Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/252bff0e-a7f2-4d92-b2ff-24bfa21a7306/9ca5ed04-3753-31ea-a1e7-257cbc7fb2f2.roa
File: 9ca5ed04-3753-31ea-a1e7-257cbc7fb2f2.roa (raw, json)
Hash identifier: nA0Qq0SFfdTb6+M+ZTLW+Lm4XP9LE45FEeUDq+nsjTs=
Subject key identifier: 0D:28:7B:47:6F:14:02:04:4C:A6:B0:EC:27:FA:50:5D:67:9D:8C:40
Certificate issuer: /CN=252bff0e-a7f2-4d92-b2ff-24bfa21a7306
Certificate serial: 010D0C9F43285848D641090DEFB39BB36AD7A280
Authority key identifier: 13:34:1F:39:12:25:A3:62:F4:C2:CC:7C:74:9A:15:0B:B9:94:42:78
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/252bff0e-a7f2-4d92-b2ff-24bfa21a7306.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/252bff0e-a7f2-4d92-b2ff-24bfa21a7306/9ca5ed04-3753-31ea-a1e7-257cbc7fb2f2.roa
Signing time: Mon 10 Feb 2025 14:00:52 +0000
ROA not before: Mon 10 Feb 2025 14:00:52 +0000
ROA not after: Sun 11 May 2025 13:00:52 +0000
asID: 393732
IP address blocks: 2620:11d:500c::/47 maxlen: 47
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d6:41:09:0d:ef:b3:9b:b3:6a:d7:a2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=252bff0e-a7f2-4d92-b2ff-24bfa21a7306
Validity
Not Before: Feb 10 14:00:52 2025 GMT
Not After : May 11 13:00:52 2025 GMT
Subject: CN=c21780b4-1a64-4776-8215-26621684ef33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:8c:ab:1a:ef:09:7f:e6:5b:2e:3c:cb:c7:4e:
5e:45:02:27:3e:eb:4d:e4:38:9d:bc:4c:e0:76:81:
b2:bd:95:ab:1c:0d:d3:6d:29:eb:0f:71:a8:86:00:
3b:94:26:2f:3b:52:be:b9:2b:7e:49:b2:c4:ea:41:
b5:5d:42:29:e8:8d:6f:b0:fa:37:8c:21:ae:5d:e8:
c2:6c:14:5b:7e:e0:cf:16:db:ea:43:bb:ec:f3:9e:
ae:ce:8d:0a:61:9d:d7:c4:e4:93:83:65:7b:85:0b:
6d:5a:7c:6b:48:4c:f7:47:1c:8f:57:e0:62:52:9f:
6e:2b:1f:1a:40:6f:bf:22:31:f8:59:e9:1e:2b:8f:
42:06:85:75:26:3f:27:eb:bf:5d:10:88:32:66:23:
c1:0e:b4:51:c4:10:d2:e7:79:1c:70:7a:83:31:c8:
18:6f:9e:28:76:60:b0:30:85:22:38:6a:43:d2:4f:
ec:f3:7a:68:e4:c4:6e:09:41:87:e7:94:9c:75:61:
92:1a:22:19:8d:33:bd:1d:f1:8f:cb:22:99:7a:72:
8c:88:17:1b:21:5e:86:b2:46:37:39:0f:0d:50:dc:
0d:e0:af:e4:c9:d1:4b:14:d5:0b:07:ad:db:62:71:
6e:e9:a8:78:3a:d9:9f:56:54:3e:fd:30:8d:da:20:
bc:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:28:7B:47:6F:14:02:04:4C:A6:B0:EC:27:FA:50:5D:67:9D:8C:40
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/252bff0e-a7f2-4d92-b2ff-24bfa21a7306/9ca5ed04-3753-31ea-a1e7-257cbc7fb2f2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/252bff0e-a7f2-4d92-b2ff-24bfa21a7306/252bff0e-a7f2-4d92-b2ff-24bfa21a7306.crl
X509v3 Authority Key Identifier:
keyid:13:34:1F:39:12:25:A3:62:F4:C2:CC:7C:74:9A:15:0B:B9:94:42:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/252bff0e-a7f2-4d92-b2ff-24bfa21a7306.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:11d:500c::/47
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6c:8c:2a:c9:ef:ed:8a:02:32:ef:ee:6b:c3:5b:2d:b0:aa:63:
c4:a2:14:37:46:36:4a:52:75:40:1d:d7:78:7e:9f:ab:9f:9b:
92:e9:af:62:86:a7:5c:87:83:2f:a6:bc:ea:bb:ee:e5:fb:c3:
00:50:1c:a1:ba:3d:74:c7:77:a8:31:47:f6:ed:36:5d:c6:07:
22:b4:19:7b:20:1d:8a:75:7b:ce:0f:5c:1d:9d:40:cc:b8:06:
85:a4:a8:26:cb:94:bf:c7:5d:55:4d:c8:85:65:d9:82:6e:84:
9d:c8:02:b6:44:35:8b:5f:8b:bd:b9:e6:94:db:e0:da:9a:dc:
03:70:8a:ef:72:85:60:da:e7:dc:ea:5a:17:9f:29:66:13:17:
8d:0b:bf:34:6b:56:b2:17:35:65:1f:0b:c3:a3:4a:b0:f2:ac:
c2:6c:fb:81:74:5f:b4:45:80:41:65:ed:9c:e8:88:36:d5:94:
03:6e:c8:df:b6:b2:f0:09:bd:c6:a2:de:95:6a:fc:48:40:d2:
56:c3:ef:94:ae:25:87:1e:95:e0:34:87:b2:37:26:49:16:eb:
39:d3:9d:30:61:28:1a:a0:51:0e:09:40:9b:c6:44:a1:92:15:
e9:1e:56:8c:69:b3:c6:53:42:3b:12:c0:78:1c:e5:a2:b1:de:
12:e1:78:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:39:36 2025 by rpki-client