Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/fde386a0-a0a3-33f9-ad11-813778cd69cd.roa
File: fde386a0-a0a3-33f9-ad11-813778cd69cd.roa (raw, json)
Hash identifier: C4aIkjlJA7mBj3FYxDdVkVSmzw+bnatqVhkALG1OH6M=
Subject key identifier: 15:82:81:ED:02:E3:0B:8F:AF:0E:7E:3A:16:54:E7:06:50:07:C2:23
Certificate issuer: /CN=50d23085-72e3-499d-9b7f-e552792b3f1b
Certificate serial: 010D0C9F432858494CC93C46C0B7994FFB4D917C
Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/fde386a0-a0a3-33f9-ad11-813778cd69cd.roa
Signing time: Tue 25 Mar 2025 01:00:40 +0000
ROA not before: Tue 25 Mar 2025 01:00:40 +0000
ROA not after: Mon 23 Jun 2025 01:00:40 +0000
asID: 29802
IP address blocks: 2604:880::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:4c:c9:3c:46:c0:b7:99:4f:fb:4d:91:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b
Validity
Not Before: Mar 25 01:00:40 2025 GMT
Not After : Jun 23 01:00:40 2025 GMT
Subject: CN=20c268cf-bcdd-467f-b289-01d15ccac2b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:76:61:96:60:5d:c8:a4:d0:b3:ac:ed:30:46:
9e:c0:20:6f:29:cc:38:e2:b3:f0:24:89:9c:22:12:
45:5b:a3:21:e3:0d:95:19:46:7f:ac:cb:0f:e8:83:
43:3a:95:c7:c4:80:d3:5d:45:58:5a:2d:db:b8:bb:
27:14:b9:f1:eb:89:e4:8c:b7:a4:dc:cb:39:fd:87:
7a:fa:82:62:2d:74:2c:c8:50:9a:ad:38:d2:27:23:
ec:aa:dc:01:48:ce:f3:51:9a:28:bb:7f:ff:46:b9:
f4:7a:2c:c3:58:e1:59:dc:2b:cf:4f:17:f8:65:38:
77:80:2b:db:a6:a8:82:a9:48:2f:f0:ed:ac:7d:8e:
83:3c:c0:4b:80:45:09:80:b6:63:22:9f:9e:00:b1:
49:0d:2c:04:8d:a7:18:07:dc:87:35:04:10:b9:f7:
62:d5:3f:40:f0:dc:c8:83:97:69:c7:08:ad:93:9b:
60:2e:aa:e5:84:14:7a:39:76:52:55:bb:92:d9:7e:
f9:83:73:3e:ef:45:fa:ad:50:34:a6:21:c2:9d:9e:
2f:81:cc:67:a7:63:7e:01:d8:05:c1:64:aa:0e:a5:
ba:31:c1:cb:57:30:3d:ee:12:c2:3a:e8:22:b0:96:
80:df:8e:b2:12:40:f7:89:73:5c:b7:3c:16:29:2b:
c7:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:82:81:ED:02:E3:0B:8F:AF:0E:7E:3A:16:54:E7:06:50:07:C2:23
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/fde386a0-a0a3-33f9-ad11-813778cd69cd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl
X509v3 Authority Key Identifier:
keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:880::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9f:65:8d:3f:b9:21:20:82:e9:3b:0d:37:30:e6:18:56:60:a4:
37:7c:f5:21:88:75:dc:6a:4c:1a:fb:ab:89:8e:49:2b:81:a0:
84:52:f6:b9:a3:43:d9:76:02:60:8b:b0:13:60:32:42:f5:47:
00:4c:8b:01:0d:8e:9c:99:bf:b2:9d:c4:3a:b0:d9:22:8b:2f:
84:ea:6b:75:d1:65:37:47:10:97:9c:d5:28:45:f3:b6:ac:20:
60:ea:45:96:a4:61:10:f3:8f:b1:19:ee:2e:1c:3c:d3:ec:63:
87:5e:f1:51:e2:f9:3a:3d:ff:ba:51:b7:b9:87:84:ce:ca:40:
be:43:f2:d4:99:ec:06:3c:b0:43:d1:5e:5b:65:a8:19:a5:59:
fd:e7:03:2e:0c:3a:b2:d3:fd:b5:71:18:d0:ab:d4:5a:db:1d:
10:66:e8:ae:d3:36:75:3b:aa:ca:16:5e:ea:14:61:02:26:5d:
c5:f6:7f:9b:81:df:c3:93:ea:2b:7b:f3:2e:2b:17:cf:bb:5f:
00:e2:62:47:1b:0a:2a:63:40:4f:ea:5b:25:de:5a:f7:78:ab:
8d:3c:db:4e:98:02:1d:15:6e:d4:3e:30:42:86:05:b7:8b:95:
4c:81:0a:95:a9:d2:f0:7a:f8:91:80:38:ca:cb:f3:d9:91:c2:
88:23:37:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 08:01:57 2025 by rpki-client