Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e20d7b51-a205-4e55-9426-e473f80b2544/8dfd331d-a27c-3036-abb2-c4b7f16c6bd9.roa
File: 8dfd331d-a27c-3036-abb2-c4b7f16c6bd9.roa (raw, json)
Hash identifier: WZ5erJwNwV5MhrrSGwZ8e/KPcBYumAPOPYHNYY9VcT4=
Subject key identifier: F1:0C:66:9D:8D:9B:44:38:FD:28:1D:56:3A:73:80:C8:FE:79:45:C6
Certificate issuer: /CN=e20d7b51-a205-4e55-9426-e473f80b2544
Certificate serial: 010D0C9F43285848FD56AE1E6826FDE1D64F6D80
Authority key identifier: 98:5B:5F:D7:36:C4:EC:98:8A:7F:FD:88:22:70:B1:32:07:74:14:D6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e20d7b51-a205-4e55-9426-e473f80b2544.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e20d7b51-a205-4e55-9426-e473f80b2544/8dfd331d-a27c-3036-abb2-c4b7f16c6bd9.roa
Signing time: Mon 24 Feb 2025 14:00:52 +0000
ROA not before: Mon 24 Feb 2025 14:00:52 +0000
ROA not after: Sun 25 May 2025 13:00:52 +0000
asID: 397736
IP address blocks: 2602:807:d000::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:fd:56:ae:1e:68:26:fd:e1:d6:4f:6d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e20d7b51-a205-4e55-9426-e473f80b2544
Validity
Not Before: Feb 24 14:00:52 2025 GMT
Not After : May 25 13:00:52 2025 GMT
Subject: CN=cc9f9d58-822e-48c0-b5b9-58e71d67e440
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:8e:7a:f8:65:48:06:5c:f5:98:54:9c:8c:9f:
65:a5:3a:f5:ca:71:83:90:87:1c:0b:e5:47:a4:fd:
fc:69:8c:0c:16:33:e0:61:78:8a:1d:90:de:4b:36:
8f:c5:bd:b1:33:c2:1f:f4:9f:9e:35:25:7b:27:a9:
94:a9:b1:b0:cc:c5:0d:79:9e:28:d0:69:e0:a8:c6:
41:99:f1:df:80:bb:7b:8f:e2:06:ab:43:71:49:10:
4d:de:d4:06:af:a7:18:a3:76:fe:32:b3:af:10:c2:
9e:8e:a4:aa:82:56:55:0a:72:97:93:02:c6:f3:e5:
6e:b9:df:e0:25:e1:4f:af:ed:29:ca:e9:6a:5e:dd:
92:f3:da:bb:70:b5:3a:a4:76:70:7a:91:47:36:6d:
a2:73:2b:bb:58:ad:59:01:6b:c5:76:5a:c9:05:42:
e3:61:52:b5:ef:0f:53:f7:d8:cc:09:83:1c:21:be:
8c:5e:d3:03:a3:47:73:4a:c6:39:64:19:30:59:47:
60:6b:94:46:50:f9:7e:b5:30:f9:a5:b3:19:b1:a5:
fa:d2:04:37:58:bc:6a:74:59:a4:8f:78:a6:c2:77:
b2:51:2f:f1:f6:2e:16:ba:f2:ea:a4:b8:ab:6e:ae:
ae:0a:ad:8f:47:ff:72:2c:7a:40:c2:7d:0a:01:60:
a9:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:0C:66:9D:8D:9B:44:38:FD:28:1D:56:3A:73:80:C8:FE:79:45:C6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e20d7b51-a205-4e55-9426-e473f80b2544/8dfd331d-a27c-3036-abb2-c4b7f16c6bd9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e20d7b51-a205-4e55-9426-e473f80b2544/e20d7b51-a205-4e55-9426-e473f80b2544.crl
X509v3 Authority Key Identifier:
keyid:98:5B:5F:D7:36:C4:EC:98:8A:7F:FD:88:22:70:B1:32:07:74:14:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e20d7b51-a205-4e55-9426-e473f80b2544.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:807:d000::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2d:c6:21:a4:27:2f:ea:e9:6d:c4:72:71:6d:f4:08:02:f5:ce:
c7:3c:7d:93:fc:40:1a:ab:6a:47:61:4f:85:85:31:4f:a7:ce:
52:9b:91:0b:ed:3d:ff:f7:27:e3:41:9b:84:eb:5e:4b:37:fe:
9e:a6:8f:ab:9c:02:63:d3:ec:e2:42:d6:f1:be:89:5d:80:22:
2c:1d:d0:47:a0:55:7e:d9:a9:f2:98:be:ea:59:21:af:59:5f:
7f:bc:f9:ed:e4:3f:9e:78:b8:9d:40:57:8f:be:be:f3:69:07:
51:4b:ac:6d:69:03:63:b0:f4:77:5b:56:5a:64:e4:a1:18:2d:
fd:85:18:ad:db:63:ab:53:da:d2:82:22:a5:c6:2f:d0:4c:01:
75:a5:72:d5:40:fe:64:83:3c:30:a0:66:db:ba:9f:19:9e:a8:
02:24:f7:01:bb:06:ae:e4:c8:92:8f:0e:88:53:ab:f0:b6:96:
26:44:f1:47:52:eb:7a:99:19:a5:8e:51:fc:7d:98:66:7e:8a:
9f:3c:d1:2f:c6:cd:74:05:2e:a0:61:e0:2b:a0:e2:cc:fd:3e:
34:bb:0a:5e:a0:17:f2:6e:e7:41:09:33:96:64:f5:ce:d4:df:
a3:c8:e1:23:a7:57:92:86:24:f1:8a:e1:2d:ba:cf:12:34:c8:
a6:32:b4:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:28:14 2025 by rpki-client on console.sobornost.net