Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/76dfbdf8-6f9c-4702-8da7-c6d5598c1126/2cd08b1a-7bd7-3ee3-99f1-259a0d5b2033.roa
File: 2cd08b1a-7bd7-3ee3-99f1-259a0d5b2033.roa (raw, json)
Hash identifier: LJqPgGhPKYWPJQWKzf2LE7RA6wmLAPQzEwyDf3UsM0Y=
Subject key identifier: 71:54:B5:22:41:51:4F:13:1C:D8:36:2A:5E:1D:17:60:E1:A0:CB:49
Certificate issuer: /CN=76dfbdf8-6f9c-4702-8da7-c6d5598c1126
Certificate serial: 010D0C9F4328584880C09ECCE90A93E11E227480
Authority key identifier: 4E:7B:A2:59:20:66:94:5A:86:EA:37:F8:59:4A:86:3F:58:1A:D6:CB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/76dfbdf8-6f9c-4702-8da7-c6d5598c1126.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/76dfbdf8-6f9c-4702-8da7-c6d5598c1126/2cd08b1a-7bd7-3ee3-99f1-259a0d5b2033.roa
Signing time: Fri 10 Jan 2025 22:58:28 +0000
ROA not before: Fri 10 Jan 2025 22:58:28 +0000
ROA not after: Thu 10 Apr 2025 21:58:28 +0000
asID: 31898
IP address blocks: 2602:f73c:2::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:80:c0:9e:cc:e9:0a:93:e1:1e:22:74:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76dfbdf8-6f9c-4702-8da7-c6d5598c1126
Validity
Not Before: Jan 10 22:58:28 2025 GMT
Not After : Apr 10 21:58:28 2025 GMT
Subject: CN=3ed64986-ecf1-41d3-a793-fd1d1507add2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:5e:ed:8a:53:7e:b7:62:32:b3:86:00:67:a2:
50:5e:27:7d:bb:e8:a7:e1:d5:59:1a:b2:f1:7b:7e:
a5:00:ca:03:83:30:88:d5:88:3e:3b:fa:b1:54:2f:
fe:ea:bb:bc:74:13:2c:04:80:b2:0e:e5:a1:01:29:
19:56:dc:71:b9:b6:b0:21:bd:96:2c:c6:77:1f:43:
df:e5:b0:2a:75:79:31:66:ff:74:3b:a1:7a:24:a0:
82:15:c5:16:b6:49:ef:a9:b1:57:f3:be:01:67:09:
6d:cc:63:6d:61:56:e0:51:44:ae:da:80:30:5f:3a:
cc:70:97:a3:89:92:42:62:08:ed:f0:b0:ac:d7:b3:
18:46:3e:0c:4f:3d:3a:37:e1:56:32:09:99:57:ab:
41:23:05:91:34:29:17:7c:23:ee:a0:e0:28:a8:b7:
de:36:6c:21:fd:9c:b6:d8:8a:b9:a9:43:b2:d6:bf:
69:38:33:46:e6:0f:c2:2e:fd:e7:6f:68:d4:f2:23:
64:1e:ae:a8:fc:49:e3:64:31:7d:3b:5b:9f:13:1a:
48:4f:3b:ca:02:da:32:05:a0:3d:85:51:a8:99:fb:
d3:b3:33:02:91:64:15:a1:af:05:19:4b:6f:a0:32:
9b:bb:a9:86:e9:e6:79:a3:d6:55:5a:17:1a:e8:1d:
3b:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:54:B5:22:41:51:4F:13:1C:D8:36:2A:5E:1D:17:60:E1:A0:CB:49
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/76dfbdf8-6f9c-4702-8da7-c6d5598c1126/2cd08b1a-7bd7-3ee3-99f1-259a0d5b2033.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/76dfbdf8-6f9c-4702-8da7-c6d5598c1126/76dfbdf8-6f9c-4702-8da7-c6d5598c1126.crl
X509v3 Authority Key Identifier:
keyid:4E:7B:A2:59:20:66:94:5A:86:EA:37:F8:59:4A:86:3F:58:1A:D6:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/76dfbdf8-6f9c-4702-8da7-c6d5598c1126.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:f73c:2::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0f:c9:48:e8:b5:fb:0a:de:05:92:11:6b:69:8d:0a:ab:06:8a:
bb:ec:9a:22:a4:d3:39:f7:de:34:c6:08:64:28:4d:10:2b:31:
bb:b3:22:4f:17:9d:a5:e5:ab:4e:d8:c9:78:82:61:ef:ce:c8:
fe:2f:94:e4:40:ef:9e:3b:c3:a3:67:40:28:37:09:72:2e:da:
9f:f8:26:0c:cb:75:27:f7:99:69:f2:27:f9:10:4b:5d:21:fb:
18:0d:6d:fb:f4:b6:d1:e2:2f:9d:08:9f:9f:b1:6c:05:bf:04:
90:d9:9a:4b:b4:ec:c9:43:6f:5b:18:8b:c9:82:80:7d:75:d5:
83:a3:46:06:73:e1:d5:1a:6f:c0:37:a8:83:6e:6a:b6:6b:1a:
18:05:ef:80:9c:b4:b5:08:f3:75:fb:e4:64:40:90:0d:e9:52:
da:15:55:00:79:2c:9f:26:52:7a:98:42:3e:19:e8:53:d3:6f:
88:24:03:0a:7c:cf:fe:05:02:31:11:2b:42:c5:41:59:33:4c:
6a:5b:ae:27:65:a1:ad:09:64:bf:b3:54:52:01:b6:e7:9c:5d:
ba:fa:41:c7:06:f0:ac:63:b8:76:08:79:21:d7:01:4b:51:3a:
78:ef:e6:d3:a4:5d:8c:dd:11:6c:f8:55:ce:16:98:44:36:e3:
6e:95:d8:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 01:05:07 2025 by rpki-client