Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/42c666c1-a603-4b7f-a5b1-8292a815144e/2dc2063e-28dd-3936-aa61-b0d1e7a6065c.roa
File: 2dc2063e-28dd-3936-aa61-b0d1e7a6065c.roa (raw, json)
Hash identifier: G/qWFEkNob41qk0M4CK7KCnknDGXR7RKfu1LzfFE2yQ=
Subject key identifier: 40:AE:64:66:1E:B1:C2:72:DA:10:B3:2C:D5:20:5A:33:5A:17:1C:9A
Certificate issuer: /CN=42c666c1-a603-4b7f-a5b1-8292a815144e
Certificate serial: 010D0C9F4328584890D147C913067BDEACEB6220
Authority key identifier: 9E:1A:34:20:B0:66:4F:98:39:3A:33:EF:54:18:95:61:DE:AF:BB:70
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/42c666c1-a603-4b7f-a5b1-8292a815144e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/42c666c1-a603-4b7f-a5b1-8292a815144e/2dc2063e-28dd-3936-aa61-b0d1e7a6065c.roa
Signing time: Thu 16 Jan 2025 17:04:58 +0000
ROA not before: Thu 16 Jan 2025 17:04:58 +0000
ROA not after: Wed 16 Apr 2025 16:04:58 +0000
asID: 401605
IP address blocks: 2602:f72d::/38 maxlen: 38
2602:f72d:400::/38 maxlen: 38
2602:f72d:800::/38 maxlen: 38
2602:f72d:c00::/38 maxlen: 38
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:90:d1:47:c9:13:06:7b:de:ac:eb:62:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42c666c1-a603-4b7f-a5b1-8292a815144e
Validity
Not Before: Jan 16 17:04:58 2025 GMT
Not After : Apr 16 16:04:58 2025 GMT
Subject: CN=73be0c67-397f-4a25-bd0b-e63a8eb7c4f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:e3:a5:e7:fe:b4:1b:f2:74:63:0c:45:57:17:
a9:10:fe:a1:7f:a2:68:b7:3c:3d:d1:05:3c:1f:16:
6a:cb:4d:b0:ba:cd:5f:44:19:f4:70:6a:ef:cd:11:
b5:a7:db:8f:57:9d:20:03:e1:ee:f2:80:2e:1b:21:
91:37:f8:4e:1b:e4:04:30:d9:f0:9c:5d:22:5c:fe:
37:90:be:1c:0a:95:d3:b4:1e:02:a8:55:9a:c0:f0:
d3:a3:c2:ca:9e:2a:e2:77:44:29:d2:91:57:e0:3e:
79:a7:5a:11:c5:17:33:46:91:0a:99:99:83:38:47:
ec:b1:df:5c:32:d6:6d:c6:7a:db:d5:35:94:1f:66:
de:d5:ed:f1:16:d4:52:a3:aa:7a:02:3e:80:f3:8e:
20:ba:b7:a2:05:15:9a:fd:c0:ed:b2:d4:19:4b:d4:
50:c3:a6:1c:f0:6f:0a:a2:31:ec:71:35:de:20:ee:
50:a2:41:36:b7:10:7f:c9:20:95:4b:d3:bb:4a:64:
80:a0:b5:1c:ce:21:e8:fd:d9:d3:49:c5:3b:4d:c1:
fb:fe:fa:95:f7:73:bf:79:21:0d:a4:69:96:d9:5a:
dc:53:ed:ee:41:e2:2e:22:1b:b6:c5:f6:0e:9d:7e:
67:d7:f8:d3:42:10:a9:a3:ef:f0:c6:8a:88:c8:bc:
7d:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:AE:64:66:1E:B1:C2:72:DA:10:B3:2C:D5:20:5A:33:5A:17:1C:9A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/42c666c1-a603-4b7f-a5b1-8292a815144e/2dc2063e-28dd-3936-aa61-b0d1e7a6065c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/42c666c1-a603-4b7f-a5b1-8292a815144e/42c666c1-a603-4b7f-a5b1-8292a815144e.crl
X509v3 Authority Key Identifier:
keyid:9E:1A:34:20:B0:66:4F:98:39:3A:33:EF:54:18:95:61:DE:AF:BB:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/42c666c1-a603-4b7f-a5b1-8292a815144e.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:f72d::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5b:19:11:a2:ea:d7:34:49:7c:be:26:6e:d1:6e:7c:d6:41:90:
57:8a:d5:25:3a:b7:bb:be:63:c4:b6:ca:7a:eb:31:dc:91:e1:
b3:36:6e:d1:af:66:a4:34:02:e2:a0:ca:9e:8d:de:9c:ea:f4:
f1:f3:ea:f5:e0:78:bd:86:92:5c:91:9f:c7:93:c5:e6:8a:35:
79:35:53:5f:d7:c9:fe:00:39:e1:6b:a9:03:c1:ec:ab:66:12:
c9:7d:81:d4:8b:20:44:aa:d1:49:48:74:73:9b:25:2b:e0:5f:
06:24:8f:83:f5:f6:4a:a1:54:64:d1:de:9a:56:aa:9c:81:d7:
04:c1:20:75:4e:43:79:2d:f7:58:28:5c:d2:1a:c9:3a:ba:da:
af:56:a4:c9:10:05:e9:a5:4c:28:b3:d0:a6:1b:eb:16:e8:c3:
1d:1a:0f:95:fa:9e:ed:00:c8:e1:41:58:67:6d:1c:1e:74:0a:
0c:b1:af:d0:46:2c:5c:56:b1:4a:f0:a9:7e:0b:8c:c2:b5:0c:
11:68:22:f3:e8:97:ae:17:77:ba:03:da:52:40:15:b3:79:cb:
06:e6:55:5b:e5:88:f1:38:3d:a1:63:f9:4e:7a:63:98:de:7e:
ee:e7:dc:0c:f0:c4:77:72:7d:e8:e4:22:15:8e:95:56:f5:89:
d5:a3:85:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:47:56 2025 by rpki-client