Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/404cefd8-7ea1-3fe6-b88b-275975481a6d.roa
File: 404cefd8-7ea1-3fe6-b88b-275975481a6d.roa (raw, json)
Hash identifier: iThVtY/rlMghr4JAgI1dZtxYT+0XUtkJVL0tQe72TO8=
Subject key identifier: C3:B3:74:91:BB:79:39:E4:A5:5D:9F:D7:2C:CE:76:5F:36:96:6F:78
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858490CB15EEC8EBEFF6768B85F00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/404cefd8-7ea1-3fe6-b88b-275975481a6d.roa
Signing time: Sun 02 Mar 2025 02:00:40 +0000
ROA not before: Sun 02 Mar 2025 02:00:40 +0000
ROA not after: Sat 31 May 2025 01:00:40 +0000
asID: 36616
IP address blocks: 2620:0:5050::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:0c:b1:5e:ec:8e:be:ff:67:68:b8:5f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 2 02:00:40 2025 GMT
Not After : May 31 01:00:40 2025 GMT
Subject: CN=a8c3d898-5c52-46b6-b8a1-5d1bb7e238bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:3b:f2:3a:a3:f7:88:3b:e0:a7:c8:49:04:a7:
3d:88:9a:5d:4b:2e:80:42:7b:73:4d:57:78:cb:8e:
7c:dd:cc:cf:bd:df:0c:18:85:dc:82:99:cd:2f:f2:
c1:a8:0f:ba:58:71:ee:9d:95:dc:f4:46:c5:cd:c3:
f3:22:58:c8:eb:d6:63:6e:12:a9:62:74:30:82:0a:
01:02:8c:e2:bc:a0:c8:75:46:be:2f:e7:68:01:ba:
ec:8e:31:39:64:be:8e:68:f8:a7:e5:91:de:c8:d8:
a9:c8:25:fb:43:aa:ac:5b:d1:bc:bb:16:90:43:f9:
7d:e1:ad:78:95:3e:d9:e1:c0:91:74:97:bb:fd:ca:
51:f8:d7:dc:a0:d7:bb:dc:b1:17:62:62:54:05:0e:
ec:e5:d0:35:73:1b:6e:66:52:f3:c1:dd:b0:bb:b4:
13:3c:21:62:76:18:9e:8e:5c:c1:ae:50:f7:01:20:
ef:22:ee:b4:1f:24:12:29:c2:7e:8b:d0:e9:f5:a0:
f4:c2:72:d2:3f:4c:8f:84:88:47:84:71:c6:6b:4b:
d7:b4:f7:38:1e:0d:01:d1:28:4d:15:63:3e:3e:2d:
01:98:d8:a4:c0:ea:0e:14:3f:a9:c0:77:c7:cf:4a:
13:9e:d7:75:c2:8a:77:f3:c5:66:25:13:2d:1a:67:
3e:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:B3:74:91:BB:79:39:E4:A5:5D:9F:D7:2C:CE:76:5F:36:96:6F:78
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/404cefd8-7ea1-3fe6-b88b-275975481a6d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:0:5050:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
19:be:7e:e9:b3:e7:21:6d:f8:e5:c5:91:d3:20:4e:d3:58:06:
a3:29:1d:b9:9e:6d:c9:1d:f0:19:8d:d8:eb:4e:d7:2c:b5:5f:
e6:11:79:c7:e9:84:3f:cc:ad:0d:ef:0d:33:58:5f:1f:6f:12:
79:48:11:cc:94:86:4d:ac:6a:62:75:e8:47:1d:21:e0:66:25:
84:4c:bd:2f:74:48:e2:78:98:c9:f4:fe:17:26:5c:d8:86:fd:
70:fe:fb:9b:c3:67:35:d9:8e:75:17:eb:4a:b3:b3:e6:6a:7c:
16:e1:df:34:3b:08:62:8e:3e:6b:c8:2e:bb:49:ea:ae:99:49:
c0:6e:c7:5f:83:8b:7e:1e:c8:87:29:b6:e6:d6:b1:4e:da:55:
fe:48:7a:b9:6a:97:5d:53:d9:fe:64:79:ff:28:84:d6:3b:11:
9c:8a:01:1f:02:a9:47:0f:78:57:44:bc:12:47:65:b7:53:dc:
c5:4e:19:8e:78:8f:32:f8:0c:56:79:73:b9:68:cc:c9:7c:6f:
08:d3:1f:14:b5:fa:59:eb:61:fb:8f:0b:2c:50:da:d1:ba:4c:
d5:23:e2:e9:5d:b7:77:03:5b:9d:ef:42:9c:ba:ce:65:2b:71:
1a:0a:e8:b9:b8:78:12:30:10:24:e5:b0:57:81:1b:41:d2:ed:
d2:fc:96:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:44:33 2025 by rpki-client