Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/2caced71-f2e3-391d-928f-93c3baed4514.roa
File: 2caced71-f2e3-391d-928f-93c3baed4514.roa (raw, json)
Hash identifier: N/j0RiMivaKFx5Nz91xb/0l9w12rWB+H7eaSXeSQw1Q=
Subject key identifier: 11:E2:93:62:49:6B:08:4B:0A:CF:95:C1:BE:ED:91:7C:2E:06:5A:8D
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F43285849213470E9C4C20A2AB0628580
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/2caced71-f2e3-391d-928f-93c3baed4514.roa
Signing time: Sun 09 Mar 2025 10:21:10 +0000
ROA not before: Sun 09 Mar 2025 10:21:10 +0000
ROA not after: Sat 07 Jun 2025 10:21:10 +0000
asID: 3848
IP address blocks: 2001:4958:1521::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:21:34:70:e9:c4:c2:0a:2a:b0:62:85:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Mar 9 10:21:10 2025 GMT
Not After : Jun 7 10:21:10 2025 GMT
Subject: CN=d5d2cdb9-e63d-4600-a24f-8a718786c512
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:70:41:46:19:88:a2:e3:f9:51:b4:00:f2:58:
af:95:f9:41:95:2a:f8:06:3f:68:13:c5:a9:39:52:
4c:f3:7f:71:fb:63:50:db:14:6e:6e:41:03:b0:80:
b6:b9:f9:3c:dc:16:b4:0b:40:f7:49:e6:3d:4f:1a:
ba:7d:ca:e6:7a:8a:b4:ef:5b:61:ba:12:24:90:55:
4d:53:d9:55:f9:14:c4:03:a7:d1:8f:f7:ee:cd:b7:
f4:0f:13:50:59:3b:03:85:22:5f:2c:99:f0:4a:b2:
5e:74:f3:45:0b:92:09:07:13:81:25:78:2d:93:86:
57:cd:c2:3d:32:91:83:48:36:4a:2f:e4:b2:1c:54:
f3:54:5a:7d:e7:70:e5:d4:eb:c7:88:c9:4e:99:f7:
f9:f2:00:98:5d:39:02:45:10:71:7e:08:64:f8:0d:
39:e8:0c:17:84:70:eb:05:de:ad:c4:cf:dd:0a:2f:
2d:5f:82:31:00:e2:20:98:88:ba:0b:c8:cb:25:21:
f4:32:bf:1f:08:91:5a:bc:46:0d:49:ea:ea:e0:5a:
a1:18:12:ae:dc:41:8d:4d:82:96:e5:70:c1:82:8f:
63:83:00:b3:6d:0b:8b:eb:30:f1:dc:a1:4d:68:84:
ff:e8:79:19:d2:22:1a:3a:12:14:fd:a2:3c:d2:e8:
e1:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:E2:93:62:49:6B:08:4B:0A:CF:95:C1:BE:ED:91:7C:2E:06:5A:8D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/2caced71-f2e3-391d-928f-93c3baed4514.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:4958:1521::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
36:7d:97:55:05:99:64:3f:ac:42:76:76:05:8b:05:ac:97:bd:
eb:e5:e4:c1:41:70:fe:e8:17:f8:52:6e:9c:2d:bf:c2:99:14:
8b:a7:87:16:c9:08:aa:ee:c5:24:38:6d:c3:d9:ff:ab:22:4a:
bd:03:1c:f5:75:d3:48:ad:87:20:71:4c:76:8a:15:e9:d9:82:
e9:41:83:4f:5c:52:d8:9f:e3:bd:ae:19:d0:fc:27:e5:de:67:
0d:d1:27:36:8d:5c:56:79:0f:80:d6:75:40:b4:ee:f7:2e:1d:
e1:6c:34:0a:97:b1:91:79:79:57:10:e8:1e:7a:c0:c0:f5:f3:
fd:f8:3c:65:28:bd:2b:63:5d:1d:12:c0:e5:6c:6b:d9:4b:6b:
2f:c1:d6:9a:5b:aa:61:88:d4:16:99:1a:21:46:b0:85:88:c0:
ba:56:59:59:2a:d7:30:64:41:3a:aa:3a:7d:7f:bd:b4:bc:7a:
44:aa:8b:bc:b7:35:cc:cc:b9:73:28:39:cd:5e:65:63:d4:ea:
22:f4:e6:2c:68:ac:b6:05:74:7a:da:11:b4:49:52:8c:d0:d4:
83:7f:89:ab:02:d9:04:b7:56:8b:4c:83:7f:11:b1:aa:74:1d:
70:51:c8:6a:27:00:c0:74:99:55:81:e9:62:3e:65:f8:89:2e:
19:31:e3:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:56:32 2025 by rpki-client