Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/16a1ba98-8a17-3094-bfea-ecadc62c2c04.roa
File: 16a1ba98-8a17-3094-bfea-ecadc62c2c04.roa (raw, json)
Hash identifier: JjEruBBtcXUJUCgmxyQMrbA+1iVcDIXl4Qliz/oSla4=
Subject key identifier: 3C:C8:C2:A0:F9:5A:A2:1F:FD:27:44:E8:83:8E:D1:DC:A7:A5:FF:B1
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858490CB14C80C7C09D64EF3A5C08
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/16a1ba98-8a17-3094-bfea-ecadc62c2c04.roa
Signing time: Sun 02 Mar 2025 02:00:40 +0000
ROA not before: Sun 02 Mar 2025 02:00:40 +0000
ROA not after: Sat 31 May 2025 01:00:40 +0000
asID: 396595
IP address blocks: 2620:0:5050::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:0c:b1:4c:80:c7:c0:9d:64:ef:3a:5c:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 2 02:00:40 2025 GMT
Not After : May 31 01:00:40 2025 GMT
Subject: CN=92c58060-762b-43e0-aa8b-833c2b69af6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a8:16:d5:3c:4b:ed:60:6c:2e:81:7a:e8:9a:
53:ec:49:11:3d:a8:a2:f5:37:00:c5:3f:c0:2c:b2:
ec:f4:bf:60:59:e0:24:7c:f1:92:78:11:bc:ac:e8:
9c:6c:db:8f:9c:be:7b:14:64:7e:55:a4:a0:da:37:
71:45:48:23:64:fb:c1:f7:79:d3:bc:fc:97:2a:bd:
ea:2d:6d:41:1f:d8:1d:e8:45:84:90:3f:12:07:30:
c2:2d:f1:25:20:38:62:cc:79:c4:d5:52:0c:9a:11:
37:5f:45:c8:ca:c5:19:55:79:9b:3a:33:7c:a9:02:
c7:d9:65:55:17:4f:9b:ed:d9:d4:9c:c6:00:96:46:
ff:4b:56:1c:56:ee:97:09:60:93:22:b9:d9:63:cb:
37:9a:bb:b9:7c:ec:e6:ac:09:fc:d1:23:6b:b8:d7:
d0:00:74:9c:ac:8f:1b:79:5e:37:52:12:a9:c6:02:
ea:5a:68:80:34:88:03:8e:f0:a1:ea:61:e6:8d:a2:
57:48:34:37:85:10:f6:67:7c:bf:68:c5:67:be:28:
4b:92:7d:71:e0:01:28:7d:4c:3f:6a:17:9a:7e:27:
37:04:05:fd:f5:17:a6:7f:82:00:c4:4b:1c:2a:64:
66:99:a5:fe:95:f9:88:bb:25:73:ff:39:a6:f3:ff:
5f:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:C8:C2:A0:F9:5A:A2:1F:FD:27:44:E8:83:8E:D1:DC:A7:A5:FF:B1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/16a1ba98-8a17-3094-bfea-ecadc62c2c04.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:0:5050::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
22:0f:a3:77:4f:89:b4:9c:5d:de:30:35:96:d8:19:10:b9:b8:
f3:80:32:38:8a:4e:c1:84:fa:de:51:a2:df:78:bc:91:66:4e:
38:e2:ec:66:ae:ae:ab:87:c0:c4:90:84:61:89:1c:87:3e:d3:
91:ca:a6:d5:da:73:fb:ea:61:f8:3e:b6:0c:c9:71:03:b1:b7:
33:35:8d:21:28:5b:29:86:22:71:9a:16:97:25:8b:ab:5f:aa:
f6:bd:a1:16:09:09:27:5b:b9:16:e8:8f:7a:bb:36:d4:6e:e1:
27:de:59:fc:a2:90:66:1d:e0:3a:f1:93:dd:db:56:48:24:60:
f4:9b:f7:ea:9b:56:a9:09:9b:2b:b8:24:01:c8:71:66:54:4d:
4b:c2:82:46:f2:97:d9:9c:74:b9:f8:59:ec:c3:51:b7:4f:70:
91:c6:7f:fc:c3:3a:bf:6a:ae:5c:5f:de:ce:77:e3:20:21:b8:
4b:52:9f:27:27:d6:be:28:0f:17:b9:57:2d:91:69:ad:12:9e:
66:5c:db:99:14:36:ac:1d:7c:6f:1a:03:a9:f6:86:9d:00:8c:
02:58:3b:c6:9d:63:3a:d0:d3:4d:55:33:05:58:e7:60:fc:3a:
14:f8:ef:86:4f:7a:02:10:f0:36:af:03:bc:8c:9e:05:13:34:
5c:af:e7:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:47:16 2025 by rpki-client