Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/9f2004b3-f46d-3e83-a948-cc255fe3a018.roa
File: 9f2004b3-f46d-3e83-a948-cc255fe3a018.roa (raw, json)
Hash identifier: sl4Xz8k+ANJHVbpH2TApDCIE/D8z2vImC4G/JG5a0F4=
Subject key identifier: D2:1F:95:C7:C6:CF:5B:5B:C7:D1:69:9D:C3:20:F4:86:2A:F5:82:0D
Certificate issuer: /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Certificate serial: 010D0C9F43285848E9CBE7704FFD69BD757F6D00
Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/9f2004b3-f46d-3e83-a948-cc255fe3a018.roa
Signing time: Mon 17 Feb 2025 14:00:52 +0000
ROA not before: Mon 17 Feb 2025 14:00:52 +0000
ROA not after: Sun 18 May 2025 13:00:52 +0000
asID: 62651
IP address blocks: 2604:fc80:2800::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e9:cb:e7:70:4f:fd:69:bd:75:7f:6d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Validity
Not Before: Feb 17 14:00:52 2025 GMT
Not After : May 18 13:00:52 2025 GMT
Subject: CN=10fbe41e-1895-4fff-9d36-eca44691a999
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:1d:45:51:ba:ac:44:a3:72:55:ea:a6:0a:99:
7e:56:22:36:f5:0d:ac:98:33:4b:30:6c:09:f5:69:
c4:8c:73:d4:aa:48:ce:fa:5f:7d:aa:f3:83:da:3f:
43:51:ea:24:f0:3b:09:6b:ce:25:d6:bc:9b:dc:be:
5c:7e:f0:86:41:4b:7d:b7:f2:1f:5c:a1:28:f1:bf:
38:ca:b0:22:47:4a:06:a1:9e:f7:a8:a5:74:f7:36:
14:c5:9d:d5:c3:f8:44:e9:90:8d:41:32:d5:ea:21:
a5:45:07:ab:ec:2a:0a:0f:72:f4:8b:80:d7:5f:86:
b0:53:aa:e2:76:38:1e:92:11:b6:e8:75:19:59:73:
61:90:8c:c2:5b:79:dc:7f:18:52:09:e7:6f:42:45:
68:12:42:92:6f:e4:62:13:6e:7e:0a:5a:a7:97:ec:
bf:a1:41:4a:fe:14:b6:03:05:a3:c3:6e:12:9e:84:
23:a2:d1:cb:e3:7a:c1:13:54:77:7f:a0:ce:6c:e8:
ab:10:d9:03:ad:e3:58:80:5b:0e:01:84:d2:3d:90:
33:c0:1b:97:b5:c2:fb:a0:d6:25:06:c8:41:73:b8:
18:d3:aa:4a:94:76:2f:38:10:f0:03:25:77:71:0e:
ab:38:94:56:10:03:35:4c:2a:61:45:c2:f0:c9:18:
14:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:1F:95:C7:C6:CF:5B:5B:C7:D1:69:9D:C3:20:F4:86:2A:F5:82:0D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/9f2004b3-f46d-3e83-a948-cc255fe3a018.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl
X509v3 Authority Key Identifier:
keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:fc80:2800::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
55:94:23:a5:48:05:99:9c:15:55:a3:c5:91:26:ba:06:bc:b2:
b5:61:07:96:a2:3c:b8:7c:fe:e9:09:5a:11:3a:8c:12:13:90:
85:71:02:de:39:f4:6d:08:d3:c3:3a:3d:48:05:e8:ce:db:9e:
eb:bd:cb:e3:4e:35:34:fd:e0:cd:bb:15:99:33:4c:4c:6e:19:
ca:e4:9a:0c:17:5f:4a:50:8d:04:0b:79:3e:ef:e8:fe:98:c0:
05:b6:82:84:5d:34:d0:3d:13:d7:19:4f:5e:4e:d8:b9:31:93:
ee:db:1d:21:c9:9c:42:75:01:4c:07:6c:c1:9c:7a:01:4b:0c:
64:77:87:48:57:d5:c3:af:aa:1c:4e:c3:5c:6c:a3:69:00:96:
56:6e:42:04:b3:d0:f4:f0:d0:84:f4:b4:38:63:6c:a7:b3:dc:
aa:18:ef:d3:e1:19:c7:6f:89:cb:8f:ca:9c:4d:52:6a:54:2b:
cc:3c:72:ea:8a:f0:fa:44:e9:a6:9d:29:71:1c:70:df:a2:ef:
cf:54:d5:1e:88:21:b0:e2:56:3b:0a:b5:0b:8a:bd:be:7b:9c:
a6:3d:b2:f1:2d:37:38:cd:f5:8b:c8:1d:4d:3b:a1:6f:c4:96:
93:94:6f:66:04:75:f1:2b:30:ce:50:8c:a6:37:87:4f:0b:ce:
6b:67:55:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:47:29 2025 by rpki-client