Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/c5853b83-12bf-3cdc-87d1-07ddf698d72c.roa
File: c5853b83-12bf-3cdc-87d1-07ddf698d72c.roa (raw, json)
Hash identifier: m8nZ4lyZeg3WIVBl82eoXEBhQjAwASfI8743Wp8qcS8=
Subject key identifier: FC:50:C0:35:B3:7F:D5:3E:17:A2:18:C3:C2:AD:49:36:AC:50:34:51
Certificate issuer: /CN=50d23085-72e3-499d-9b7f-e552792b3f1b
Certificate serial: 010D0C9F432858490881755616942D569003AD00
Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/c5853b83-12bf-3cdc-87d1-07ddf698d72c.roa
Signing time: Fri 28 Feb 2025 14:00:52 +0000
ROA not before: Fri 28 Feb 2025 14:00:52 +0000
ROA not after: Thu 29 May 2025 13:00:52 +0000
asID: 61317
IP address blocks: 2604:4500:20::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:08:81:75:56:16:94:2d:56:90:03:ad:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b
Validity
Not Before: Feb 28 14:00:52 2025 GMT
Not After : May 29 13:00:52 2025 GMT
Subject: CN=631252f8-5ecc-4546-888b-6fc54a82fb56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:a6:c2:22:59:a6:75:b8:15:90:67:04:50:3f:
43:24:56:82:e2:d7:e0:75:0b:eb:df:bb:8d:64:98:
08:77:9d:1a:6f:3b:2d:e2:c0:37:bc:50:a0:6c:3d:
f9:f6:0e:76:b9:24:3e:84:03:da:b1:74:25:14:91:
f1:13:78:b9:85:66:40:4d:db:17:ee:83:0c:8e:38:
1e:6f:5c:2f:f1:ab:c9:10:6a:a5:d0:98:09:8a:e0:
91:06:b7:88:4c:6f:91:72:cb:9e:eb:f7:e2:f9:41:
62:77:32:62:38:70:c1:69:ec:76:c4:9e:d4:4b:67:
92:4b:fe:6c:6f:c2:08:0b:1f:cc:28:f0:2b:70:ec:
40:ea:8b:c7:7c:ea:73:e7:79:17:fb:db:f6:c8:fb:
5b:ce:40:b5:6a:af:c3:18:c1:82:88:1b:83:ce:e6:
17:2d:e4:80:51:a0:fb:47:fc:aa:bb:5f:a4:5a:54:
76:ba:92:e9:28:b6:1c:bc:aa:46:5b:a4:38:25:66:
2b:7e:57:cd:19:32:8b:ac:79:5d:db:b2:aa:7d:36:
c6:48:f8:fe:58:79:b4:f9:0c:c5:e3:7f:d8:ef:42:
81:51:35:31:2b:c5:8e:e5:5c:3d:5f:89:0c:36:cc:
68:3a:25:a5:a0:4e:23:1a:96:f7:02:d0:bc:cf:5c:
cb:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:50:C0:35:B3:7F:D5:3E:17:A2:18:C3:C2:AD:49:36:AC:50:34:51
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/c5853b83-12bf-3cdc-87d1-07ddf698d72c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl
X509v3 Authority Key Identifier:
keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:4500:20::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
41:3e:13:1e:ba:78:58:da:e2:6e:b8:ba:91:98:32:6b:f8:82:
34:52:08:da:4c:2e:44:1b:f6:8f:34:ed:df:d2:64:a0:d9:0e:
30:51:a6:ee:bd:75:26:18:46:ae:1b:82:bd:18:bb:bd:d1:8e:
bb:21:2f:a2:5f:97:79:34:3a:8b:42:15:53:e7:8f:f2:30:0d:
ce:81:8d:c6:d8:b0:ed:e6:d0:5a:4b:80:0e:74:43:df:4a:6b:
e0:1e:07:45:e3:3d:3b:83:3f:b9:69:d8:50:f2:7c:d2:1e:cc:
3d:bf:e1:d3:a5:25:bd:24:e0:a0:45:c9:ac:ea:75:7e:45:89:
fd:14:a8:43:ab:37:0b:df:41:71:c4:cc:e4:b8:79:70:c2:49:
0b:cb:9f:24:23:6b:60:5e:a7:76:df:d3:15:76:4a:97:88:3d:
54:33:1d:bb:83:37:00:d0:c6:5a:b9:7d:cf:32:1d:90:2c:c6:
89:db:75:e6:9c:9f:2a:07:fe:f9:8d:7b:63:44:c8:09:52:8f:
91:5d:66:bd:12:c9:77:5f:52:41:52:6b:c2:13:48:38:1d:91:
c4:ae:d4:91:cc:42:99:c5:c6:00:85:c1:f5:64:86:4b:81:6b:
33:d6:35:86:83:6d:8f:a2:d1:cb:72:91:ac:63:9c:f7:b7:e7:
26:f3:72:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:22:12 2025 by rpki-client