Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/59ca02b7-d811-3996-8886-dabdb3428f3f.roa
File: 59ca02b7-d811-3996-8886-dabdb3428f3f.roa (raw, json)
Hash identifier: mX6Xrt7+yBBpJmTxfslB/vBJQx3SI2iBtGU7lH5JYBc=
Subject key identifier: 0B:D0:C9:59:09:DB:1B:FC:34:8A:D2:48:09:99:EF:AA:EB:3E:91:AA
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F43285848D4DB9769EA48199CC843A660
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/59ca02b7-d811-3996-8886-dabdb3428f3f.roa
Signing time: Mon 10 Feb 2025 02:00:38 +0000
ROA not before: Mon 10 Feb 2025 02:00:38 +0000
ROA not after: Sun 11 May 2025 01:00:38 +0000
asID: 22773
IP address blocks: 2001:578:9800::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d4:db:97:69:ea:48:19:9c:c8:43:a6:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: Feb 10 02:00:38 2025 GMT
Not After : May 11 01:00:38 2025 GMT
Subject: CN=c53084fb-537a-4030-913e-7d63f3a52fe0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:4a:c5:a0:56:4f:22:54:d9:de:7d:26:2d:48:
ac:59:34:32:04:31:48:78:7f:99:a1:8b:e4:ba:dc:
15:a8:ca:de:70:81:3d:02:10:5d:c5:37:97:d0:16:
b2:c7:3e:1b:9d:2b:30:f6:09:df:7c:09:4a:4d:d2:
47:73:71:c0:90:81:36:ad:bc:35:a3:ea:92:23:38:
e1:e5:b7:67:a0:f6:5d:b2:9a:1f:20:1f:2a:6f:80:
b2:5a:4f:46:b8:16:28:fc:7d:e2:8b:7a:8a:74:d3:
1b:cb:d7:3d:45:ca:a2:b9:78:43:d9:59:2b:42:7f:
e6:aa:c0:cf:3a:e0:f1:dc:79:06:ef:4d:d7:27:51:
35:f2:e3:09:f0:26:e4:07:80:d3:46:5a:f1:80:48:
40:8d:84:5c:85:f9:96:71:62:3a:aa:83:ca:3c:b2:
41:bc:28:35:08:da:89:bc:3b:d7:db:c4:7d:7f:54:
07:73:cc:d7:85:7e:ab:d6:5d:3f:41:ba:5a:cd:a9:
f9:b9:90:e4:67:24:f0:4c:5f:30:bf:d6:a6:46:c7:
3d:4d:4b:8b:30:ab:ca:85:18:40:19:0f:8a:88:0a:
ab:f3:e3:40:bf:95:79:5d:58:72:b4:7c:3d:9e:a0:
23:a7:69:eb:50:a4:ff:1e:37:8b:27:f6:04:37:b0:
54:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:D0:C9:59:09:DB:1B:FC:34:8A:D2:48:09:99:EF:AA:EB:3E:91:AA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/59ca02b7-d811-3996-8886-dabdb3428f3f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:578:9800::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
86:fc:e3:c3:1b:5b:87:3a:40:2e:73:4d:4e:a6:82:ff:4b:2e:
de:2e:09:7e:34:91:40:eb:4f:74:7e:99:4d:6c:fa:39:07:68:
50:58:0c:0e:74:26:2d:c8:76:79:90:aa:02:09:81:4a:07:76:
92:67:4c:e5:d4:be:6e:b3:f8:32:45:f7:dc:dc:2c:34:e2:16:
76:2e:47:bf:a1:23:28:b6:d1:3d:5a:78:e2:4d:8c:ba:c6:0f:
ef:a0:3e:45:de:75:f6:a9:bb:b1:5f:5a:c6:7e:7e:89:ba:24:
24:fb:b3:05:e5:e0:7d:c5:6b:40:8c:d3:28:5f:5b:23:f8:8d:
69:be:83:cb:86:bd:ca:7a:0d:37:14:9a:c2:99:7e:63:1e:05:
ab:33:d9:26:86:b0:2b:a7:d7:b5:f7:10:5a:61:ba:a0:af:d8:
99:92:6c:9a:57:be:5a:27:17:90:a0:21:eb:be:58:b8:f8:fb:
59:5b:38:f1:b7:9d:f1:c7:1a:76:b0:e4:9d:03:c8:6b:1c:8d:
4d:39:56:4e:9d:cc:4f:36:bf:a2:2f:2f:b8:ab:1d:cd:08:cf:
ef:4b:ff:05:a1:67:73:bd:e4:53:4c:f4:36:35:b0:b7:76:c6:
48:e1:e5:3a:79:87:62:e6:8b:8c:84:0b:82:c4:71:8b:ad:08:
d1:81:94:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 15:58:11 2025 by rpki-client