Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b4553db6-2c56-38f6-90e8-416e2cf94399.roa
File: b4553db6-2c56-38f6-90e8-416e2cf94399.roa (raw, json)
Hash identifier: sTQacNsq+/IqqrAUEpo49NMTZLf595wC2zf1O9nI8Zc=
Subject key identifier: 8E:6C:2A:0F:CF:CB:9C:2F:BF:6D:DF:F5:47:14:E4:3A:14:3B:D6:B9
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858490CB14603D4E4B264817F7100
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b4553db6-2c56-38f6-90e8-416e2cf94399.roa
Signing time: Sun 02 Mar 2025 02:00:40 +0000
ROA not before: Sun 02 Mar 2025 02:00:40 +0000
ROA not after: Sat 31 May 2025 01:00:40 +0000
asID: 397211
IP address blocks: 2620:0:5050::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:0c:b1:46:03:d4:e4:b2:64:81:7f:71:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 2 02:00:40 2025 GMT
Not After : May 31 01:00:40 2025 GMT
Subject: CN=8f960f35-5e18-423e-9057-56fb413b18c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:90:a1:da:2f:91:fe:70:f7:0b:04:f5:99:90:
af:2d:d6:c8:fc:15:b9:9c:88:c6:59:78:90:b4:b0:
bd:b4:8f:12:ab:6f:9e:0f:b6:f0:08:d1:83:c3:b2:
24:40:07:c5:38:51:86:f8:86:4b:a8:27:f1:b7:ae:
40:4c:8d:8c:01:30:2d:26:a2:a2:8e:6f:b2:ca:9e:
7b:af:d8:e7:8c:c5:e4:aa:11:19:7d:33:54:ce:df:
92:c6:b0:0b:81:a8:47:64:77:ef:a8:34:92:62:5b:
58:54:b8:54:4b:02:10:19:e8:1e:70:10:c8:7a:b8:
81:32:f8:15:89:6d:fd:bc:73:ed:e6:2c:c9:66:77:
93:e2:88:0f:1d:ae:4c:65:70:f5:fd:89:e9:cd:76:
f8:b1:71:5e:b3:63:5f:b4:12:dd:c9:61:08:ed:20:
06:a9:7b:04:d7:07:a0:0d:7e:64:ef:f9:be:3d:ab:
c9:1a:3a:b6:2a:cb:9b:87:4d:ae:e1:a3:c0:ce:ea:
06:14:33:cc:a8:28:05:6e:e2:1a:7d:f3:a0:e5:22:
11:89:41:e8:a5:59:59:c2:93:1d:df:e8:a5:7c:8e:
77:d9:6f:b3:bc:f1:57:a0:a2:82:6e:a8:a5:55:0c:
0f:cc:43:86:02:c8:01:99:a2:4d:99:e5:5a:89:96:
02:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:6C:2A:0F:CF:CB:9C:2F:BF:6D:DF:F5:47:14:E4:3A:14:3B:D6:B9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b4553db6-2c56-38f6-90e8-416e2cf94399.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:0:5050:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bd:96:45:31:93:ca:7e:ad:57:ca:aa:41:f9:86:5d:37:5b:5a:
e0:07:be:42:51:57:a8:ab:51:d0:6e:85:6e:a6:c1:e0:e2:bc:
42:04:15:44:7f:3e:3b:dc:fd:a9:ff:b1:19:9f:a1:87:dc:d7:
5f:7a:c6:9f:06:52:d3:f2:e7:5e:8b:1e:f5:96:4e:c5:10:d9:
ad:49:16:9e:b9:92:16:bb:29:af:44:39:fe:61:db:1e:ef:4b:
b7:fb:43:c5:60:e8:ec:66:4f:f8:f9:03:0a:64:c1:90:08:2e:
f1:6e:5d:44:eb:2b:e4:3b:18:cd:4f:31:29:af:e9:fd:7b:04:
d8:5f:ff:6f:6d:98:2b:a5:d7:7d:6e:78:1a:f4:d3:99:0f:f9:
60:2a:f5:ac:c5:d8:b3:be:01:fb:bc:62:f9:7a:18:93:db:fe:
bc:4d:2a:39:c6:0d:0d:31:62:37:f0:3c:a5:41:d5:ff:a1:c9:
5e:b4:1e:3e:66:bf:3a:e2:4d:09:03:43:4b:a6:cf:59:9d:30:
42:98:1a:1a:8c:df:42:15:92:eb:65:b6:53:4f:99:76:47:0c:
61:98:36:80:00:b9:89:b8:f6:5f:c6:e4:e0:ef:4b:b3:9e:c1:
fd:ad:76:0a:18:51:eb:17:96:fc:3f:06:f0:65:4b:a6:2a:c6:
4b:a7:29:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:45:25 2025 by rpki-client