Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/216d1b01-5a89-3872-ae8e-416135965cb6.roa
File: 216d1b01-5a89-3872-ae8e-416135965cb6.roa (raw, json)
Hash identifier: OihomzghOs9BnP6JwcFncapWa4zxauVgaHF/WkXkafE=
Subject key identifier: 1F:2F:0C:7A:4D:B7:1D:CD:EB:FB:ED:87:CD:C2:C4:6B:4E:B5:AD:0F
Certificate issuer: /CN=50d23085-72e3-499d-9b7f-e552792b3f1b
Certificate serial: 010D0C9F432858494CC93C1716B9BB07F41DDD80
Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/216d1b01-5a89-3872-ae8e-416135965cb6.roa
Signing time: Tue 25 Mar 2025 01:00:40 +0000
ROA not before: Tue 25 Mar 2025 01:00:40 +0000
ROA not after: Mon 23 Jun 2025 01:00:40 +0000
asID: 396881
IP address blocks: 2604:880:52::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:4c:c9:3c:17:16:b9:bb:07:f4:1d:dd:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b
Validity
Not Before: Mar 25 01:00:40 2025 GMT
Not After : Jun 23 01:00:40 2025 GMT
Subject: CN=ba168a72-3d40-40d3-bffe-263f0f88a67b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:5d:52:02:7a:ad:8d:62:cc:c3:31:f6:ea:8d:
30:2f:d2:e0:09:ef:70:01:f1:c7:0f:5c:c4:b0:cd:
1b:52:29:cc:25:40:30:07:d4:cf:59:c2:9d:ab:bc:
14:ca:e6:c8:cb:c7:f5:46:63:60:df:81:75:13:c9:
2e:8a:83:3e:53:06:19:67:ef:47:a0:70:49:e6:99:
69:30:24:a9:82:f3:ac:88:3d:85:ea:a0:13:8b:ca:
44:27:f7:b9:60:e6:85:12:c5:6a:0a:b7:b2:42:4d:
92:69:7a:a1:36:42:82:5b:0e:b0:34:fa:99:25:2c:
ac:c6:67:43:5c:7f:55:05:3e:d6:4b:ed:89:3e:1d:
0b:49:28:01:96:20:e5:d8:b0:f6:37:db:79:72:dc:
a8:c0:9a:c8:94:6c:b8:94:52:da:10:42:11:79:7e:
4a:f6:26:d8:93:f6:00:55:7d:e9:ee:f0:cc:05:29:
33:6e:2f:92:47:63:03:0c:cb:b6:71:c5:70:3f:b2:
c7:be:5b:dc:b7:e5:df:d1:c9:68:ba:0f:99:02:a5:
e5:37:aa:d1:0b:06:d9:b2:b1:e7:8d:52:2e:db:e0:
fb:6b:c3:3e:68:e1:2a:da:83:0a:be:c5:c0:d2:94:
e3:44:1e:68:9f:40:b4:8f:94:86:17:5b:e6:cf:c3:
f9:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:2F:0C:7A:4D:B7:1D:CD:EB:FB:ED:87:CD:C2:C4:6B:4E:B5:AD:0F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/216d1b01-5a89-3872-ae8e-416135965cb6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl
X509v3 Authority Key Identifier:
keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:880:52::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2e:36:11:bf:61:41:bb:b1:da:e0:5c:5d:35:ad:cb:04:8c:0a:
5f:e8:29:d6:8c:bc:d4:36:9b:5c:86:57:b9:2e:ac:b0:b0:0b:
d4:12:85:a5:95:3b:93:63:4f:ba:d9:ed:78:f7:4c:4d:d2:9c:
4d:9c:53:3d:8f:ec:0c:a4:0e:7e:9e:bd:c6:2a:6b:99:7c:2f:
b2:c3:99:b8:87:60:7b:12:b5:6c:8c:38:67:24:4c:92:e3:2d:
69:e0:82:75:14:9f:49:0e:8f:80:c9:74:6d:94:9e:0f:40:02:
db:ca:cc:80:ec:1a:42:30:53:a6:e8:cb:ca:a3:7a:b3:72:f4:
ee:b5:81:aa:3a:ef:64:9d:78:46:7a:d7:67:1c:8c:68:7e:59:
23:89:31:47:6b:a9:20:a2:51:0e:a2:d8:28:f4:ad:d6:85:71:
66:c7:b7:6a:42:37:52:22:d4:48:ce:16:d8:a9:7e:71:e0:80:
9e:12:08:b9:7a:08:52:c0:10:6d:97:ab:49:d6:30:1c:90:96:
50:07:16:a8:8a:ab:cc:14:3a:71:ef:98:b1:76:aa:d8:c1:c0:
b2:1d:ef:91:49:8d:6d:aa:e7:02:a2:25:06:c2:32:cf:0c:ca:
aa:78:44:3f:20:21:e7:87:ca:93:60:a2:e1:2a:de:06:52:18:
27:7b:88:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 07:20:47 2025 by rpki-client