:35:d0:33:6a:83:5a:b8:ec:a5:aa:76:
42:2c:a8:95:eb:4b:c0:d3:a5:0d:b7:46:43:2f:00:f2:da:28:
68:d6:80:4e:a1:ae:1d:14:b3:df:96:a3:28:17:5e:fa:ca:f6:
86:72:e0:c6:c0:cd:b3:e2:02:2a:72:22:6b:c1:32:83:3e:97:
16:3e:60:71:dc:f5:97:d9:f6:1e:3c:7c:b4:8d:75:5e:ba:99:
78:0b:fe:86:2e:5e:93:ec:fc:06:af:be:74:8d:c0:25:6e:77:
65:7e:35:88:25:fe:d9:c3:c8:85:45:c2:af:48:1a:a4:bf:cd:
39:d5:5b:68:13:fa:c8:e9:71:5b:79:54:2f:39:db:14:86:ac:
e5:ba:fc:ea:af:d2:4f:85:f8:2c:37:05:32:11:40:13:02:a0:
7e:8b:8d:0c:d6:d8:ba:eb:e2:ee:93:bb:aa:4d:fc:10:7c:8e:
e5:fa:f8:62:47:37:13:0b:5d:e0:bf:09:74:64:47:1a:a1:93:
6f:3c:39:8c:8b:01:7a:b9:1b:51:99:e1:e4:5c:ff:9f:52:f2:
15:63:7d:11:5f:b8:c3:b6:e0:7f:e8:34:0f:83:df:16:36:51:
02:4e:ab:28:f9:58:7b:d4:5d:a3:8b:05:21:c3:25:55:ff:99:
ea:60:28:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:43:34 2025 by rpki-client