Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9a8509d9-5097-37ea-af56-1533d656792e.roa
File: 9a8509d9-5097-37ea-af56-1533d656792e.roa (raw, json)
Hash identifier: 1OXeeC7l6wpR7IYtlTs9vlE7yBHexI/jYOXdeoQzvSQ=
Subject key identifier: 66:E3:29:C9:06:1B:53:82:48:03:1D:41:01:4E:C2:3D:7A:FD:B3:05
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858482C1B844B23BBA84751936120
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9a8509d9-5097-37ea-af56-1533d656792e.roa
Signing time: Wed 11 Dec 2024 15:17:54 +0000
ROA not before: Wed 11 Dec 2024 15:17:54 +0000
ROA not after: Tue 11 Mar 2025 14:17:54 +0000
asID: 27544
IP address blocks: 2620:0:5050::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2c:1b:84:4b:23:bb:a8:47:51:93:61:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 11 15:17:54 2024 GMT
Not After : Mar 11 14:17:54 2025 GMT
Subject: CN=8ac1398c-024b-43ba-aab6-6d9b5ecb73fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:ab:01:79:db:24:e4:ae:1c:ea:b7:f5:6d:48:
55:d3:ee:f5:67:5b:12:a7:4f:b9:7d:36:45:25:81:
3a:0b:32:27:5b:d3:97:53:29:df:da:ba:74:51:e1:
93:e7:9a:d1:8b:8e:a1:1e:3a:42:dc:0f:77:f1:28:
d2:76:16:17:53:fa:99:54:8a:0b:34:7f:58:3d:8d:
4b:68:a4:c3:25:2e:b1:96:20:bb:76:38:e6:89:66:
39:7d:f7:de:35:30:87:12:7e:b2:f9:b1:c3:0b:b9:
fe:f7:31:d1:46:f9:d2:a3:68:6a:6d:30:63:b6:a7:
3a:b7:bd:9c:0b:b3:5e:ab:07:aa:3f:90:08:38:bf:
e1:5c:0d:33:0f:57:85:af:16:26:f7:bc:d1:67:d8:
c2:9b:43:a0:d8:5d:6c:32:32:7a:1b:03:fb:da:83:
a4:d4:03:ab:3b:d5:67:39:15:29:9b:8d:1e:80:e6:
fe:44:2f:1c:4f:c8:47:ca:d8:46:9c:9f:74:f6:67:
40:b7:07:ab:da:07:70:11:fe:5c:c9:86:61:58:c7:
c7:43:80:ed:73:52:7f:60:34:e4:e3:14:e8:01:0c:
b1:7d:37:7e:6b:ef:3d:cd:ef:44:90:d9:f3:73:42:
8e:0d:eb:99:93:24:61:5f:3b:ab:ce:c7:82:e2:75:
6b:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:E3:29:C9:06:1B:53:82:48:03:1D:41:01:4E:C2:3D:7A:FD:B3:05
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9a8509d9-5097-37ea-af56-1533d656792e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:0:5050::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
12:f0:56:4b:c9:97:4a:58:a8:7c:d4:ce:75:cc:22:e8:f0:49:
9c:5b:6c:a5:31:aa:bd:81:6a:7d:af:da:8c:c9:9f:8a:af:55:
95:09:5d:0b:0e:12:e0:b1:8c:d5:41:4c:a9:bf:da:59:5b:60:
8d:a9:9f:e2:c2:47:27:bc:02:53:e8:5d:d2:c4:b5:7f:de:05:
ed:1e:54:dd:a0:3a:f4:45:1b:ef:ac:5c:8f:34:34:b1:18:bb:
b1:e9:60:9c:76:1b:4f:73:2f:9d:6c:a8:d0:a5:d0:35:fb:e1:
16:36:e8:80:18:4f:06:e5:f6:10:9b:6e:8e:1e:32:19:98:2c:
bb:69:02:99:60:72:ba:d4:92:fd:a0:83:aa:30:be:23:c4:3c:
70:37:02:ef:7f:68:9c:56:a6:74:e3:92:7e:7d:66:78:90:36:
51:3b:c4:13:d4:56:a8:8b:04:d0:07:ac:5f:dc:73:17:6d:c5:
6b:11:b2:33:14:a3:13:8d:60:6a:81:fd:e6:08:3e:ef:3a:a3:
28:f0:fb:92:0e:1c:43:b1:aa:b4:38:f1:7e:40:b9:ee:20:db:
e0:5f:80:e1:da:05:35:46:78:b0:bf:73:84:9d:21:d4:36:1a:
3c:e3:50:6c:d8:f1:a0:92:be:8e:8e:fb:6f:92:10:37:4d:41:
bc:6e:9d:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:27:42 2025 by rpki-client