Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/f78860c2-0b10-3d41-9efe-8347af34308d.roa
File: f78860c2-0b10-3d41-9efe-8347af34308d.roa (raw, json)
Hash identifier: 0aOMAwINU2m3VHoeZxzFUkDoAcFydDL5gd6FsGAWJmQ=
Subject key identifier: 14:CC:20:C9:4F:B4:A8:3A:DD:29:08:BD:FA:87:60:7C:40:41:7C:10
Certificate issuer: /CN=4bc604de-ac2b-4921-b601-a2c976ab18e8
Certificate serial: 010D0C9F43285848D2113D0EC7D97A0DDE7C2280
Authority key identifier: 5D:EC:C2:1E:9D:07:9D:B1:09:72:20:A7:5D:09:3D:FA:E3:FC:AC:40
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/f78860c2-0b10-3d41-9efe-8347af34308d.roa
Signing time: Sun 09 Feb 2025 02:00:39 +0000
ROA not before: Sun 09 Feb 2025 02:00:39 +0000
ROA not after: Sat 10 May 2025 01:00:39 +0000
asID: 396501
IP address blocks: 2620:10a:80ac::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d2:11:3d:0e:c7:d9:7a:0d:de:7c:22:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bc604de-ac2b-4921-b601-a2c976ab18e8
Validity
Not Before: Feb 9 02:00:39 2025 GMT
Not After : May 10 01:00:39 2025 GMT
Subject: CN=d52f1eee-b107-4c0c-96fe-1cbcb606a182
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:f2:fa:de:08:50:4b:aa:9a:0f:ab:b0:14:c8:
4e:3b:2b:5b:68:3d:13:2b:05:75:7f:c9:6b:a9:ac:
71:b4:53:63:b8:93:c6:b2:31:4b:98:87:a1:1a:1f:
36:1d:e0:64:af:bb:ca:05:fc:5f:db:15:ab:7c:5c:
55:7c:3a:14:b3:7a:ab:d0:c6:f0:06:9a:1c:00:f7:
25:e0:56:f6:f8:f9:35:60:95:79:dc:e4:e5:bb:ed:
fd:1e:30:81:d3:1b:23:b0:c0:af:21:72:65:73:69:
53:72:b7:9a:1f:35:b1:78:0a:a6:ae:82:f0:2b:45:
07:ea:09:2f:f1:ac:37:41:16:3c:9f:76:c0:ab:ff:
46:a2:08:40:8b:95:79:23:f3:2a:8e:d8:37:31:72:
a0:ae:f7:d1:11:84:ee:a6:69:0f:e4:6c:29:fc:e3:
a5:17:17:5a:59:6c:77:7f:1f:55:a7:35:4b:23:86:
3d:d2:36:4d:35:e2:3d:64:00:bd:26:90:d0:05:ec:
ea:6c:21:49:55:60:0d:bc:a9:64:2f:2c:98:8a:5a:
bb:4d:ef:2d:e6:88:7c:ca:ac:f8:5c:74:0f:b8:2c:
6e:6a:11:1d:c8:53:c2:e7:b1:d2:37:fc:f0:6c:e1:
2c:e4:7c:23:ef:40:ac:9f:64:09:01:2a:16:a3:50:
85:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:CC:20:C9:4F:B4:A8:3A:DD:29:08:BD:FA:87:60:7C:40:41:7C:10
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/f78860c2-0b10-3d41-9efe-8347af34308d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/4bc604de-ac2b-4921-b601-a2c976ab18e8.crl
X509v3 Authority Key Identifier:
keyid:5D:EC:C2:1E:9D:07:9D:B1:09:72:20:A7:5D:09:3D:FA:E3:FC:AC:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:10a:80ac::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
92:c2:e8:f4:4f:e5:ce:90:c2:8f:9d:bc:07:c7:44:49:7b:74:
72:7a:5b:fa:8f:ca:f2:c0:97:34:56:9a:ae:da:28:d0:14:83:
01:93:86:92:c1:f4:4c:51:69:f7:22:a3:6b:ec:d6:5a:53:13:
41:0b:12:ce:f1:45:07:3b:16:58:5b:92:bb:49:74:69:87:92:
b2:b3:bb:cc:59:47:33:46:05:8f:c1:c4:68:40:09:e1:94:cb:
32:05:ad:c4:aa:4d:b3:b0:7c:f7:3c:ad:2b:9f:17:03:5f:6e:
6f:5b:56:29:b4:79:5c:c9:11:91:64:69:f7:a7:f3:b0:aa:67:
e9:c6:36:ad:40:6f:4f:20:ab:4a:40:35:38:24:3f:08:28:e0:
4d:27:79:87:42:dd:dc:a1:37:85:dd:ce:33:f2:ad:26:ec:09:
ae:00:e2:c8:4d:ef:4e:2f:fc:d4:1f:5c:62:30:f9:aa:fa:da:
b6:34:d6:0f:38:a5:3b:20:1c:54:57:41:e6:ae:3b:31:0c:9f:
07:f7:bf:d8:37:e9:2f:28:8e:c7:92:9c:91:41:33:4a:18:3e:
86:e3:46:eb:7f:e7:b8:c6:48:8d:f6:78:9b:c8:04:10:e6:30:
ed:2b:21:82:fa:bc:2c:06:7e:d7:36:6a:02:ae:80:09:dc:7f:
18:ed:ec:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:21:50 2025 by rpki-client