Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2f666b21-6a8f-3cad-9fc0-f60d06304712.roa
File: 2f666b21-6a8f-3cad-9fc0-f60d06304712.roa (raw, json)
Hash identifier: TO+74miPuvxQoRc6yaVsbevW5A3kN+kprQzXIld9YAk=
Subject key identifier: 2C:81:C2:BB:0D:12:A2:26:2A:0B:63:D8:B5:15:FC:12:FD:90:54:E6
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285848D2112B22F6D68A4FDEA21B00
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2f666b21-6a8f-3cad-9fc0-f60d06304712.roa
Signing time: Sun 09 Feb 2025 02:00:39 +0000
ROA not before: Sun 09 Feb 2025 02:00:39 +0000
ROA not after: Sat 10 May 2025 01:00:39 +0000
asID: 7029
IP address blocks: 2604:cb00:2500::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d2:11:2b:22:f6:d6:8a:4f:de:a2:1b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Feb 9 02:00:39 2025 GMT
Not After : May 10 01:00:39 2025 GMT
Subject: CN=76c4e179-283d-4036-b431-27039d6028b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:b9:f3:e7:06:e6:53:68:5a:02:52:9f:91:b3:
33:aa:33:97:08:a1:26:a2:50:e6:57:99:f6:96:a6:
63:22:4c:11:66:73:13:3d:b1:84:0b:47:70:32:c6:
e7:3c:66:7f:1b:ca:08:c0:fc:3d:41:25:c4:7e:d3:
22:c0:b5:00:cb:9e:ca:65:08:a2:33:d0:b4:e1:7e:
0e:f0:34:6d:8c:aa:c7:94:39:ef:b3:bf:96:a0:93:
c5:bc:55:2a:9c:47:c5:a2:8a:b5:49:69:22:b6:5e:
e9:7c:1e:c6:70:77:70:3b:86:61:40:47:6e:0d:0f:
b9:d1:47:88:bf:a5:5e:6c:70:13:19:57:18:6a:1e:
f1:b8:2d:38:0a:72:00:d0:e1:74:76:d1:9a:13:1b:
28:9f:b4:1d:6c:7c:d8:67:8e:0f:7c:81:a7:26:c3:
cd:af:9c:0d:ce:40:7f:79:52:00:79:6c:9f:16:42:
81:b8:82:54:f8:a3:98:f8:45:46:34:fb:ac:25:bf:
fb:f1:c9:7c:00:02:fd:b5:89:89:9e:e9:68:48:79:
2b:bb:a1:80:ac:19:81:d0:d2:c1:ff:39:5b:b6:04:
bb:2d:d7:28:3c:34:ab:ef:f5:b0:86:45:db:c2:b2:
e4:3f:61:9e:60:ad:90:fc:44:58:ef:bd:7d:e8:36:
54:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:81:C2:BB:0D:12:A2:26:2A:0B:63:D8:B5:15:FC:12:FD:90:54:E6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2f666b21-6a8f-3cad-9fc0-f60d06304712.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:cb00:2500::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
00:cb:37:75:1e:f5:d1:99:c8:ea:29:c8:76:e0:cd:21:49:37:
70:47:62:b2:f6:ab:9c:b0:b9:c5:92:cd:94:3d:c7:73:ec:ad:
f0:2b:3f:93:c2:a3:3d:ae:57:43:34:c4:10:8a:fb:21:dc:2c:
7f:c7:8f:3d:05:53:2d:66:80:fa:dc:73:3b:24:00:56:91:37:
df:ed:49:ac:48:61:6a:b2:5e:88:b7:43:e6:b0:0a:2d:5a:e5:
23:90:b0:1f:af:a5:60:ea:c7:6b:3f:e0:bb:d0:73:a6:e2:ea:
4d:52:92:c9:04:7b:9f:14:24:e5:b9:56:09:e0:0c:3e:fd:1a:
b6:02:94:1d:82:7a:86:6f:97:8d:37:d2:cb:c5:19:0f:82:68:
80:04:f0:ee:7f:95:14:34:82:1f:54:6d:46:eb:10:d5:37:1f:
a6:db:10:38:71:95:b5:49:b7:09:8d:a1:3e:0c:7d:47:4b:6c:
c0:be:1c:ef:26:e8:0a:27:81:c0:1a:32:b0:5a:b8:a2:4b:5e:
7e:50:f5:b6:2c:04:55:c1:00:59:72:59:e8:d5:28:c9:2a:c0:
84:99:c9:f1:f3:79:3f:1a:74:e8:bb:78:1c:82:19:bd:1f:f2:
e7:4b:b3:ac:f2:d4:91:5c:5d:ca:6b:e9:f1:cc:a8:e1:d1:4c:
23:e5:f0:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:45:30 2025 by rpki-client