Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dd2b162-db77-4422-9f87-c0ae0abe9d41/1c452224-3db4-3c25-8e3d-11a10373e9ab.roa
File: 1c452224-3db4-3c25-8e3d-11a10373e9ab.roa (raw, json)
Hash identifier: 1UJ5YEfd8YTv6PcECG/BJAVMo5I1QH6bX+mJ248P698=
Subject key identifier: 53:46:E8:81:8F:09:BE:9D:AA:D9:73:97:59:E3:CA:1F:1B:45:03:19
Certificate issuer: /CN=5dd2b162-db77-4422-9f87-c0ae0abe9d41
Certificate serial: 010D0C9F432858493ED3CFC38DF38FE1FB4DE000
Authority key identifier: 71:28:4C:F0:DD:80:D0:A8:B9:D0:F0:07:3D:5B:58:FE:CA:08:5C:29
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dd2b162-db77-4422-9f87-c0ae0abe9d41.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dd2b162-db77-4422-9f87-c0ae0abe9d41/1c452224-3db4-3c25-8e3d-11a10373e9ab.roa
Signing time: Thu 20 Mar 2025 01:00:39 +0000
ROA not before: Thu 20 Mar 2025 01:00:39 +0000
ROA not after: Wed 18 Jun 2025 01:00:39 +0000
asID: 16509
IP address blocks: 2620:a5:6000::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:3e:d3:cf:c3:8d:f3:8f:e1:fb:4d:e0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dd2b162-db77-4422-9f87-c0ae0abe9d41
Validity
Not Before: Mar 20 01:00:39 2025 GMT
Not After : Jun 18 01:00:39 2025 GMT
Subject: CN=a647841d-07c6-4196-bcfe-f2a830c8cd0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:54:08:2f:d3:26:91:fb:dc:87:35:be:09:96:
80:cf:8a:6c:4d:78:4d:04:49:6b:a7:ea:97:5d:cc:
d1:8d:04:78:ad:dc:a6:e0:b3:51:0a:b2:9e:82:a0:
2e:24:1e:7d:cc:ad:a5:06:3b:ed:b8:d3:9e:96:7d:
80:6b:78:91:a0:9c:f3:c3:47:1b:16:2d:10:f7:17:
fa:96:8d:e2:33:d0:35:d3:e8:24:4a:0e:0f:b9:6b:
98:f5:eb:eb:98:75:d4:71:9b:83:fc:64:76:9b:23:
0c:d9:42:b1:dc:9e:6d:05:71:91:e6:49:e0:9a:23:
c2:98:de:69:b1:c4:93:8a:7e:73:c3:c7:88:cf:1f:
5f:88:82:a9:4d:32:6e:9d:ef:1c:c4:df:2d:63:a0:
24:24:9d:06:21:53:78:ed:0f:a8:24:78:f5:f3:95:
ca:da:f7:b7:34:1f:bb:44:ae:fe:18:02:6b:96:09:
63:f7:7a:49:ef:6c:a7:2b:a6:02:ce:30:ab:47:be:
60:e9:de:b3:f9:5d:f6:fb:e6:bb:21:d2:fa:10:35:
47:c9:35:be:92:c9:29:d0:f0:15:6e:66:ff:d3:6c:
1d:96:60:ae:9c:38:f7:48:7f:04:64:34:7b:3c:60:
ba:b4:07:dd:10:84:bf:1b:24:06:93:0d:14:bb:f7:
ac:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:46:E8:81:8F:09:BE:9D:AA:D9:73:97:59:E3:CA:1F:1B:45:03:19
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dd2b162-db77-4422-9f87-c0ae0abe9d41/1c452224-3db4-3c25-8e3d-11a10373e9ab.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dd2b162-db77-4422-9f87-c0ae0abe9d41/5dd2b162-db77-4422-9f87-c0ae0abe9d41.crl
X509v3 Authority Key Identifier:
keyid:71:28:4C:F0:DD:80:D0:A8:B9:D0:F0:07:3D:5B:58:FE:CA:08:5C:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dd2b162-db77-4422-9f87-c0ae0abe9d41.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:a5:6000::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b3:49:11:e5:40:f0:89:8e:8a:9b:33:b3:cc:fc:29:b5:8d:32:
41:16:e6:bc:4a:77:03:81:e6:e6:72:a5:1d:07:30:6a:d8:f3:
5f:61:04:b7:19:dd:b5:51:9f:34:73:c4:b3:40:7f:53:48:3c:
7b:60:a5:4b:bc:94:74:58:0e:90:11:6b:33:6d:93:d1:9f:40:
e2:63:d0:e6:a2:5d:95:45:e4:db:88:60:e7:37:a7:e3:e3:e8:
87:65:73:00:6d:e9:84:27:df:ab:4d:b1:90:c6:55:57:61:31:
7b:10:04:48:96:43:a6:7c:c5:e7:75:4b:08:75:3d:39:ef:70:
c5:13:1e:5a:79:7f:5c:58:9c:e1:89:dd:05:09:18:70:f1:5b:
47:db:98:46:e6:e8:da:8e:79:7a:ea:f9:68:fe:88:50:91:46:
df:c5:fe:e7:95:b2:4c:da:a1:b3:40:1c:67:f2:87:e1:c2:7a:
37:39:c3:ec:09:0d:ab:66:46:c2:1d:b5:8b:c8:d0:59:67:ce:
2c:78:6d:b1:f6:73:4d:ab:f9:1f:2e:50:61:bd:78:3f:9a:de:
18:ae:10:37:ad:80:39:aa:d8:95:de:68:d3:0f:f2:fb:73:1e:
ab:c8:3b:c4:c5:a2:7d:9f:fa:72:ea:a9:f5:d6:93:4e:8f:6e:
fe:b9:18:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:18:25 2025 by rpki-client