Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1818d6dc-b4be-3bf3-b85d-cfd5df57e8a2.roa
File: 1818d6dc-b4be-3bf3-b85d-cfd5df57e8a2.roa (raw, json)
Hash identifier: AazYAQYFew7pcUZAgT1ndUsawyz0t5g6OP+mGR+T22s=
Subject key identifier: 9B:EE:9C:27:79:3D:BC:54:84:18:59:DC:1A:10:1F:80:5F:E5:48:6D
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858490CB15F6111AF118C01EB2D08
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1818d6dc-b4be-3bf3-b85d-cfd5df57e8a2.roa
Signing time: Sun 02 Mar 2025 02:00:40 +0000
ROA not before: Sun 02 Mar 2025 02:00:40 +0000
ROA not after: Sat 31 May 2025 01:00:40 +0000
asID: 396547
IP address blocks: 2620:0:5050::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:0c:b1:5f:61:11:af:11:8c:01:eb:2d:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 2 02:00:40 2025 GMT
Not After : May 31 01:00:40 2025 GMT
Subject: CN=57ea0345-8e7a-4c68-b482-e0ec11e2b3ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:ab:20:15:34:60:22:23:ca:35:71:7a:b2:4a:
89:ab:b8:a0:f0:ec:b1:9e:b7:bd:23:63:e5:47:a4:
b6:5a:4f:21:e7:03:6f:89:cd:d2:54:fe:ca:e8:c6:
c1:1d:8a:85:91:1d:26:6a:15:db:aa:42:bb:ae:e8:
b0:6c:da:bb:75:df:62:2d:bc:15:c9:2e:5b:25:a9:
8f:b6:d7:21:57:37:5d:23:28:99:06:91:04:af:e9:
f2:30:7c:4f:0f:27:36:8e:4a:e1:e1:c3:cf:a1:40:
ea:c3:ec:25:e9:e6:d3:a1:a1:ea:a7:e7:8b:fe:2a:
08:cd:20:5e:ae:03:41:3a:c8:08:05:e2:85:72:04:
da:1b:39:30:ab:b1:d5:f5:6c:b2:71:a0:6e:b0:f0:
a5:03:80:cb:cf:fa:d6:84:13:c2:e6:68:55:83:2f:
56:76:39:d3:c5:41:ab:5b:d0:75:a7:64:1c:22:72:
36:84:79:e0:0d:e2:aa:10:17:8f:eb:fb:01:a1:70:
f9:c6:3a:83:17:5b:00:ba:44:86:4c:77:31:e0:3e:
de:17:db:be:91:31:38:74:73:a0:a5:5d:44:d4:f9:
49:66:5e:a4:35:97:da:a3:f4:b3:81:e2:18:8a:c8:
a4:0c:f3:a1:6d:31:8f:d8:4f:4a:9a:68:be:9f:47:
1d:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:EE:9C:27:79:3D:BC:54:84:18:59:DC:1A:10:1F:80:5F:E5:48:6D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1818d6dc-b4be-3bf3-b85d-cfd5df57e8a2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:0:5050::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a1:58:a5:0c:c1:6e:eb:b9:6e:b2:0e:a6:25:9f:a8:57:13:62:
2d:00:47:be:32:45:5b:fe:66:58:14:3b:94:1f:7a:cf:77:c8:
33:83:bb:a7:02:16:63:3c:90:a3:0f:c6:85:82:b4:06:04:90:
78:e9:d5:79:eb:84:a2:8d:b4:32:e9:0d:1a:7e:92:57:f6:44:
ab:2b:11:a8:a8:ce:7d:b3:7d:3b:7f:12:90:7c:8b:e1:ee:8b:
e8:37:5b:18:ca:73:11:50:9a:02:98:c2:db:f7:9a:ba:cc:9a:
f5:45:a0:3f:cb:95:4d:79:51:f4:f8:6d:ee:7b:a3:7c:cc:12:
2c:ed:87:2b:3f:65:a6:ca:c5:e6:5a:28:87:80:8a:20:bc:ab:
5c:37:3a:da:dd:97:e2:8b:99:c8:70:4c:7b:12:2e:fc:5f:09:
c7:61:fb:c3:17:62:fe:05:07:56:b0:86:ca:c1:81:86:29:bb:
24:9a:55:df:bd:49:63:52:2b:2f:8f:37:30:c2:13:44:90:0e:
23:2d:c1:a1:49:ef:a6:8f:15:26:eb:1f:f6:1b:c2:3f:55:ac:
42:ff:8c:e5:fb:76:4b:9d:74:aa:34:88:9f:1e:2d:46:44:40:
4f:73:00:47:cb:db:ea:cf:d2:4b:54:83:66:02:aa:7a:85:a6:
52:e5:10:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:43:53 2025 by rpki-client