Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/1ba5e4de-c2cf-32fd-8d03-f70c59257c46.roa
File: 1ba5e4de-c2cf-32fd-8d03-f70c59257c46.roa (raw, json)
Hash identifier: jgAEaojY3vHXImPd+5vAuCcgWcXKwVRJ74hW5nkYD1c=
Subject key identifier: 1D:C2:8D:98:51:EF:50:F6:5D:39:53:FA:6F:9E:38:63:69:92:04:C6
Certificate issuer: /CN=50d23085-72e3-499d-9b7f-e552792b3f1b
Certificate serial: 010D0C9F43285849088175664DAE54097BCD6028
Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/1ba5e4de-c2cf-32fd-8d03-f70c59257c46.roa
Signing time: Fri 28 Feb 2025 14:00:52 +0000
ROA not before: Fri 28 Feb 2025 14:00:52 +0000
ROA not after: Thu 29 May 2025 13:00:52 +0000
asID: 61317
IP address blocks: 2604:4500:21::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:08:81:75:66:4d:ae:54:09:7b:cd:60:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b
Validity
Not Before: Feb 28 14:00:52 2025 GMT
Not After : May 29 13:00:52 2025 GMT
Subject: CN=353409bd-3b2d-4cf0-b37c-8e33fd00ced0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:42:03:63:64:25:e1:b2:1c:7a:01:c0:1e:08:
32:0f:e8:54:18:87:80:9f:91:ee:06:cb:7e:c7:3a:
2c:0c:77:51:80:f1:71:93:92:59:88:82:71:a0:eb:
1a:cd:07:2d:2b:fd:d0:7f:57:0c:cb:1f:66:6c:fd:
42:14:51:42:a0:77:0e:06:79:cd:66:5d:7b:c9:47:
a5:1a:04:9b:9e:30:de:a1:72:1b:02:d2:51:10:6e:
83:82:f6:82:d6:81:90:99:25:10:41:dd:3b:bb:c3:
c0:31:e1:e6:91:2b:e9:8d:8e:94:61:46:8b:92:3b:
5f:f7:58:79:5b:6f:4d:d3:b4:8c:73:50:b9:6e:2c:
8d:b1:6b:7c:ef:48:d7:9c:1d:13:76:00:1e:a2:30:
8f:e0:88:24:3f:2a:79:e3:de:6a:20:81:48:42:4c:
1b:c7:05:b1:74:1e:1c:52:dd:fd:2e:ac:df:79:76:
a1:b0:05:ad:45:e3:09:45:50:a1:c9:1a:cb:7a:82:
4a:21:6d:bf:9f:f6:9b:af:15:eb:17:de:0a:71:46:
d3:b6:06:1c:a6:1a:9d:55:eb:af:87:69:99:bc:bf:
c5:7a:05:f6:b3:f0:be:57:d3:fd:00:72:50:4e:b6:
c0:98:fb:9c:7a:e5:45:02:e2:c7:49:cc:b4:42:f7:
24:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:C2:8D:98:51:EF:50:F6:5D:39:53:FA:6F:9E:38:63:69:92:04:C6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/1ba5e4de-c2cf-32fd-8d03-f70c59257c46.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl
X509v3 Authority Key Identifier:
keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:4500:21::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7f:7a:09:5e:2a:32:22:10:11:e1:eb:c0:83:48:d5:3d:2c:72:
d0:69:27:24:d7:e1:36:c2:3a:65:46:ec:7b:aa:25:7f:9f:80:
e1:59:70:40:c1:bc:58:24:72:34:99:f1:20:5e:5b:67:ad:d6:
95:37:c8:f5:14:1c:da:c1:1d:e4:af:0f:b9:60:c6:d3:bc:af:
be:02:2d:f9:24:05:b9:bd:e4:97:e0:32:5b:b9:8d:2b:7e:2c:
66:25:e3:80:ff:a3:cb:5d:0e:23:c2:9c:e3:8b:09:c8:4e:57:
62:f4:07:68:d7:66:46:1e:65:c3:e4:b7:25:ca:6e:da:13:23:
4b:41:d2:13:3c:21:fa:d0:db:f0:99:c7:04:eb:41:3e:27:5f:
83:db:d1:c3:b5:be:6a:6d:10:64:a3:89:a1:99:e4:5b:2a:b6:
79:2d:14:59:24:83:44:c5:b5:3a:22:4e:86:52:ee:f5:6a:ef:
e1:4f:a9:7a:e8:29:6e:3d:4a:85:e6:28:f3:a4:6a:dd:f2:32:
07:b2:17:54:0c:04:70:f0:65:5e:d7:95:e8:bf:df:00:d2:41:
f8:c5:97:f4:49:b1:e3:b4:fe:7b:6e:5d:99:f9:8f:94:a9:df:
11:b4:4e:5d:cf:d2:79:84:98:78:d5:41:df:03:aa:64:af:3c:
b3:b4:32:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 17:07:39 2025 by rpki-client