Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ae459c49-adf3-48bc-a738-d940977d540e/38a03247-5407-3471-a614-36ff41fe4307.roa
File: 38a03247-5407-3471-a614-36ff41fe4307.roa (raw, json)
Hash identifier: 9YULA/k62Y6PXEwKqEjzKNGrn+eqHZpNgKkyYHzQSxQ=
Subject key identifier: A9:CB:87:E8:1D:0F:7F:60:33:D6:3D:AB:69:21:D8:F5:18:A7:8E:F7
Certificate issuer: /CN=ae459c49-adf3-48bc-a738-d940977d540e
Certificate serial: 010D0C9F4328584944692C38F99B600D3C811F00
Authority key identifier: B0:EE:30:31:4D:E8:13:5D:9C:4F:5E:D2:43:AD:D1:57:EC:32:5D:5F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ae459c49-adf3-48bc-a738-d940977d540e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ae459c49-adf3-48bc-a738-d940977d540e/38a03247-5407-3471-a614-36ff41fe4307.roa
Signing time: Sat 22 Mar 2025 01:00:40 +0000
ROA not before: Sat 22 Mar 2025 01:00:40 +0000
ROA not after: Fri 20 Jun 2025 01:00:40 +0000
asID: 21976
IP address blocks: 2620:3a:c000::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:44:69:2c:38:f9:9b:60:0d:3c:81:1f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae459c49-adf3-48bc-a738-d940977d540e
Validity
Not Before: Mar 22 01:00:40 2025 GMT
Not After : Jun 20 01:00:40 2025 GMT
Subject: CN=90e0d35c-40c5-4f4e-a42d-fca145bc11b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:74:09:6e:fa:ab:c2:c6:32:ae:b6:1a:a0:cf:
e5:48:83:bd:0d:6c:e9:e7:e8:f6:9e:f6:e8:a9:ea:
12:29:3b:0e:9a:db:42:ea:30:50:e2:66:31:b5:52:
23:4d:4c:08:92:75:92:7e:5e:ea:cf:4f:fc:9a:5f:
27:84:c5:4a:1e:81:fb:d2:9c:3b:6a:99:5f:81:61:
21:6a:93:84:5a:c9:8e:49:dd:3b:92:46:ae:d3:d3:
66:d9:1b:fc:a9:0a:d1:64:76:62:05:a4:eb:62:12:
ca:1a:f0:c1:6d:ce:5d:43:91:25:20:6a:85:0b:43:
a7:1c:fc:1d:57:7e:b1:31:04:90:c6:f7:2f:3b:7a:
3c:97:2f:43:5e:30:33:f8:be:be:da:0f:ee:9d:b6:
59:ff:75:e4:b6:d3:14:13:39:80:6e:a4:30:b5:6d:
fc:3a:25:da:f4:16:79:00:50:c4:dd:08:97:f7:63:
f4:e7:1d:99:52:cd:df:98:8a:4d:f9:95:93:dc:c3:
61:85:cc:dd:7f:0e:ee:64:99:18:a3:d2:ee:2b:ed:
60:9f:be:d6:88:1e:d8:f2:35:32:b8:1b:e1:59:12:
5c:90:1d:e4:75:88:61:d9:7d:bf:01:cb:de:cd:58:
99:47:af:1a:b1:8f:91:13:e1:17:e9:ae:be:9c:d5:
62:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:CB:87:E8:1D:0F:7F:60:33:D6:3D:AB:69:21:D8:F5:18:A7:8E:F7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ae459c49-adf3-48bc-a738-d940977d540e/38a03247-5407-3471-a614-36ff41fe4307.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ae459c49-adf3-48bc-a738-d940977d540e/ae459c49-adf3-48bc-a738-d940977d540e.crl
X509v3 Authority Key Identifier:
keyid:B0:EE:30:31:4D:E8:13:5D:9C:4F:5E:D2:43:AD:D1:57:EC:32:5D:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ae459c49-adf3-48bc-a738-d940977d540e.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:3a:c000::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0f:f7:09:53:27:1d:65:9d:9b:89:d8:83:8e:ff:c2:d0:dc:7c:
42:31:d6:77:72:6d:f3:97:c2:4c:52:ca:94:1a:a5:82:e1:ec:
97:c3:35:07:66:ad:65:ef:bd:ba:6b:cb:dd:79:fb:ad:09:60:
e9:d3:d3:6a:b6:f9:49:58:87:a6:b2:c5:d8:d3:9d:22:2a:76:
60:16:b2:34:65:14:4a:86:a0:fc:f9:61:61:65:cf:ff:e5:72:
a1:dd:21:3a:b3:43:c3:69:ab:74:52:6f:bb:be:c5:65:ec:34:
98:17:49:c0:11:84:db:7e:01:3b:94:93:6d:7b:3d:81:87:70:
5c:b6:a8:09:93:f8:ef:cf:e6:b7:18:ca:72:7f:66:1d:21:12:
31:4d:aa:a5:61:38:42:36:b8:a0:42:d3:39:50:3c:43:de:8f:
30:2e:68:91:7e:42:05:97:c7:bb:89:d3:d4:26:9d:0a:b2:58:
b9:69:82:05:0b:8d:49:e4:fd:d4:e0:66:2e:46:d9:b3:b8:3c:
f5:0a:10:18:9b:e1:79:3f:ed:e3:29:e1:75:55:ff:6f:3b:a6:
8e:95:7a:6b:fc:1a:0e:1c:4a:13:ea:d9:8c:ae:89:93:c1:79:
07:fd:23:2b:22:b3:ea:43:35:e5:e9:3b:a2:a4:f6:29:f8:c6:
f4:2a:70:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:08:17 2025 by rpki-client