Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/42446862-1602-3fe1-8bf3-b4a41f6898f6.roa
File: 42446862-1602-3fe1-8bf3-b4a41f6898f6.roa (raw, json)
Hash identifier: Hv3xz2mFRXT8aGDyeiopY5JpPujK4d/SJbK2dJCvpS8=
Subject key identifier: 1E:3D:B6:B3:3E:42:FC:C3:EE:D2:48:76:78:F4:6B:71:60:D1:B0:B6
Certificate issuer: /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Certificate serial: 010D0C9F43285848BD20E44E626FE3AF910A0100
Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/42446862-1602-3fe1-8bf3-b4a41f6898f6.roa
Signing time: Sat 01 Feb 2025 14:00:51 +0000
ROA not before: Sat 01 Feb 2025 14:00:51 +0000
ROA not after: Fri 02 May 2025 13:00:51 +0000
asID: 54138
IP address blocks: 2604:c980:2400::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bd:20:e4:4e:62:6f:e3:af:91:0a:01:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Validity
Not Before: Feb 1 14:00:51 2025 GMT
Not After : May 2 13:00:51 2025 GMT
Subject: CN=3932efd2-6050-4496-9ff0-d4d30983de57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:a2:89:cf:77:02:9f:e8:5a:94:c8:06:d5:64:
55:86:7a:21:9a:cc:06:27:8f:5f:98:84:31:0a:e2:
77:8f:22:46:c7:c2:95:17:e3:6b:13:53:50:61:3c:
6a:6b:99:51:e4:55:3f:ff:d2:96:a4:3c:fb:b0:86:
7e:48:7d:6a:c7:eb:95:de:f2:15:08:ac:ac:ee:d9:
46:e2:46:0a:ef:d1:f3:b4:22:9d:7c:cb:2d:ca:7a:
a5:3b:b0:ae:43:51:1a:33:92:fa:4c:06:41:0a:95:
e9:c0:ec:10:f6:99:c3:fe:a8:d2:68:14:b1:b5:e8:
04:15:43:82:6b:ed:5a:f4:ea:21:3b:c2:f2:45:95:
17:8c:fc:0c:90:e2:79:16:5b:dc:0f:c0:67:91:c0:
65:11:00:35:a6:02:b5:8f:40:27:3b:dd:06:e3:a3:
7f:5a:d2:cd:8d:c2:bb:87:c8:6d:a9:89:40:51:7c:
35:39:ee:f0:d6:3d:01:3c:5f:30:7c:9e:17:69:f4:
c6:56:4f:38:0b:82:07:51:d5:7f:17:b4:84:3c:c0:
4b:dc:b3:4e:14:db:a1:40:f0:0f:12:f0:5e:12:58:
01:ba:96:54:86:68:9c:e1:86:4b:a7:f7:67:ba:c8:
c8:91:c8:6d:df:f3:5c:79:9d:16:e3:e1:6b:5c:64:
e1:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:3D:B6:B3:3E:42:FC:C3:EE:D2:48:76:78:F4:6B:71:60:D1:B0:B6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/42446862-1602-3fe1-8bf3-b4a41f6898f6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl
X509v3 Authority Key Identifier:
keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:c980:2400::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
49:ee:0b:0e:91:a5:a6:ff:1a:56:d3:77:9f:a9:89:ec:0f:f5:
e7:69:59:db:c1:c2:12:99:c4:83:7b:e7:d7:22:bd:cd:9c:a2:
51:d7:c4:9b:4b:c0:38:38:2d:2a:7d:6c:97:1a:38:ef:90:8b:
85:30:a5:8a:4d:7b:f6:ef:7e:de:81:c5:2f:b4:ee:db:aa:60:
0c:7b:91:9e:f4:d4:e9:36:b8:e9:6a:1e:ac:23:8e:5d:c5:11:
a5:01:10:a3:24:e6:37:69:25:9c:3a:de:56:f7:89:69:83:a4:
0b:7e:ca:68:c5:9c:2c:6e:c9:dc:a8:15:21:d4:01:1a:d2:55:
c8:1e:01:b3:88:4a:4a:e0:78:99:f5:2c:c7:32:6b:56:a7:67:
80:d6:ea:ed:e7:d6:92:3d:e1:64:81:68:93:11:83:8c:33:52:
5c:57:93:4a:f2:8c:35:a0:ba:dd:11:b2:0e:8b:0d:fc:52:91:
91:c9:3d:4a:2b:d7:c0:b1:69:8c:da:85:6a:5c:12:64:c8:5e:
c1:a4:ea:bf:b6:c6:22:3b:e6:d2:61:39:a0:51:51:9a:1f:09:
0d:81:ea:cd:80:bb:6c:53:8c:b7:4f:62:16:53:e2:7f:53:6d:
ee:69:9c:03:42:68:3d:ee:81:2b:ae:ca:4c:55:7a:86:76:b6:
e6:f3:9e:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:17:53 2025 by rpki-client