Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d8916a3c-a190-3ccd-a204-2cfec8af4ed5.roa
File: d8916a3c-a190-3ccd-a204-2cfec8af4ed5.roa (raw, json)
Hash identifier: KF+eKHB+mSrofF4ik0U2o6z7BPM6gRdU2Y8EThIFUa8=
Subject key identifier: 80:96:BE:73:7A:AD:5A:DB:63:14:A1:B3:38:AB:79:31:C6:C0:70:00
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858490CB1574B609AF687A96AF480
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d8916a3c-a190-3ccd-a204-2cfec8af4ed5.roa
Signing time: Sun 02 Mar 2025 02:00:40 +0000
ROA not before: Sun 02 Mar 2025 02:00:40 +0000
ROA not after: Sat 31 May 2025 01:00:40 +0000
asID: 396615
IP address blocks: 2620:0:5050::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:0c:b1:57:4b:60:9a:f6:87:a9:6a:f4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 2 02:00:40 2025 GMT
Not After : May 31 01:00:40 2025 GMT
Subject: CN=9475130b-c7b2-4e30-92fe-45be6a1673b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:b7:58:9a:07:28:78:b1:36:41:56:53:9a:df:
2a:3d:ad:e2:f7:94:52:e7:b0:e1:35:bd:f7:d9:b9:
a4:e9:50:80:b9:1b:22:b3:75:92:a8:e4:5e:bf:3e:
48:6d:cd:56:71:7a:85:b3:2e:56:a0:be:1a:ca:c2:
f2:65:13:42:66:c8:5c:6d:24:0b:72:f2:93:e1:b8:
42:3e:9a:68:e2:ec:fd:ae:f6:8d:45:d0:ab:a7:3f:
a5:f8:5f:aa:5b:99:76:f3:ad:cd:cc:c2:f3:5b:81:
a2:8b:cf:20:48:8b:71:f3:d0:da:d1:35:9e:80:ee:
96:33:8b:4f:6c:f4:f8:e4:71:e4:a0:1f:c1:81:29:
4d:18:03:d9:66:8b:9f:e3:c6:5a:03:f7:b8:81:c7:
ac:52:09:c3:bf:cb:6e:87:01:bf:da:b0:51:a9:32:
76:5e:f1:0d:7c:f4:0d:1c:95:8b:c3:9b:cc:0d:01:
9e:5d:3f:c4:f8:fe:39:b0:2a:d4:90:a1:e6:2e:aa:
0a:71:74:93:80:45:a8:f1:ef:ff:35:85:ee:f9:00:
6e:b9:a2:b9:bf:45:dd:b4:b7:3a:f8:4a:34:54:ce:
87:f3:1a:35:83:b2:d1:d4:43:96:65:79:b0:b0:b8:
08:56:59:eb:6d:bd:f8:6f:f2:be:54:0a:0d:9d:ae:
0e:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:96:BE:73:7A:AD:5A:DB:63:14:A1:B3:38:AB:79:31:C6:C0:70:00
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d8916a3c-a190-3ccd-a204-2cfec8af4ed5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:0:5050::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
43:44:8f:42:16:c8:e1:81:44:9c:57:df:62:0e:de:b7:fd:36:
60:eb:c9:f5:81:e1:68:73:2a:f6:67:82:c0:77:d3:1e:41:8a:
ed:04:2e:e8:80:83:5a:23:4b:1d:24:f0:be:7a:9d:25:b2:f5:
f6:97:f2:d5:dc:0c:2b:f8:b7:9f:2c:9e:36:52:11:d6:1b:c8:
02:ba:c7:06:70:dd:2d:d1:15:93:b8:1f:cc:1e:dc:c4:10:4b:
a3:b2:cf:1f:f3:8e:5c:35:0e:90:46:d7:b2:e6:33:b4:43:59:
d7:13:9c:ea:39:ab:a7:cc:b0:ce:d6:64:f9:32:af:c1:81:36:
64:06:36:07:e6:33:5c:73:2e:90:e4:e7:08:2d:90:5a:94:ad:
19:b7:60:34:f6:71:9c:dd:82:3f:20:5a:ba:0a:7b:49:b9:54:
f9:42:fc:42:74:08:8b:ce:b6:4a:89:93:b2:10:f8:1a:d4:96:
b8:48:5c:aa:06:e1:8f:18:25:3c:b7:a3:37:1e:de:3e:54:bc:
d6:e2:0e:1f:24:f7:bb:ff:45:6c:43:f6:86:c6:5a:f9:4c:43:
ff:0b:21:fc:e4:3b:c3:0a:07:e3:ff:cd:c6:c9:cc:3c:fc:89:
be:18:6b:75:21:f4:bc:06:23:5d:60:d6:aa:24:67:39:76:b2:
cb:09:c6:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:00:02 2025 by rpki-client