Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/d48eeb3c-0fe2-3714-b85b-a5fa9fc78aa4.roa
File: d48eeb3c-0fe2-3714-b85b-a5fa9fc78aa4.roa (raw, json)
Hash identifier: 6Ki0/AGL43RkLTCOSd4s89Xu6JijoRRSRa/q+6f7pWY=
Subject key identifier: A2:BE:08:D9:46:F1:F7:12:3B:F3:15:4A:5E:B2:AF:BD:09:32:88:6D
Certificate issuer: /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Certificate serial: 010D0C9F43285848B090B257D55358BAF1FAEB80
Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/d48eeb3c-0fe2-3714-b85b-a5fa9fc78aa4.roa
Signing time: Tue 28 Jan 2025 02:00:39 +0000
ROA not before: Tue 28 Jan 2025 02:00:39 +0000
ROA not after: Mon 28 Apr 2025 01:00:39 +0000
asID: 62651
IP address blocks: 2604:c980:3400::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b0:90:b2:57:d5:53:58:ba:f1:fa:eb:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Validity
Not Before: Jan 28 02:00:39 2025 GMT
Not After : Apr 28 01:00:39 2025 GMT
Subject: CN=438bf454-5939-4842-ba15-bbe66ebbbacb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:4f:7c:79:41:22:f8:56:43:f4:6b:a7:c5:77:
f0:c0:c4:bb:14:54:af:17:f8:7d:9b:33:f5:72:a6:
70:b3:e0:b9:96:61:e8:ec:fd:92:6f:90:50:6e:8e:
71:11:b8:78:03:47:8e:b2:c7:a0:ae:d8:a6:4b:91:
b0:fb:aa:69:70:8e:3b:12:f3:65:aa:91:87:d8:54:
4b:38:9e:ed:43:d6:b5:44:25:0f:ce:2e:3d:ee:03:
c3:01:39:2b:42:85:dc:57:1a:99:9e:60:a8:90:05:
2e:a2:cb:1c:6a:c1:b9:c6:c0:49:5f:c2:fe:3c:3f:
55:02:dd:5a:bf:81:5d:c0:2a:df:74:13:58:e2:c0:
62:42:8b:47:1a:87:68:89:5d:be:dd:92:73:e5:29:
50:bd:1a:97:1d:ec:91:3f:0c:11:40:4c:50:09:41:
43:1f:d3:32:54:2e:bb:83:9e:67:9c:25:e7:50:a0:
00:00:a0:94:e4:8c:ee:ea:55:fe:fa:71:fb:fd:2c:
06:bd:22:3f:67:af:ca:0e:bb:92:63:73:1b:e4:3a:
f1:23:da:13:3f:97:4b:54:b9:58:fe:85:56:36:a3:
0f:4d:9f:c4:d8:92:23:21:1b:db:f8:49:0c:b2:45:
4e:39:24:d1:5f:2c:11:cd:04:06:0c:06:48:48:f3:
b4:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:BE:08:D9:46:F1:F7:12:3B:F3:15:4A:5E:B2:AF:BD:09:32:88:6D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/d48eeb3c-0fe2-3714-b85b-a5fa9fc78aa4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl
X509v3 Authority Key Identifier:
keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:c980:3400::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
10:54:fe:00:13:b3:6c:b1:e8:9f:74:03:90:6e:28:87:bf:cb:
42:20:12:77:68:8e:b5:1d:3d:a2:e1:c8:5a:5e:c7:ad:6b:84:
e6:f8:42:d6:25:75:4e:91:66:00:5c:c4:ef:41:02:ce:50:cd:
45:9b:31:1c:cc:37:99:17:ab:a4:aa:41:43:30:8a:26:55:19:
c5:e9:c3:3f:2c:1b:7f:9a:d6:87:e9:af:cd:5d:13:e0:75:a6:
04:27:aa:95:ff:37:0c:b0:1e:8e:8a:52:24:49:d6:00:8b:70:
3a:fe:90:18:45:08:2d:80:a3:79:a1:94:de:aa:b9:d4:35:b7:
8a:66:2a:20:37:df:25:ac:b1:27:df:ab:ca:72:eb:1b:7a:61:
61:df:b3:c2:87:5d:80:99:1d:cd:ea:79:7b:20:36:13:82:27:
53:b3:c6:03:03:5f:90:b6:14:4e:08:a1:ea:4b:e9:1b:5c:d6:
4f:ad:57:99:d1:68:ed:f3:5a:03:37:96:19:f2:56:80:5d:44:
73:00:16:8a:5f:b0:fc:65:7b:2f:72:06:ab:47:8d:94:7f:76:
b6:eb:1a:44:ad:58:a2:a5:2b:68:b4:27:21:b3:36:f6:12:b3:
1d:a2:01:24:11:39:b3:ee:49:0a:1b:27:1c:7e:f0:8c:01:48:
9f:66:c5:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:44:52 2025 by rpki-client