Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a27aef5f-244a-32c0-8a62-33b6fd002957.roa
File: a27aef5f-244a-32c0-8a62-33b6fd002957.roa (raw, json)
Hash identifier: ew94CV1UO4Wa8YEIB6lL5kw7D5ac4Av8MNFQGOon2fc=
Subject key identifier: 33:C0:EB:2C:4D:99:A6:0C:9E:50:3D:63:28:B6:A6:50:B2:3C:3C:17
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858490CB162A25197BE65E5E07500
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a27aef5f-244a-32c0-8a62-33b6fd002957.roa
Signing time: Sun 02 Mar 2025 02:00:40 +0000
ROA not before: Sun 02 Mar 2025 02:00:40 +0000
ROA not after: Sat 31 May 2025 01:00:40 +0000
asID: 36618
IP address blocks: 2620:0:5050::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:0c:b1:62:a2:51:97:be:65:e5:e0:75:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 2 02:00:40 2025 GMT
Not After : May 31 01:00:40 2025 GMT
Subject: CN=0ea461b3-9c51-4a37-862c-d29d5baec93f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b6:a3:c8:5e:fd:ac:f6:45:69:bb:54:17:bc:
c7:4c:8c:ad:e7:0d:6b:62:23:80:1f:61:36:9d:5b:
86:2e:cc:ed:66:a7:46:a5:41:9f:5a:da:ff:c0:24:
a5:8d:f3:5e:c3:4f:48:ff:05:7e:db:b8:ed:6d:f1:
1d:eb:76:f4:9f:96:3a:46:fc:fb:df:de:ee:37:05:
2f:d4:2d:0e:dc:3c:69:5a:d3:f7:3c:dd:29:87:16:
d9:78:dc:9c:ae:2a:fc:d1:8c:91:a7:7f:c8:8b:52:
94:8d:4b:ae:e3:67:a7:03:bf:3a:3a:7c:a3:fa:5b:
56:4e:06:47:ea:f5:84:cc:16:b0:8a:0e:9f:6a:d9:
b8:a5:90:d4:b3:06:04:ef:8f:aa:c8:76:e3:d3:7b:
55:d7:32:43:3b:40:72:f8:8b:65:b1:da:a6:bc:f2:
da:8a:0a:bc:f5:b5:fa:96:8e:a3:e4:c3:d4:91:50:
20:bc:b1:38:be:7b:9c:4d:3b:52:6d:b1:2d:82:fb:
9d:73:b7:40:f5:e4:67:7f:b2:ac:0c:d4:ab:40:f1:
93:08:87:86:60:f6:17:77:7a:60:be:68:5f:95:e0:
55:80:ca:71:17:09:fd:d3:15:3c:59:b8:d9:61:77:
44:6e:c7:9d:10:65:53:2b:11:47:d8:57:85:b5:76:
07:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:C0:EB:2C:4D:99:A6:0C:9E:50:3D:63:28:B6:A6:50:B2:3C:3C:17
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a27aef5f-244a-32c0-8a62-33b6fd002957.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:0:5050::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2d:03:5e:04:d3:5a:1b:73:29:57:69:54:a5:64:03:95:80:18:
8e:a1:dd:4f:b2:74:ab:e3:fa:6e:58:cf:19:93:85:08:cd:a8:
f2:ad:0f:81:8b:b3:88:c2:6f:04:3d:50:3c:57:56:9b:63:c7:
0c:b4:9a:4f:0f:7f:dc:f8:6c:7d:11:16:60:79:d7:3e:ab:2e:
b2:92:76:33:32:df:ee:ed:b7:24:1d:15:54:cd:4c:68:86:39:
e5:b4:be:6d:94:f1:98:85:7d:45:fd:78:11:2d:2c:cd:1e:e0:
94:3b:5a:b9:4b:f5:03:69:a1:19:85:55:3b:b9:d1:34:03:8b:
85:29:b7:31:6e:4e:fd:3d:0f:ec:bd:e4:5b:26:cd:4d:5a:3e:
89:6b:e4:91:17:0a:92:19:ab:dc:2f:ec:4c:b4:b7:b7:3e:89:
00:fd:a6:40:d4:ad:eb:c5:36:e9:2b:e4:3c:bb:ff:51:be:d7:
6c:49:30:df:e6:93:22:cb:39:19:95:b1:08:a8:ff:9f:c9:83:
a0:c9:b3:9c:28:c2:17:13:05:d8:fd:95:f0:47:f3:7b:1f:c5:
96:56:7b:07:3b:25:04:5c:e2:e9:49:4a:1e:f1:8a:9e:70:5c:
c1:69:22:a2:dc:10:ed:fa:b9:01:9f:3c:78:2c:aa:c5:74:63:
25:fe:b4:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:58:53 2025 by rpki-client