Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/250689f7-3368-31de-b24d-7aaf3aaef1d5.roa
File: 250689f7-3368-31de-b24d-7aaf3aaef1d5.roa (raw, json)
Hash identifier: dpylSA09yIdM19J4LUzFOr1wrsfPlDA+OwfBZJPBPKs=
Subject key identifier: 3C:E4:03:C5:9F:36:75:46:07:9B:E0:69:14:20:DC:93:B9:B5:AA:28
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858490CB147C3950E5351BB60FE40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/250689f7-3368-31de-b24d-7aaf3aaef1d5.roa
Signing time: Sun 02 Mar 2025 02:00:40 +0000
ROA not before: Sun 02 Mar 2025 02:00:40 +0000
ROA not after: Sat 31 May 2025 01:00:40 +0000
asID: 396609
IP address blocks: 2620:0:5050::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:0c:b1:47:c3:95:0e:53:51:bb:60:fe:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 2 02:00:40 2025 GMT
Not After : May 31 01:00:40 2025 GMT
Subject: CN=4584c8de-14a0-4f20-944c-aa8d75b36bfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:0b:c9:a1:48:cf:ae:cc:33:51:b9:1a:06:0d:
4b:82:dd:fd:f3:9e:4f:ca:08:00:b7:a8:2e:fd:bf:
09:cc:80:d4:2e:d2:82:ed:37:36:e8:69:9d:b0:74:
9e:c4:de:78:9b:7f:cd:62:ff:b0:3b:ee:b5:7b:7f:
45:83:c2:81:26:85:b4:ed:de:04:a3:64:5c:08:c5:
79:a4:46:c9:25:66:b7:9f:b9:e1:b6:ab:42:1f:4a:
80:d4:42:32:22:0a:9e:fe:d1:03:6d:90:3c:62:49:
8f:93:f2:4f:b5:d9:4b:7a:b7:b1:8a:94:db:f6:f9:
cf:e8:db:19:59:95:21:d7:19:b2:19:e4:cd:42:3b:
80:d0:1d:9e:df:ed:0f:1c:94:9f:54:68:8d:21:4d:
e7:1f:82:62:49:a2:b2:8f:74:bd:a6:05:9b:07:74:
7c:fe:2d:5d:7d:92:3f:d1:e8:c6:d4:8b:1d:c1:ed:
32:4d:c8:b3:fc:f7:e6:ba:c4:9d:35:32:42:e4:52:
d6:2f:01:3f:51:c9:47:d4:52:47:6c:13:db:67:1c:
b3:32:af:ac:dc:b6:2a:e6:98:50:32:09:33:12:55:
ae:d9:84:78:94:60:a5:ad:a9:79:63:fe:f5:98:46:
31:d9:dd:b6:4a:4e:ca:4f:2d:19:66:64:9d:b3:99:
56:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:E4:03:C5:9F:36:75:46:07:9B:E0:69:14:20:DC:93:B9:B5:AA:28
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/250689f7-3368-31de-b24d-7aaf3aaef1d5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:0:5050::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
68:96:69:cd:c8:6e:5b:e4:d7:0e:51:62:21:4c:4d:cc:76:b0:
4f:75:27:79:8a:ac:d1:95:ff:1d:2f:24:d8:60:50:fe:ad:d3:
c3:a9:2c:f6:77:36:d0:5d:ae:d1:0e:f3:6c:5a:c7:de:5f:75:
25:d2:1a:25:1c:a2:5c:2f:e0:21:6f:7c:2e:54:f7:df:20:4d:
a4:c8:6f:2e:a1:93:67:7c:fd:03:39:9f:bf:6c:90:3c:81:fa:
85:b1:45:e5:e8:a2:64:70:10:c8:06:26:94:17:da:13:c3:bb:
7c:ab:d0:43:73:b2:8d:93:61:0c:89:fa:d9:a8:53:9b:f2:9b:
f2:8d:6e:56:d7:96:cc:09:7e:21:37:2f:75:61:3b:c4:9c:d3:
a2:2f:32:23:b1:0d:9d:15:eb:11:90:36:ea:1e:d4:d5:6a:6e:
7c:e4:38:28:16:0f:fe:7f:d0:3c:26:31:98:17:1c:cb:de:7a:
a3:3d:db:fd:b0:5c:7b:b0:b2:41:9c:4f:77:9a:2b:9e:d1:20:
af:ca:67:03:ba:42:36:6f:5d:08:59:ce:56:8a:f9:1f:a9:ef:
67:b1:bf:f2:1e:75:97:93:78:f3:6b:00:e7:ae:00:50:6e:c2:
e5:e6:1d:ff:62:8b:02:78:ed:07:09:28:08:64:b4:85:06:2d:
bd:0c:99:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:11:22 2025 by rpki-client