Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/31ab87a9-7dd1-3a56-8daf-9a43c5e9a891.roa
File: 31ab87a9-7dd1-3a56-8daf-9a43c5e9a891.roa (raw, json)
Hash identifier: OQFzqrZ8eVKZDBptpNjlv6Z7IvBV/62w1V5KnD/g6Bo=
Subject key identifier: AC:0B:9A:65:5E:0F:65:08:0A:5E:71:0A:31:58:EB:C6:4D:C4:92:26
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858490CB16240330A115A61CADB80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/31ab87a9-7dd1-3a56-8daf-9a43c5e9a891.roa
Signing time: Sun 02 Mar 2025 02:00:40 +0000
ROA not before: Sun 02 Mar 2025 02:00:40 +0000
ROA not after: Sat 31 May 2025 01:00:40 +0000
asID: 396563
IP address blocks: 2620:0:5050::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:0c:b1:62:40:33:0a:11:5a:61:ca:db:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 2 02:00:40 2025 GMT
Not After : May 31 01:00:40 2025 GMT
Subject: CN=d1b320f9-0bac-4809-8466-80c542dfc182
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:16:46:08:cf:1f:9d:cd:a1:68:ac:e9:0a:8a:
97:56:b9:48:df:94:04:a1:bd:a8:19:8a:cd:16:6d:
87:d7:f9:19:8b:a1:33:2d:83:2a:9d:af:80:99:9b:
78:f4:21:30:26:d7:3a:31:00:13:56:da:b9:bb:f8:
ca:cc:60:81:f2:d2:8c:8c:94:ce:f8:ec:8e:a4:c6:
1f:72:b8:51:3b:9d:41:37:f4:0c:94:58:b6:90:b2:
f1:cc:fe:de:fa:56:1d:9b:4d:9a:61:ff:0a:4b:73:
ab:10:39:57:3d:d8:d5:c6:68:e0:25:e0:d7:72:12:
b1:7d:eb:21:38:b6:4e:92:f2:2d:70:42:7c:74:00:
bb:0b:29:27:f0:2d:94:a9:be:11:3d:12:0b:e7:b5:
51:40:ce:99:10:6e:f7:06:52:d0:9d:f2:48:52:98:
55:11:8a:0e:ca:69:76:93:56:2d:2b:87:bc:db:9a:
74:31:58:14:73:d2:ac:e8:91:93:d0:70:39:05:72:
80:c1:ee:06:06:5c:47:9e:40:36:a9:3d:79:69:ee:
dd:7e:20:94:92:8c:f0:21:d6:fc:08:85:91:9f:fb:
10:20:89:a5:d1:c2:f5:4c:9f:04:14:41:86:55:30:
99:84:ba:b3:36:05:26:12:2b:00:5d:f2:69:ab:3d:
bc:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:0B:9A:65:5E:0F:65:08:0A:5E:71:0A:31:58:EB:C6:4D:C4:92:26
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/31ab87a9-7dd1-3a56-8daf-9a43c5e9a891.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:0:5050::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
67:94:1f:61:53:81:1f:32:94:e2:98:3b:7c:be:2d:9a:7e:2d:
be:72:27:6d:5c:c2:37:fa:93:c3:97:05:11:1b:4f:f0:33:cd:
5b:79:4c:77:4f:c9:0b:b8:3d:aa:56:50:47:c9:92:90:85:df:
da:de:90:d4:0d:b6:6d:0c:bb:b7:fb:2a:f1:fa:84:11:b7:b7:
83:b6:8c:4e:88:06:47:3f:48:3b:3b:34:e4:fd:1a:94:73:34:
ec:f7:e6:a8:bf:d0:b1:8f:20:8a:fe:f1:80:37:19:c0:85:66:
a0:1a:61:35:65:bc:17:86:45:c9:45:3a:f2:ef:a5:d9:28:59:
61:a5:8c:77:02:6a:b5:69:54:e7:1b:42:d9:18:71:cd:14:61:
cc:bb:c6:41:9e:71:c4:47:cc:3a:8c:52:21:47:d0:23:04:77:
a3:33:da:4d:52:0b:b0:f8:97:cc:46:94:04:20:c8:52:05:09:
f0:8b:4e:ff:ba:81:e4:6e:5b:77:06:5e:c0:c2:cc:98:70:79:
5f:34:0f:15:88:b1:02:2a:c2:19:7e:5c:2b:50:fd:3f:d7:77:
42:15:a4:3f:f3:67:d2:54:b6:e2:95:1a:c1:e9:3d:94:b0:11:
6f:ad:a1:d9:ed:7e:a4:dd:1d:ca:56:41:93:8c:d8:72:03:33:
dd:c5:82:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:05:06 2025 by rpki-client