Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9cbaa5c7-95c5-39bf-9402-92aaa5d093a7.roa
File: 9cbaa5c7-95c5-39bf-9402-92aaa5d093a7.roa (raw, json)
Hash identifier: XQlV1/uBhyJkETjdxfDeM322mJSYRkSMaZ0653DqsoA=
Subject key identifier: 7A:65:B4:AF:86:8A:34:1C:68:4B:2A:E1:5D:90:69:6F:3B:29:DB:DC
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858480A73E8EC77658ED6A93AD680
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9cbaa5c7-95c5-39bf-9402-92aaa5d093a7.roa
Signing time: Fri 29 Nov 2024 13:58:31 +0000
ROA not before: Fri 29 Nov 2024 13:58:31 +0000
ROA not after: Thu 27 Feb 2025 13:58:31 +0000
asID: 27544
IP address blocks: 2620:0:5050::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:0a:73:e8:ec:77:65:8e:d6:a9:3a:d6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Nov 29 13:58:31 2024 GMT
Not After : Feb 27 13:58:31 2025 GMT
Subject: CN=3ab0488b-9c52-48d3-a69d-57a89f85c982
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:c6:9c:27:50:73:13:6e:a1:cf:ef:5f:df:91:
f1:07:b7:e8:49:56:87:dc:9f:19:ee:a2:e2:fb:43:
83:dd:c0:0a:3e:99:39:94:28:28:9f:59:d3:45:95:
e6:74:3b:ab:6d:90:ca:91:28:3d:69:1b:45:77:f6:
4c:95:24:69:16:63:0a:d3:6b:94:85:31:1e:a8:c2:
ac:ad:2b:30:3c:fb:a4:c7:1c:ad:97:34:35:39:c9:
c6:97:e7:07:ff:91:37:b9:2f:a9:cd:bf:f2:fa:19:
2d:b1:2f:d0:a5:f1:10:d1:07:c2:32:7c:08:f8:5c:
d7:31:b1:f1:23:54:2c:08:47:42:8e:1c:20:a7:e1:
52:b2:72:21:28:f2:42:c4:f8:ae:9e:b0:f6:83:aa:
1e:7b:47:94:ee:28:05:8f:03:04:57:9a:f3:f7:b3:
ef:d9:f6:eb:13:54:a7:ff:11:96:c4:65:f9:c1:6e:
50:88:a4:bd:70:ae:93:98:9d:ad:c4:3d:53:6d:aa:
bc:b0:64:f1:3b:40:35:3a:03:18:02:7e:dc:a7:a1:
18:90:14:66:4d:d4:03:b8:b4:57:7a:4a:14:26:00:
5b:0c:fb:03:df:45:b2:8c:27:61:78:20:b5:61:9d:
cc:77:77:d1:a3:8d:fd:0c:cc:31:26:0b:7d:f6:1b:
d8:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:65:B4:AF:86:8A:34:1C:68:4B:2A:E1:5D:90:69:6F:3B:29:DB:DC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9cbaa5c7-95c5-39bf-9402-92aaa5d093a7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:0:5050::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
75:76:f1:4d:82:e3:d6:41:0e:6d:fa:39:5d:e9:ee:e7:06:3c:
86:3c:5b:7e:bb:a2:2a:50:b2:71:65:a8:8b:64:1b:6f:ce:aa:
e1:67:d8:1a:b4:66:71:49:99:01:09:ad:95:8b:83:5a:12:44:
aa:73:0c:56:c3:73:5c:a6:8a:30:02:37:78:62:4b:f6:4d:15:
f1:dd:1e:bc:32:21:2f:26:e1:ce:16:55:45:79:bc:c7:29:60:
3d:2c:8a:6b:3c:f6:7a:65:0b:a3:b2:ee:2d:75:97:48:9d:2b:
e8:d0:92:ef:32:8a:4f:54:f8:99:63:69:76:11:80:42:1f:b0:
cd:36:28:3c:5a:dc:08:73:61:f9:ac:dd:74:7c:d4:c0:35:2b:
f1:5d:d6:b4:d4:95:7b:37:35:6b:b4:2e:ed:73:6d:f9:96:4a:
13:6b:a2:e7:f9:a4:d0:61:2d:02:25:fe:92:6a:86:d0:1d:ac:
8a:b5:a1:e7:6e:4c:12:ed:5f:2e:47:2b:f0:ef:2a:59:0e:b8:
1e:be:88:cb:37:5d:5f:b4:71:48:e6:c1:ac:8b:84:24:96:80:
f5:6a:5e:9c:d6:7f:4a:06:da:b1:56:b1:b0:a5:59:61:9c:60:
f1:aa:53:43:b2:a3:3f:30:56:a9:02:e1:47:7e:50:e3:73:8f:
f9:11:8b:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:20:09 2025 by rpki-client