Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/558a2e62-ec32-3eed-ac35-b54b8f0fc27b.roa
File: 558a2e62-ec32-3eed-ac35-b54b8f0fc27b.roa (raw, json)
Hash identifier: v7CWl2Uce+S+crFx2cGgXrlHD23UEIcHc4Ogq9gtOvQ=
Subject key identifier: 7D:BA:56:82:1D:F0:24:71:98:76:3D:44:17:E2:C3:20:EC:33:D9:31
Certificate issuer: /CN=d21149ca-bfeb-409c-adbb-e86e751b6f22
Certificate serial: 010D0C9F432858490E16CAC0FD9EE061A01845C0
Authority key identifier: 43:EB:F7:AC:AC:45:57:0B:44:60:29:E2:F5:34:50:E7:D2:82:30:FF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/558a2e62-ec32-3eed-ac35-b54b8f0fc27b.roa
Signing time: Sun 02 Mar 2025 14:00:52 +0000
ROA not before: Sun 02 Mar 2025 14:00:52 +0000
ROA not after: Sat 31 May 2025 13:00:52 +0000
asID: 54113
IP address blocks: 2602:816:5001::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:0e:16:ca:c0:fd:9e:e0:61:a0:18:45:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d21149ca-bfeb-409c-adbb-e86e751b6f22
Validity
Not Before: Mar 2 14:00:52 2025 GMT
Not After : May 31 13:00:52 2025 GMT
Subject: CN=8c8c7319-af68-41dc-bd17-0316c3d8dc2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d0:7b:7d:e3:b5:ae:e6:f0:f8:ec:cb:bb:2a:
0a:98:b5:c5:df:07:f8:f0:ca:89:04:0d:68:95:45:
e4:47:7c:41:6a:ef:07:fe:6b:6d:e0:92:37:17:0a:
da:cc:97:eb:45:f2:93:2e:6e:db:b0:24:79:9e:85:
1b:bf:c2:5c:e8:3a:20:b4:6b:0b:26:38:30:e7:e1:
e3:05:a3:4e:67:0f:29:49:0e:17:af:b4:8d:8e:1b:
81:e3:ce:c5:17:db:5c:86:3a:2c:20:00:c3:66:ca:
ed:36:1b:8e:09:29:87:34:63:9f:b6:04:72:d7:6a:
1a:a9:db:79:7c:58:e3:c3:8e:fe:a0:85:c3:1e:99:
a9:bc:3a:4d:48:57:bb:c2:17:17:98:e9:4f:47:8b:
84:b2:0a:03:86:d7:3f:31:01:e2:72:5f:02:d3:f2:
65:d5:5e:9f:90:7a:cb:1c:e9:71:ad:f8:20:b5:c2:
10:e3:02:8f:d7:f2:00:7e:8a:a2:ce:f9:c5:a9:36:
85:42:af:fc:92:2f:02:0e:50:ab:09:6f:32:6a:6a:
a0:f9:d2:52:29:72:01:ab:12:23:a9:4d:4d:45:bb:
00:b5:e9:29:10:c7:ee:33:5b:f2:f1:67:1b:05:1b:
75:88:5f:77:90:c4:8f:5a:46:b3:ac:7a:3a:ca:8a:
d9:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:BA:56:82:1D:F0:24:71:98:76:3D:44:17:E2:C3:20:EC:33:D9:31
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/558a2e62-ec32-3eed-ac35-b54b8f0fc27b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.crl
X509v3 Authority Key Identifier:
keyid:43:EB:F7:AC:AC:45:57:0B:44:60:29:E2:F5:34:50:E7:D2:82:30:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:816:5001::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
35:f2:e4:dc:71:ba:4a:bb:e2:ce:1e:36:0d:fa:e3:fa:d1:4b:
27:e0:c1:95:de:8f:47:0b:45:00:9a:1c:40:91:c2:09:d3:43:
3b:1d:b1:05:de:2f:6c:fc:ee:43:d1:fa:15:5e:0f:02:06:b0:
37:46:fc:e4:ab:2b:16:43:66:04:60:fe:6c:b2:bb:3f:18:c6:
4e:c4:1b:89:d9:4b:14:17:c1:7b:ac:f5:8c:38:d5:2b:ce:e7:
6b:52:91:69:f1:1e:db:6d:16:f2:ad:00:6d:8c:48:31:20:a3:
c5:60:41:9f:e7:1e:e8:a7:fc:a8:81:f6:19:c8:58:ff:e5:81:
8d:88:ff:69:eb:f8:d4:84:97:ba:3d:4f:60:d7:3c:08:8b:7e:
0c:a0:38:8f:9e:91:1a:83:6d:aa:99:cb:71:d8:50:79:bb:65:
31:9c:fe:92:cc:e6:87:72:b1:17:e3:59:6d:ea:27:24:17:bc:
c1:a8:c5:12:e9:9b:6b:b0:34:2d:74:34:83:4a:76:a9:7e:e5:
29:6f:f1:17:5d:c7:e2:46:db:1a:c1:d6:7a:3d:93:dd:db:0a:
ac:db:a1:60:08:9e:34:d7:e3:ed:49:74:9f:79:d6:2c:3d:a8:
56:a0:1f:b5:a0:87:da:c4:67:aa:be:c9:fe:6b:ef:5f:24:a6:
34:0f:d3:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 02:53:42 2025 by rpki-client