Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/94ad66a0-43be-341d-802b-6b42b5c82cb4.roa
File: 94ad66a0-43be-341d-802b-6b42b5c82cb4.roa (raw, json)
Hash identifier: 4jj7sUak2yRE/TbwVcuZb7hNGpqcCJjqKth86BdlKWU=
Subject key identifier: AC:91:65:D7:25:F8:3B:53:AD:CB:C5:30:E4:83:E0:8D:2C:EE:2A:4D
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285848D21128CD927829B24CDA7900
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/94ad66a0-43be-341d-802b-6b42b5c82cb4.roa
Signing time: Sun 09 Feb 2025 02:00:39 +0000
ROA not before: Sun 09 Feb 2025 02:00:39 +0000
ROA not after: Sat 10 May 2025 01:00:39 +0000
asID: 7029
IP address blocks: 2600:200::/28 maxlen: 28
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d2:11:28:cd:92:78:29:b2:4c:da:79:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Feb 9 02:00:39 2025 GMT
Not After : May 10 01:00:39 2025 GMT
Subject: CN=689fc1ec-8285-47c6-9a4f-463d6d0647cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:81:3a:22:a4:a4:42:1b:48:5b:79:15:47:be:
7f:50:dd:8c:b3:04:c8:d3:74:8e:2a:f7:93:01:f0:
fa:9d:0f:47:cd:75:54:91:d0:8c:dd:7c:c7:67:16:
ec:04:2a:dc:10:9e:2f:6c:d0:e2:e6:9c:5f:bd:64:
62:22:10:ba:f1:39:b7:df:99:5c:83:d8:c9:98:33:
5a:38:f9:1b:86:7e:48:a9:44:e4:10:b1:f6:9a:b6:
29:e7:e6:7f:07:d4:47:14:5d:8f:66:00:2e:cc:f2:
f9:cd:a6:cf:94:e5:a5:2a:36:ac:24:93:6f:bd:ef:
46:e1:fc:68:c9:99:3d:9f:97:c4:d3:b1:9a:11:3e:
ad:07:49:26:f1:64:91:ed:53:cc:4d:5e:89:c3:33:
6a:3d:e4:a4:13:a2:9b:4c:94:78:74:61:3b:d4:ca:
5b:42:b4:0f:25:81:8c:ce:41:ad:68:4a:2d:13:bb:
e3:2f:a9:80:3e:32:50:4c:7d:68:a1:da:db:37:af:
9b:e6:45:5c:d6:9a:5e:a2:de:47:08:ee:20:25:2e:
06:3a:f5:52:66:ca:b5:eb:e6:c7:47:b7:66:c5:05:
a3:ed:15:a9:bf:84:18:c4:58:32:df:c9:5e:4c:bb:
84:8f:3d:c7:95:e6:6f:ef:bd:4e:a5:44:ff:7c:96:
ac:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:91:65:D7:25:F8:3B:53:AD:CB:C5:30:E4:83:E0:8D:2C:EE:2A:4D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/94ad66a0-43be-341d-802b-6b42b5c82cb4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:200::/28
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5c:42:a2:60:16:71:d0:ba:ba:8b:0a:00:37:74:1f:d4:85:3a:
6c:0d:aa:81:fc:d7:58:99:a0:81:b4:24:aa:3c:73:45:3f:69:
ae:18:d3:79:c6:df:f3:4b:8f:e8:da:d2:fc:71:41:b1:ba:09:
2a:36:d1:27:6c:8d:46:d4:76:1e:fe:42:b2:66:8c:38:21:39:
af:ef:01:32:93:26:64:ad:0d:5c:b5:52:0f:05:db:fb:5a:0c:
54:46:8a:cd:ec:5f:5c:99:86:d9:88:48:b1:c7:83:1a:51:80:
b2:5d:30:90:24:5f:a0:a0:9c:1e:c1:da:1f:54:85:ea:93:41:
e7:8a:14:4d:ca:c5:f1:a8:14:14:27:74:bb:2e:78:cf:60:43:
85:bc:4d:9d:25:29:61:1e:33:5f:f9:b1:6f:ef:34:dc:e2:8d:
22:7b:08:2d:59:c7:9e:56:48:46:da:cf:10:da:9a:77:5d:23:
6f:8f:62:58:70:97:2b:47:5a:ec:e7:e9:c2:d1:21:94:ce:27:
b5:28:89:47:91:a4:28:0b:a4:69:b3:e8:9c:66:37:3d:2a:c2:
6b:f3:c9:65:20:a4:f7:87:30:e2:2b:a5:97:c3:54:06:08:f4:
22:5c:e2:f6:91:b2:bf:32:58:5b:ea:b8:00:6d:b4:13:15:e6:
c6:6b:b7:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:50:12 2025 by rpki-client