Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a9eb37c9-e69f-31fe-abcf-e8fff03e4560.roa
File: a9eb37c9-e69f-31fe-abcf-e8fff03e4560.roa (raw, json)
Hash identifier: re562DPdILpNjJNkgzqouuqoJ4bREorbc4mdOYj5E5w=
Subject key identifier: CC:91:98:CC:AC:1D:15:5C:45:74:BB:C3:20:98:78:96:22:19:EE:9A
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285848D2112A1AF0691455A5F3AC40
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a9eb37c9-e69f-31fe-abcf-e8fff03e4560.roa
Signing time: Sun 09 Feb 2025 02:00:39 +0000
ROA not before: Sun 09 Feb 2025 02:00:39 +0000
ROA not after: Sat 10 May 2025 01:00:39 +0000
asID: 7029
IP address blocks: 2604:cb00:37::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d2:11:2a:1a:f0:69:14:55:a5:f3:ac:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Feb 9 02:00:39 2025 GMT
Not After : May 10 01:00:39 2025 GMT
Subject: CN=5ff83eb2-42d8-4bb6-aaeb-5f0f44637390
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:15:08:5c:0f:48:72:75:7f:a2:40:4d:a7:40:
42:63:13:e0:c1:f3:82:a2:07:d9:30:10:ae:95:3d:
44:c6:a4:26:9b:90:0c:ab:8c:b8:25:f6:a1:3f:40:
a2:00:d1:7e:33:0d:9b:03:ed:c3:10:dd:af:da:e7:
e6:02:66:d6:f9:37:91:e1:e5:64:73:48:fd:9a:7d:
98:2a:03:ca:dd:4f:66:2e:83:87:3c:e4:71:e0:54:
c4:a4:5a:7d:2e:e1:e6:c1:f0:da:14:ba:36:f8:d9:
e7:98:10:2b:cf:90:6d:fe:2b:66:9b:e2:2c:25:ae:
59:ab:90:37:9f:03:ff:a8:8f:36:87:50:79:bd:4e:
17:0c:2d:3f:2b:2a:ec:95:82:09:83:0d:79:0d:71:
eb:b1:3f:c1:9a:18:48:37:21:dd:f7:08:6d:e4:e0:
3e:e8:c9:9d:cb:a6:cf:e8:fc:ba:07:aa:e6:63:42:
af:5a:a9:a6:94:21:21:95:4c:85:37:a4:53:60:7d:
b4:68:07:39:f0:02:ca:95:fc:be:38:96:82:fc:60:
24:6a:32:ac:9f:2c:09:1e:86:6f:7e:9e:6a:90:1e:
c3:22:7a:ba:d2:ef:47:f4:9a:c2:87:58:60:c7:cc:
86:b0:b2:e3:e0:bd:e4:10:28:8b:0f:8a:7d:f6:ed:
78:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:91:98:CC:AC:1D:15:5C:45:74:BB:C3:20:98:78:96:22:19:EE:9A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a9eb37c9-e69f-31fe-abcf-e8fff03e4560.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:cb00:37::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7a:29:30:2b:33:74:ec:dc:0e:de:df:4a:6e:4f:00:49:04:0d:
d5:98:82:47:ec:75:b0:92:f5:b4:30:fd:07:b7:8a:f4:3f:c8:
f1:f7:1f:bb:26:dc:1e:02:ee:b3:43:4b:db:5e:4d:4a:b5:38:
06:ee:e3:83:07:11:6e:02:6b:4a:03:f9:fe:9d:b0:4c:d8:38:
dc:96:70:dd:c3:72:ba:a5:c8:f1:90:8a:98:88:95:ed:b3:63:
74:37:15:0b:4d:14:aa:bd:37:81:5e:4e:e5:69:ac:8f:8f:90:
20:02:1b:7b:64:26:a6:7b:23:b4:6a:e4:25:4e:79:0a:d2:9b:
57:77:0f:6f:74:ce:3b:92:1b:12:0e:dd:7b:a9:bd:bc:b6:98:
a3:59:0b:a6:01:c1:77:84:7c:f5:88:08:8e:2a:c9:12:71:d8:
28:3e:33:a0:85:0b:e2:3e:15:74:02:ea:1e:ac:c2:81:22:06:
1a:45:6e:ae:30:b4:4e:3a:ee:83:90:d2:49:ea:12:82:c5:69:
ab:b1:d4:a0:25:74:95:12:94:d1:88:06:91:94:e2:0c:01:8b:
ee:45:a9:a2:2c:54:52:9a:c6:7d:64:f5:78:f6:00:98:0b:c7:
77:a0:00:5f:e9:5b:d4:96:d1:db:8b:1c:2b:c8:e3:1d:67:45:
47:a3:87:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:22:53 2025 by rpki-client