Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1a9c98a6-5ca2-345a-95ce-9d254cb8be47.roa
File: 1a9c98a6-5ca2-345a-95ce-9d254cb8be47.roa (raw, json)
Hash identifier: TMxythVlQJun0HL8ECmGIsOBDwDfPWVhkPAonbmelNY=
Subject key identifier: 05:9A:59:83:7C:28:3C:A3:24:E1:6D:05:49:48:9B:87:7B:00:12:A6
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858482C1B87877E3138FC47A34840
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1a9c98a6-5ca2-345a-95ce-9d254cb8be47.roa
Signing time: Wed 11 Dec 2024 15:17:55 +0000
ROA not before: Wed 11 Dec 2024 15:17:55 +0000
ROA not after: Tue 11 Mar 2025 14:17:55 +0000
asID: 397205
IP address blocks: 2620:0:5050::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2c:1b:87:87:7e:31:38:fc:47:a3:48:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 11 15:17:55 2024 GMT
Not After : Mar 11 14:17:55 2025 GMT
Subject: CN=8fa809fc-76a2-4304-a173-95162b1fbce8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:3d:c2:75:57:17:df:60:e0:b2:3d:2a:a9:b7:
85:fe:df:9a:d3:25:ce:28:07:4c:07:9b:e3:aa:b7:
8c:55:86:bb:48:81:1a:44:ef:a3:b1:69:ac:f5:41:
81:7c:3a:ee:c4:38:25:0a:f9:f7:80:04:40:9c:0c:
76:a9:a9:4f:94:3c:6c:10:8b:33:8d:d7:da:1c:0b:
b2:16:64:eb:6a:56:2a:cc:0f:cc:71:c3:e2:05:c0:
48:e8:c9:90:64:37:fc:87:6c:60:b1:18:ff:31:22:
2f:4c:02:1b:46:a5:26:52:b5:29:96:d0:16:79:44:
d9:26:0f:03:79:8e:26:1c:d7:95:af:ba:2c:7e:c5:
b1:83:c2:21:9b:bd:63:54:59:7d:0d:be:e0:fe:4f:
6f:9b:24:02:23:7a:70:df:b3:69:c6:1e:cd:4e:e4:
80:cb:8d:5a:9f:a2:a9:71:9c:8c:a4:d6:e3:5d:1f:
60:53:ce:4e:cc:f7:87:5f:2b:21:95:10:c7:ad:12:
98:de:e9:ef:af:49:0f:ad:97:47:80:83:84:e3:0f:
fd:ae:18:4b:3c:fc:48:03:7b:83:14:94:44:d8:b0:
27:eb:66:67:0d:42:5d:90:d4:d8:9e:28:f8:21:7b:
d6:55:a5:1a:88:ac:db:40:97:92:3b:6a:d1:5f:67:
7b:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:9A:59:83:7C:28:3C:A3:24:E1:6D:05:49:48:9B:87:7B:00:12:A6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1a9c98a6-5ca2-345a-95ce-9d254cb8be47.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:0:5050::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7a:a5:8f:89:18:75:46:3c:ab:85:fd:4e:13:9b:d2:f0:80:8a:
ca:fc:5d:dc:4a:16:9f:3a:b2:75:b3:25:d2:98:24:3c:ab:e3:
86:f5:e2:b5:f2:7b:91:38:47:4f:fd:10:7c:06:18:3b:91:0a:
b2:50:88:36:dd:1a:72:a4:af:2e:97:2f:57:fb:a0:2f:ca:09:
e6:e0:a0:a2:09:6b:c2:73:66:fd:a0:04:cb:15:5f:b4:1f:5a:
84:39:d4:2f:21:87:61:87:f6:a7:aa:8a:b7:12:68:b1:cd:83:
fb:6e:4e:94:d3:92:91:4f:d8:47:c2:d3:2d:10:f0:da:0c:74:
14:f0:88:2f:b4:5e:14:4c:17:b4:37:b4:7c:b9:19:ca:24:26:
81:52:b6:fb:ce:d5:5b:82:66:0d:72:ee:d6:d4:a3:9b:a8:8e:
77:29:de:ae:be:45:60:d9:33:80:57:60:38:55:d7:0a:28:1a:
34:69:21:d1:5c:bb:9b:86:2c:ae:41:20:06:4d:20:e6:0a:a6:
01:97:64:a9:58:13:20:af:bb:3b:57:cb:a3:c0:3d:f3:60:52:
a1:03:02:79:3d:53:c7:09:d7:6d:f7:b9:60:4e:6c:e1:7a:22:
4e:8e:0f:98:48:98:f9:f5:b5:31:0e:cf:0a:82:47:53:5d:4e:
a3:24:b0:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:15:04 2025 by rpki-client