Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d25600ea-2b3f-3782-8588-80be199f0ce8.roa
File: d25600ea-2b3f-3782-8588-80be199f0ce8.roa (raw, json)
Hash identifier: qnd3utm8ihAwLH/LsPMvfAtUjrJskOH6kh2y9j7UIBI=
Subject key identifier: 52:0D:04:BD:37:FC:EF:A4:44:48:E3:98:D6:ED:53:72:97:E6:33:FB
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858490CB1575A8E6E4FB08F9AA680
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d25600ea-2b3f-3782-8588-80be199f0ce8.roa
Signing time: Sun 02 Mar 2025 02:00:40 +0000
ROA not before: Sun 02 Mar 2025 02:00:40 +0000
ROA not after: Sat 31 May 2025 01:00:40 +0000
asID: 396612
IP address blocks: 2620:0:5050::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:0c:b1:57:5a:8e:6e:4f:b0:8f:9a:a6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 2 02:00:40 2025 GMT
Not After : May 31 01:00:40 2025 GMT
Subject: CN=63d3cb52-83bd-4ee1-9068-35c208dfec4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:52:ba:24:0d:f9:8a:a4:29:a3:1c:56:e8:1d:
69:fb:4e:30:f8:ac:b5:10:d1:39:d0:5b:3f:54:17:
4c:01:1c:26:30:aa:c4:87:bc:28:24:dc:2c:f3:e6:
c6:a9:56:a1:e0:0b:6c:7a:90:b9:3c:41:38:e2:cc:
aa:9b:96:93:a4:4e:49:f9:3e:74:50:cc:6a:d8:2f:
ee:5a:91:cc:10:7c:9b:4b:58:68:1c:df:4e:1e:1e:
6d:83:e1:b3:da:c4:e7:5b:6b:0e:b8:e7:ef:6a:1b:
d2:a6:ad:5d:bf:60:4b:00:c8:ed:6e:15:45:e7:8e:
bd:22:e6:2c:dd:8e:ad:11:d6:4f:7c:1b:80:48:d5:
69:97:dc:8d:27:27:83:8a:ec:02:9f:d0:61:32:00:
ff:88:d0:64:6a:91:bb:5b:a1:58:28:83:9d:bd:dd:
45:63:06:de:c3:48:2b:7c:74:27:08:b2:72:fb:81:
de:01:eb:d7:13:41:98:87:4c:20:ac:eb:4a:b6:b5:
b6:39:b4:c3:a4:fb:2e:ce:08:86:cd:2e:7a:94:e3:
55:b0:0a:1a:18:f4:6e:0e:cd:22:e2:ea:f7:8a:e9:
78:84:31:a9:b2:93:4b:aa:23:da:7d:11:df:34:e5:
98:80:92:4d:ec:74:d0:93:96:45:e4:06:12:31:8e:
9b:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:0D:04:BD:37:FC:EF:A4:44:48:E3:98:D6:ED:53:72:97:E6:33:FB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d25600ea-2b3f-3782-8588-80be199f0ce8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:0:5050::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b6:28:30:db:6b:68:11:aa:2e:ee:51:3f:e6:c7:ce:da:f5:00:
23:b3:9e:0a:0b:84:0b:50:f0:37:66:97:40:8f:4b:42:ef:b6:
4b:6b:ce:e6:7c:f0:5b:05:36:50:8e:8d:35:9e:07:a9:d4:1a:
ba:20:bf:0a:05:62:cd:87:31:64:9d:f5:d7:3b:b3:df:17:50:
1a:16:e4:1b:37:b4:c1:df:93:2b:bb:dc:0e:9b:7c:05:49:4f:
33:07:d9:54:58:3f:9a:1d:49:81:2a:c5:06:7c:50:b9:4d:6f:
28:c3:9c:c5:72:f7:75:e2:2c:39:0d:6e:94:78:68:90:5a:0d:
a8:73:cb:3c:63:b0:09:6d:95:30:3e:5f:a1:51:bf:68:da:26:
d3:2d:c9:81:e9:d8:74:aa:80:74:bc:2a:e8:f8:9e:b4:bf:a2:
13:fb:19:07:d9:4a:44:d2:f3:2a:ff:4f:16:32:f1:32:e3:93:
32:4a:fe:8f:15:15:b6:bb:bb:56:c5:3e:7c:1e:75:f8:e9:bd:
b0:ef:57:e5:75:f9:c3:00:dd:05:b7:f5:5a:73:83:26:96:fd:
bc:2e:f5:40:fc:1e:cb:87:dd:e4:29:39:52:89:c0:45:be:2c:
38:28:6e:f5:4b:aa:52:8f:15:6d:67:62:74:a0:42:1c:6e:f0:
c2:25:ed:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:40:29 2025 by rpki-client