Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f4f9d60e-0638-34ef-84cc-d37dd5abbbd8.roa
File: f4f9d60e-0638-34ef-84cc-d37dd5abbbd8.roa (raw, json)
Hash identifier: n3LoqmTePwJyiXZSRpUqXaNEueJVvzhtY95VDv6/iu0=
Subject key identifier: 74:CA:44:51:42:1A:51:73:8E:AA:E9:E6:96:E0:E1:8F:2E:0A:6E:15
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858490CB1520FD1CBCAC9CC864640
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f4f9d60e-0638-34ef-84cc-d37dd5abbbd8.roa
Signing time: Sun 02 Mar 2025 02:00:40 +0000
ROA not before: Sun 02 Mar 2025 02:00:40 +0000
ROA not after: Sat 31 May 2025 01:00:40 +0000
asID: 396603
IP address blocks: 2620:0:5050::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:0c:b1:52:0f:d1:cb:ca:c9:cc:86:46:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 2 02:00:40 2025 GMT
Not After : May 31 01:00:40 2025 GMT
Subject: CN=bd50bb72-9251-4545-8580-e748e79fbd20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:2e:35:ac:33:8d:8e:e1:3c:39:ca:3f:6e:bd:
0c:eb:b9:b2:57:9c:da:49:50:55:96:fc:9a:bb:bc:
e0:73:aa:72:d6:38:95:9e:00:06:25:84:eb:73:29:
19:b6:cd:32:2e:74:cc:7b:30:c9:bd:5b:6f:4b:58:
a7:3b:b6:f4:de:b7:93:38:e3:2c:10:ed:1b:a6:20:
25:7a:32:3c:8d:b0:77:90:0b:3d:c9:d1:5b:0d:78:
8d:60:3a:b8:eb:a4:d1:f3:90:78:d2:74:3c:07:c1:
63:ca:b2:c3:5b:cd:6f:b9:16:28:8d:95:41:62:59:
2b:c7:3d:e0:29:57:1c:d0:21:35:b6:7a:54:46:2c:
86:35:10:c8:55:b8:00:bd:2f:69:62:a5:9c:de:62:
2d:88:a0:06:69:cd:73:f7:05:b4:bd:ea:d1:d6:97:
a9:d7:12:84:7d:c1:b5:cb:a6:22:3b:b8:83:8d:9b:
25:94:c5:ae:7b:59:94:6e:98:6f:d4:80:69:44:e7:
b2:ea:bb:d4:43:b1:26:0a:2f:01:1e:b8:d4:02:bb:
8b:c2:4d:f0:a4:d2:40:01:e4:47:fa:ee:7b:81:92:
52:14:11:8c:e1:3a:0a:54:fa:05:32:1f:c7:59:ee:
9b:ae:2c:01:6e:92:62:6e:a7:28:74:9e:1d:d2:7e:
a8:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:CA:44:51:42:1A:51:73:8E:AA:E9:E6:96:E0:E1:8F:2E:0A:6E:15
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f4f9d60e-0638-34ef-84cc-d37dd5abbbd8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:0:5050::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
99:b0:9e:c4:2f:da:a0:f4:b7:93:c7:e9:93:04:d2:a3:2f:4e:
4d:86:c0:ef:f0:d6:d8:1f:3c:33:88:92:10:75:9a:74:79:de:
42:c5:6e:b8:32:01:dd:76:81:65:72:da:09:94:28:cd:d5:d6:
45:c6:fd:13:2e:41:d5:92:14:9b:49:67:4a:15:02:e5:03:1d:
c1:f3:2f:05:1b:3a:33:86:43:b2:d4:00:7b:94:b5:bc:22:b0:
12:bf:7b:b0:38:a5:65:2f:5d:52:fb:97:65:47:37:a4:81:c5:
87:6b:d9:d3:6b:1b:e4:a1:77:e7:0a:95:dc:0c:54:22:cc:cf:
03:5b:70:70:bd:a6:9e:92:84:34:fa:98:b3:bf:fc:8d:1b:e5:
fe:97:47:63:c0:15:2a:25:e9:2b:2e:02:a6:81:4f:08:e4:42:
a4:35:66:de:f7:bd:3d:e0:3e:56:36:1c:d0:15:28:90:67:58:
c4:48:73:89:66:db:d1:ea:23:0e:3d:fb:89:8d:e3:7c:fb:6c:
fa:64:fc:ad:d9:09:7c:1b:71:55:00:8d:32:0f:0f:57:2d:dd:
07:6e:aa:a4:b4:84:a6:6a:da:8f:ad:f3:b7:be:f1:43:de:74:
0b:3d:62:4c:69:2b:27:76:74:44:f2:80:22:e4:d2:f2:1b:53:
9c:33:f8:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:10:35 2025 by rpki-client