Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/24f483c6-3570-3394-acd4-970767bc2bfa.roa
File: 24f483c6-3570-3394-acd4-970767bc2bfa.roa (raw, json)
Hash identifier: d/ody4Z/IIliPpWJ7bWPvqmlRhPaSgMLWRGg8Vk9wwc=
Subject key identifier: DD:FA:A9:86:4D:3F:F1:21:AD:35:59:AC:C0:B2:A3:09:99:8B:D0:B0
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F43285849244E995A31459AA31499E158
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/24f483c6-3570-3394-acd4-970767bc2bfa.roa
Signing time: Mon 10 Mar 2025 13:00:52 +0000
ROA not before: Mon 10 Mar 2025 13:00:52 +0000
ROA not after: Sun 08 Jun 2025 13:00:52 +0000
asID: 22773
IP address blocks: 2001:578:1d::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:24:4e:99:5a:31:45:9a:a3:14:99:e1:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: Mar 10 13:00:52 2025 GMT
Not After : Jun 8 13:00:52 2025 GMT
Subject: CN=d066bdcd-277b-4a6b-a55e-cafad1ee12a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a9:aa:f1:37:a4:01:8a:92:c2:ea:10:88:33:
46:52:04:7e:50:88:44:79:5e:18:a7:5e:2b:e5:f4:
b1:37:64:3d:30:4b:69:3f:92:12:5f:ee:f9:16:6e:
50:9c:67:12:11:8c:1f:3c:18:45:62:03:ba:8a:65:
92:80:9c:a2:55:66:28:09:4b:01:9f:30:53:d9:99:
19:e7:fa:a7:9b:6c:ab:3e:6b:1d:6a:4a:28:8a:36:
13:7d:24:8c:ed:6f:34:c2:03:b3:c8:0a:ec:e6:e6:
75:1b:4b:9b:3e:a6:00:fe:fa:b4:1f:57:f0:e4:fb:
5d:eb:42:7b:d2:7a:32:7e:ad:aa:7f:50:76:3d:01:
1c:c1:20:fd:37:7e:0e:b6:3f:e0:59:73:c6:16:69:
87:aa:ef:02:30:fe:1c:34:a8:2c:58:91:72:a1:60:
9b:e7:5d:56:06:f1:38:83:0f:ea:a5:4a:d9:e3:74:
ea:9e:df:5c:88:d7:21:b3:26:98:5f:7e:c2:a1:66:
e5:47:42:29:43:db:69:cb:33:51:b1:08:83:e7:11:
eb:b4:76:f3:22:36:b9:15:5f:e9:e1:91:a1:e6:33:
4d:80:fd:2b:88:5d:01:3a:1a:df:76:93:37:20:1c:
3d:1a:2c:61:f2:4a:6d:21:72:d3:d0:a3:f6:0e:71:
be:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:FA:A9:86:4D:3F:F1:21:AD:35:59:AC:C0:B2:A3:09:99:8B:D0:B0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/24f483c6-3570-3394-acd4-970767bc2bfa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:578:1d::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7f:25:cb:fa:75:0a:58:b9:22:e2:67:10:8a:66:60:28:c8:7f:
6d:e6:c0:14:e7:5c:be:b4:8f:78:a2:cc:ae:5f:87:8b:10:09:
0b:30:e0:c9:4a:48:2f:8e:9d:7c:e4:26:9d:9e:af:d6:83:93:
65:04:21:14:79:81:7c:eb:9e:ff:c5:63:49:9f:9b:b9:81:0f:
df:c4:1f:68:87:2d:67:5f:1e:3c:70:37:0f:cc:61:7c:89:db:
e7:6f:c8:2b:86:25:66:a4:f8:7a:33:06:56:22:ff:52:df:c6:
36:60:56:6e:e8:6d:99:ec:38:52:05:0a:8b:9c:e5:36:6b:0c:
72:a0:b7:ed:9d:fe:18:c2:60:30:25:5a:ec:8b:05:2e:16:75:
5a:e4:d4:b4:e2:72:4e:f0:e0:02:63:cb:21:7b:f8:5b:31:75:
07:3f:e2:8e:9b:db:a2:cd:4b:b1:b3:70:9f:16:17:27:71:27:
15:35:7c:dd:08:2b:02:09:a4:73:f7:19:47:bf:e5:9a:5f:d9:
5f:98:43:3f:63:6d:88:3b:42:d1:5a:04:0b:f0:2b:5f:e7:85:
37:e3:c7:38:77:a7:eb:e4:e6:89:8b:0d:47:18:05:10:6b:8c:
24:93:5c:a5:2c:cb:92:e3:03:30:f6:cf:f6:65:2d:91:09:46:
9f:79:37:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:51:55 2025 by rpki-client