Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/e47aa24b-c128-33f8-9261-d62e9c21bfec.roa
File: e47aa24b-c128-33f8-9261-d62e9c21bfec.roa (raw, json)
Hash identifier: Z/zaVepzNqMLiqKyQKUTySycVDZm9K6bcedKFgG3+NY=
Subject key identifier: 63:76:C3:58:5A:D8:C1:B4:89:24:AC:F0:56:97:F7:54:DE:71:DD:4C
Certificate issuer: /CN=3c1b9e2d-457a-403f-9256-27f272ed993d
Certificate serial: 010D0C9F43285848F7C142AE2D0B26A32B077700
Authority key identifier: EE:DF:25:D2:42:4C:99:1F:D5:04:B3:D0:D3:64:9E:B5:B5:6A:72:C3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/e47aa24b-c128-33f8-9261-d62e9c21bfec.roa
Signing time: Sat 22 Feb 2025 14:00:52 +0000
ROA not before: Sat 22 Feb 2025 14:00:52 +0000
ROA not after: Fri 23 May 2025 13:00:52 +0000
asID: 16509
IP address blocks: 2620:1f7:c022::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f7:c1:42:ae:2d:0b:26:a3:2b:07:77:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c1b9e2d-457a-403f-9256-27f272ed993d
Validity
Not Before: Feb 22 14:00:52 2025 GMT
Not After : May 23 13:00:52 2025 GMT
Subject: CN=c1da6361-5b50-44c3-ac7d-32575c85669b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ab:b4:81:25:1a:7d:77:0f:be:33:a0:dc:ef:
67:92:f1:df:77:4c:3e:07:78:07:38:b9:ac:c7:73:
43:10:0d:85:08:5c:08:48:e5:39:da:4f:ee:c3:69:
ec:12:d4:70:dd:8e:9e:17:ed:a0:f1:36:5a:0d:34:
a5:b7:52:16:58:29:62:f9:70:40:f6:22:a1:cb:d5:
dc:a4:30:40:39:c3:df:bf:b0:7b:13:d5:3d:01:33:
53:70:78:10:38:88:00:37:c9:44:8f:2c:27:a4:c5:
45:0b:73:36:42:1b:52:33:d3:9f:05:31:f8:fe:05:
6e:38:c7:5f:a0:f8:6b:e1:89:c1:95:b9:ff:79:bb:
21:b4:c3:33:00:d8:e7:b7:d8:9b:35:67:8d:14:a6:
f4:1d:99:fb:f6:29:2d:38:89:64:96:46:36:f6:f6:
65:0f:0f:ec:b7:35:be:2f:4a:f7:c0:23:f6:60:91:
d2:59:d8:e4:07:00:83:c9:f4:9f:b2:49:95:b8:e1:
76:0a:9e:e0:36:42:26:d9:3b:ff:7b:9c:d9:5e:8d:
e3:70:53:97:e2:13:7f:23:7d:31:8a:ef:79:4b:e7:
e7:75:ba:fd:b1:9d:c0:da:9e:c4:21:ed:c4:62:f9:
a0:37:b9:e6:fe:70:f8:64:37:ad:c1:55:c4:29:cd:
60:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:76:C3:58:5A:D8:C1:B4:89:24:AC:F0:56:97:F7:54:DE:71:DD:4C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/e47aa24b-c128-33f8-9261-d62e9c21bfec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/3c1b9e2d-457a-403f-9256-27f272ed993d.crl
X509v3 Authority Key Identifier:
keyid:EE:DF:25:D2:42:4C:99:1F:D5:04:B3:D0:D3:64:9E:B5:B5:6A:72:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:1f7:c022::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
04:94:5d:42:93:c7:95:0a:fe:2d:d2:be:ff:73:3f:f1:d6:cd:
91:42:83:8f:f6:48:33:d3:da:31:db:c5:4f:2a:67:ea:29:9e:
96:20:bd:2f:fb:0b:4d:40:ee:2d:c5:3d:df:8a:73:94:6f:db:
85:bc:84:57:79:ad:61:25:87:38:65:cb:4b:76:17:e0:6e:4e:
f4:ce:9d:4b:61:b2:40:14:53:ba:62:b5:44:67:6c:c4:4e:98:
8a:f6:39:57:3b:75:e0:d4:4f:ea:52:8e:09:7d:ac:25:3c:6a:
ba:e0:7e:46:3f:64:01:43:df:4d:1f:84:21:51:73:d4:8d:0b:
3e:92:f7:db:08:da:a6:f2:d0:a0:b0:17:f8:c9:2f:a8:71:54:
a3:0f:0e:e2:0b:56:91:a9:30:50:54:39:57:c8:43:b5:b0:51:
b5:7c:ee:41:4c:cd:c4:d6:3b:42:af:b0:7e:79:20:84:cf:54:
73:f8:ca:3e:df:55:b0:d8:ff:d7:e2:47:2a:42:8e:6a:17:d1:
1f:be:2d:e3:a9:e2:3f:00:ca:79:55:33:57:c4:31:c7:ef:3c:
ae:84:16:e6:bc:7d:6b:2c:67:a2:ab:c5:e5:24:37:4d:50:b8:
7c:fd:86:cb:4b:46:6b:2e:e6:51:4d:42:38:cc:b9:bd:03:d5:
66:25:63:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 05:17:36 2025 by rpki-client