Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976/d32ad531-224a-3d26-aaf7-f82478922d6e.roa
File: d32ad531-224a-3d26-aaf7-f82478922d6e.roa (raw, json)
Hash identifier: TF7Rgx3ZQp/UlqWJUz5fBJzLC0w/u0gXpsVhLcU080Y=
Subject key identifier: B7:E0:0C:6F:41:10:2C:01:9D:C9:48:8C:5E:D5:94:C8:B6:3C:54:50
Certificate issuer: /CN=cb3ad003-aa7b-45b4-b273-e01ca5688976
Certificate serial: 010D0C9F4328584819CFDCDF381DE686FDE5AC80
Authority key identifier: A5:7C:76:81:0C:C6:51:D7:2A:B8:6B:F7:9A:92:C5:2F:9C:9C:A4:89
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976/d32ad531-224a-3d26-aaf7-f82478922d6e.roa
Signing time: Thu 05 Dec 2024 02:00:39 +0000
ROA not before: Thu 05 Dec 2024 02:00:39 +0000
ROA not after: Wed 05 Mar 2025 02:00:39 +0000
asID: 54613
IP address blocks: 2602:fd9a:1000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:19:cf:dc:df:38:1d:e6:86:fd:e5:ac:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb3ad003-aa7b-45b4-b273-e01ca5688976
Validity
Not Before: Dec 5 02:00:39 2024 GMT
Not After : Mar 5 02:00:39 2025 GMT
Subject: CN=0da5bb97-c271-4a14-a1ff-a4a65c944c43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:7f:8a:f4:29:10:be:73:6f:ea:c9:2a:c3:44:
12:a6:18:79:0b:0c:65:8a:9d:a9:68:b0:11:64:ea:
cc:6e:6c:85:0c:6f:17:bd:94:94:0c:15:13:8e:1d:
11:f1:56:df:22:50:60:7e:4d:96:1d:e3:7f:3f:6a:
e5:4d:73:44:e9:30:3c:38:c7:ca:62:ae:f3:33:36:
65:4f:56:94:57:06:17:ae:30:bf:e5:e4:a7:bc:d8:
bd:38:72:73:cc:96:08:37:f9:bf:95:6c:38:b3:c8:
aa:47:97:d3:dc:5e:a6:83:60:ab:f6:62:9b:74:a5:
71:fc:f2:4c:46:7d:82:93:99:77:de:7d:0f:58:12:
cc:87:ca:21:f8:69:5e:93:59:12:6b:30:66:d4:b2:
63:42:12:63:34:da:1b:a5:b1:c9:de:28:c6:9e:65:
b8:79:32:46:a9:d9:e4:a8:6c:af:60:26:64:d0:5a:
94:dc:78:98:f5:28:19:bc:8d:a3:6c:d6:18:70:0a:
86:5d:f6:f0:38:cf:8c:fb:72:0a:35:c8:b0:9c:9b:
81:2f:b1:26:fd:6b:ef:d0:db:1c:ca:93:31:31:37:
ab:b1:30:a7:22:c3:2b:d6:c1:c6:55:a7:fe:15:43:
e5:52:86:9f:36:9b:b8:a4:20:28:8e:b7:77:08:c2:
0b:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:E0:0C:6F:41:10:2C:01:9D:C9:48:8C:5E:D5:94:C8:B6:3C:54:50
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976/d32ad531-224a-3d26-aaf7-f82478922d6e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976/cb3ad003-aa7b-45b4-b273-e01ca5688976.crl
X509v3 Authority Key Identifier:
keyid:A5:7C:76:81:0C:C6:51:D7:2A:B8:6B:F7:9A:92:C5:2F:9C:9C:A4:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:fd9a:1000::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7e:80:6a:35:84:f5:42:7d:f5:aa:e6:19:4b:eb:7d:64:b7:56:
0b:65:25:1d:38:3c:ae:55:80:89:1e:ca:3b:8b:62:16:62:2d:
87:9d:91:93:eb:4b:c4:0e:44:de:a9:82:61:78:cf:06:bf:a9:
5e:09:7e:bd:67:bd:37:a4:10:2d:f9:bb:b4:be:bd:77:c9:2b:
df:9e:d2:43:31:7b:5e:ab:67:c1:e3:15:3f:35:f2:35:fc:00:
f0:74:a8:45:58:89:23:ce:02:93:db:a1:62:86:17:03:15:34:
35:6a:5f:0e:68:07:9f:c3:35:db:72:05:fd:79:f2:82:3e:37:
d0:f5:28:11:0b:02:6b:00:13:6b:dc:3c:6b:5b:a0:c4:0f:2c:
87:17:c3:7b:8d:1d:96:8d:9d:5b:0e:b1:a1:33:a0:10:56:5d:
5f:58:6c:07:8b:de:68:89:00:7a:23:0b:44:3f:5e:57:9b:d2:
11:a8:08:a9:67:9b:8f:67:57:e4:1d:a8:74:74:ce:49:66:73:
a7:d7:4f:98:38:2f:f6:a1:0a:30:1f:22:4b:fe:54:ea:b9:09:
8b:33:8c:93:c2:a0:16:1f:79:a9:01:35:26:c8:54:4e:88:2c:
8b:c1:2d:e5:fe:03:3a:d1:32:b1:65:af:f1:bb:14:b9:00:9f:
bb:7a:6f:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:42:51 2025 by rpki-client