Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/b5204249-b1ba-32d1-adc9-d93b3c949ea6.roa
File: b5204249-b1ba-32d1-adc9-d93b3c949ea6.roa (raw, json)
Hash identifier: 1Xy8HFHyN0HWY9taJtiQGtMzE4N8j1TOChx7OjYPT00=
Subject key identifier: 1F:A4:78:1E:7F:88:FA:5D:BA:E8:77:6E:D3:08:9B:60:D9:08:84:4C
Certificate issuer: /CN=458edb4b-8474-44dc-8841-30a6c66f33d7
Certificate serial: 010D0C9F43285849350EAB58BF69D379D7920580
Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/b5204249-b1ba-32d1-adc9-d93b3c949ea6.roa
Signing time: Sun 16 Mar 2025 13:00:52 +0000
ROA not before: Sun 16 Mar 2025 13:00:52 +0000
ROA not after: Sat 14 Jun 2025 13:00:52 +0000
asID: 395831
IP address blocks: 2606:7bc0:1080::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:35:0e:ab:58:bf:69:d3:79:d7:92:05:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7
Validity
Not Before: Mar 16 13:00:52 2025 GMT
Not After : Jun 14 13:00:52 2025 GMT
Subject: CN=c43ebf55-c103-4d79-a4df-6084838f857b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:de:f5:0f:04:d0:e7:55:cc:4a:90:f3:50:e4:
f7:48:c4:0a:7c:a3:cc:52:6f:01:ae:ca:1e:2c:00:
58:37:55:a5:bc:d6:80:a7:9b:16:e6:5a:e8:46:2b:
13:c7:c9:99:2d:5b:b7:44:b6:07:81:5a:f3:49:b3:
a9:1c:aa:95:92:07:32:e0:0e:ef:36:fc:57:6d:2e:
d2:b8:74:e6:a1:3d:1f:13:70:05:7d:3c:84:ad:6f:
b1:3b:98:6a:d6:3b:d3:27:d8:22:7e:13:36:1e:b1:
5d:9a:fa:f1:f3:9f:c6:00:cf:f4:76:5e:4d:13:45:
89:bd:37:98:71:41:6b:00:18:b8:79:3c:ae:35:6e:
ff:20:2c:ac:ab:2c:33:6a:f1:94:c8:ea:36:87:dc:
40:dd:5d:80:f1:fe:26:e4:d5:ed:99:3f:5d:50:8a:
90:2e:28:08:bc:ad:21:ef:38:8b:f3:f4:35:bd:de:
f6:49:6f:f7:ac:0f:23:19:c1:90:25:3d:1c:36:0e:
4a:9e:5c:b1:8b:4c:d9:0a:34:3c:31:72:50:0e:b6:
fb:2b:3d:68:35:ff:bf:58:1a:f7:b0:5d:83:0a:1a:
9f:6f:5d:20:eb:ba:ca:8e:00:b4:76:b1:1b:91:75:
36:2b:65:8c:0d:38:69:85:26:6f:81:a9:e1:a8:cf:
bd:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:A4:78:1E:7F:88:FA:5D:BA:E8:77:6E:D3:08:9B:60:D9:08:84:4C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/b5204249-b1ba-32d1-adc9-d93b3c949ea6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl
X509v3 Authority Key Identifier:
keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
sbgp-ipAddrBlock: critical
IPv6:
2606:7bc0:1080::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2d:4c:48:28:e8:1d:a1:21:1b:b6:63:a1:49:7c:c0:24:64:a0:
ba:96:93:41:d0:66:7c:93:0c:a1:71:e2:ef:61:05:8c:bf:bf:
83:f2:d0:23:b1:3d:5b:e8:f4:94:58:39:76:f4:8b:bf:18:c5:
79:04:8f:6f:7a:15:c9:48:41:6b:e6:de:23:9b:fe:e3:c9:94:
11:12:99:a3:79:88:c9:f6:5b:8e:b9:d0:26:0f:80:11:1b:51:
2b:62:8c:f3:53:65:88:7a:c4:c1:b1:55:42:94:47:73:eb:b3:
43:c0:b0:18:3a:c6:2e:a9:6a:14:ef:9a:a7:4c:fe:af:71:99:
56:18:e1:59:3c:84:93:56:0a:73:d7:61:6b:6b:0d:6f:58:2d:
25:20:c6:b1:66:fa:dc:1f:48:48:51:f0:63:e3:82:fc:60:c6:
84:f0:74:eb:16:c9:14:76:ec:54:b0:66:7c:34:95:1b:d5:4f:
68:56:f6:a3:ac:af:fc:07:c7:2c:51:44:b7:0b:6a:3e:68:a5:
2c:aa:de:7c:bf:ea:b8:b2:e0:ea:49:15:c1:48:ab:f5:d4:6d:
20:e3:c7:ff:8a:26:a1:a8:83:00:9a:2f:a0:e9:bd:92:a7:ff:
aa:a0:2e:40:44:04:93:91:b4:5d:e1:af:27:b1:b0:20:20:0d:
56:f7:57:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:16:24 2025 by rpki-client