Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5e3230de-d4a4-341c-b5f3-bbabf1d1657c.roa
File: 5e3230de-d4a4-341c-b5f3-bbabf1d1657c.roa (raw, json)
Hash identifier: 2xpCJLhCR01h1HD+sznn6k7HAXJWj475CNkWxhtxEqo=
Subject key identifier: 77:63:32:68:E8:A1:E3:95:4B:F3:0E:20:BA:EC:35:C1:90:EE:F0:DF
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858490CB15359665995431ABD98C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5e3230de-d4a4-341c-b5f3-bbabf1d1657c.roa
Signing time: Sun 02 Mar 2025 02:00:40 +0000
ROA not before: Sun 02 Mar 2025 02:00:40 +0000
ROA not after: Sat 31 May 2025 01:00:40 +0000
asID: 396599
IP address blocks: 2620:0:5050::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:0c:b1:53:59:66:59:95:43:1a:bd:98:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 2 02:00:40 2025 GMT
Not After : May 31 01:00:40 2025 GMT
Subject: CN=8f04607c-9e44-423c-8581-8f0b51c7029b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:0b:bf:1a:4c:31:bd:23:b2:fe:a2:0d:fc:54:
23:23:07:7d:b9:eb:4f:2b:b8:34:e2:22:56:21:77:
7e:7f:2a:cc:31:0a:7a:b5:42:78:6e:3c:82:6e:88:
0c:5c:13:c4:64:6f:65:0f:a9:99:94:7a:db:50:ef:
93:30:1f:56:6d:a1:31:b2:04:be:bd:f3:e1:6d:40:
94:18:43:bf:90:46:f8:d5:61:72:21:d5:53:ab:e4:
b5:37:ef:7b:02:d2:93:46:62:85:ab:2b:ad:7c:fc:
d7:e4:05:68:f2:70:6a:c1:85:92:dc:b5:0e:3c:c5:
66:fa:91:86:bb:ca:5d:e0:4d:74:bc:00:e1:c1:ff:
57:ee:88:f8:44:12:65:c0:48:8a:d1:eb:f1:79:00:
c7:9f:60:77:9a:37:f6:06:c3:2c:1f:cb:a9:aa:18:
db:d8:d3:91:18:68:e8:fd:65:5e:be:72:76:e3:f8:
89:95:2a:e5:ff:43:75:b9:1b:8a:d1:2e:fd:3d:1d:
8e:f4:cb:83:c4:7a:5a:7c:de:39:21:1d:63:31:bb:
d7:5f:62:3b:0e:e2:38:37:b3:3d:d4:33:df:79:5c:
a0:f8:bd:02:e6:81:79:91:e8:9c:70:7b:a6:ba:b9:
7b:3b:d7:8a:ff:28:8d:6f:00:86:ea:64:0c:d4:f4:
bd:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:63:32:68:E8:A1:E3:95:4B:F3:0E:20:BA:EC:35:C1:90:EE:F0:DF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5e3230de-d4a4-341c-b5f3-bbabf1d1657c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:0:5050::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
06:92:e9:a0:bd:7a:a8:ba:0e:34:8d:43:2b:e9:01:4b:aa:c9:
4b:d0:49:34:99:ff:de:bb:86:48:15:0e:cd:d8:cb:71:eb:81:
9f:a0:60:48:1f:6c:66:3a:9a:98:5b:0f:06:ef:cb:eb:59:68:
0e:67:d5:71:9b:3b:89:7b:0f:81:98:9e:ce:9c:14:00:a0:4a:
cd:8b:e9:40:cf:7c:ae:e8:2f:4a:a1:ed:bc:66:33:44:a3:4c:
6d:62:21:a6:e9:a3:eb:7e:a9:d6:71:9c:5c:65:75:9d:14:5b:
47:41:cf:4e:22:4b:84:55:26:4b:81:e1:a1:e1:4e:88:4d:70:
60:65:fa:d6:53:f3:c2:62:e8:86:15:37:30:fa:48:16:8a:9e:
db:6d:39:16:4f:52:93:31:63:d9:92:bd:35:5b:b3:85:99:d1:
db:a8:64:3b:90:55:53:16:ba:7e:88:38:71:56:64:fc:52:cf:
b2:1d:ac:d4:49:61:a6:e5:e1:81:4f:ba:85:83:4d:a7:50:c8:
16:02:4d:ee:20:97:ab:aa:63:94:b7:3d:19:b9:83:59:b4:dc:
4b:34:76:58:a6:59:58:c4:9d:71:92:05:04:e0:bd:27:4d:21:
ed:39:34:3d:8c:0c:62:ef:55:9d:08:1d:99:0a:a9:8a:2b:ac:
2b:c5:6b:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:52:33 2025 by rpki-client