Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/af14aee4-2d51-3b25-8e5c-3ea0f33bc5bd.roa
File: af14aee4-2d51-3b25-8e5c-3ea0f33bc5bd.roa (raw, json)
Hash identifier: PDJwPb79utFXPYrZ3JNwgnvoU1ajY64dd/GkFFjIwKw=
Subject key identifier: 09:85:30:A1:F2:5B:3B:41:8B:5B:07:26:27:35:9F:39:88:C6:04:FC
Certificate issuer: /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Certificate serial: 010D0C9F432858492D25C48A5B2EA85B145DA820
Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/af14aee4-2d51-3b25-8e5c-3ea0f33bc5bd.roa
Signing time: Thu 13 Mar 2025 17:01:18 +0000
ROA not before: Thu 13 Mar 2025 17:01:18 +0000
ROA not after: Wed 11 Jun 2025 17:01:18 +0000
asID: 62651
IP address blocks: 2604:c980:2400::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2d:25:c4:8a:5b:2e:a8:5b:14:5d:a8:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Validity
Not Before: Mar 13 17:01:18 2025 GMT
Not After : Jun 11 17:01:18 2025 GMT
Subject: CN=4f573e78-253b-4771-8562-5897cc1a1393
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:5e:0a:51:9e:e4:f4:ce:f3:72:ba:87:ec:1b:
e4:30:b4:b2:c2:52:b4:60:40:4b:7e:51:94:fd:9b:
8d:ac:21:d3:c5:fe:a0:17:9b:6e:3b:41:07:7c:4d:
c8:74:a0:7a:cc:f2:c4:38:9d:3d:79:27:3a:c5:e9:
b7:41:c9:c2:b7:80:77:96:57:33:4e:7c:aa:0b:40:
2a:54:29:7a:f4:30:4c:ea:e2:18:e2:1d:f6:78:65:
be:87:24:c1:4a:0a:82:d6:09:2a:b6:4c:53:fa:3d:
2a:1f:4f:2f:bf:ff:51:61:57:c1:f4:c1:05:24:b6:
28:eb:13:71:09:46:c3:11:9d:36:af:a4:d5:52:92:
8a:e5:48:5a:2d:dd:ac:2b:1f:26:cc:23:8d:46:60:
1b:75:9f:18:4d:05:55:dc:3b:cc:f8:d1:a9:b7:74:
3f:97:26:3e:03:4a:b9:a6:1c:86:a2:91:70:51:7b:
66:86:cd:c7:15:fd:b0:b7:ca:c2:4f:1c:6f:26:c2:
f8:1f:aa:89:9c:7c:2c:b8:61:58:d6:de:d2:26:27:
dd:a1:fa:79:b0:dc:11:a2:9f:75:2b:fe:9a:71:ae:
2a:e9:18:91:a7:d4:b0:60:d7:51:85:24:6a:8b:86:
16:f5:95:37:9c:9f:6b:2d:97:e2:ed:ad:fe:87:8c:
19:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:85:30:A1:F2:5B:3B:41:8B:5B:07:26:27:35:9F:39:88:C6:04:FC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/af14aee4-2d51-3b25-8e5c-3ea0f33bc5bd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl
X509v3 Authority Key Identifier:
keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:c980:2400::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6f:f5:dc:cb:f6:4e:c8:9c:ae:c1:a4:f1:61:0f:ff:43:2c:bd:
1a:a2:98:ad:94:7e:cd:46:8c:51:a1:7f:6f:4b:78:3d:bb:0d:
12:09:bb:a1:17:2f:1d:26:27:85:a7:d2:0f:81:ae:74:35:e0:
b8:fd:e0:1b:c2:3c:72:a9:44:5d:09:8a:14:97:8f:1c:ce:6d:
99:3b:82:95:2c:5a:32:37:ff:c9:e2:a9:2b:93:27:bb:98:72:
a5:c6:88:60:a8:03:61:32:9b:c1:b7:66:da:11:c0:74:3c:99:
b7:bd:d7:6f:c2:f1:d2:c5:f7:e6:3e:02:4e:06:37:09:59:eb:
2c:ab:ad:6d:4a:cb:0b:ff:ec:17:13:fb:a3:4f:dc:7d:fa:51:
04:68:fc:f3:f2:89:cd:3f:04:9d:c6:68:0a:c6:05:35:48:33:
f5:dd:0f:05:45:69:ce:b2:eb:70:1c:67:98:4f:90:69:7a:d0:
8c:40:f4:e9:52:06:39:6f:96:0a:c2:0c:e2:1f:8f:bd:3b:d9:
c3:be:ce:52:14:ce:07:a0:f2:4b:ed:90:9f:68:a3:8e:fe:45:
b6:aa:71:43:f2:44:54:b8:45:df:64:8a:8b:04:ea:bd:c3:66:
96:bf:57:ac:3f:d2:7a:bf:11:9a:d3:39:c3:69:47:73:45:38:
8f:18:3d:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:41:47 2025 by rpki-client