Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3d41a0e8-6429-38f2-9bd0-d2a0a00cdc73.roa
File: 3d41a0e8-6429-38f2-9bd0-d2a0a00cdc73.roa (raw, json)
Hash identifier: vx5/uJP1qpwY1d3H6BkQ0Rdxq2QWN+VPuGRXiCwwwgk=
Subject key identifier: A9:04:1A:25:49:D9:D9:22:67:4D:56:4E:74:08:2E:F3:8E:4D:C2:80
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858482C1BAA93472DD3009BE22F00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3d41a0e8-6429-38f2-9bd0-d2a0a00cdc73.roa
Signing time: Wed 11 Dec 2024 15:18:12 +0000
ROA not before: Wed 11 Dec 2024 15:18:12 +0000
ROA not after: Tue 11 Mar 2025 14:18:12 +0000
asID: 396710
IP address blocks: 2620:0:5050::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2c:1b:aa:93:47:2d:d3:00:9b:e2:2f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 11 15:18:12 2024 GMT
Not After : Mar 11 14:18:12 2025 GMT
Subject: CN=dff2af23-f29a-45a6-83b0-4cef76d43dff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b0:02:9c:47:6c:33:d8:b8:c4:8b:69:17:64:
62:86:65:3c:61:b6:20:e8:38:c1:5b:74:d8:98:46:
3e:b5:62:3b:d7:fd:ac:ec:01:73:56:37:91:06:a6:
e5:f1:93:cb:52:92:0c:b9:6b:78:f3:67:d1:16:6a:
78:30:ee:25:30:51:f7:c8:81:25:4e:fe:00:92:b7:
8e:85:6f:df:15:50:25:9a:d7:6e:28:a0:ba:5f:56:
9d:02:f9:99:54:a1:4f:9f:e3:c0:76:ee:6d:23:83:
0d:da:dc:54:fb:57:cd:f5:cb:65:df:88:3a:68:ee:
d9:92:22:46:c8:53:46:f9:8a:69:c3:7e:98:81:d4:
23:a3:66:38:86:b1:65:8a:ce:9f:0c:ef:10:5e:7a:
e1:1c:5f:ed:23:fe:84:1a:88:eb:ac:d1:36:8a:4c:
dd:6b:4b:9e:d8:e3:3a:fb:f9:37:92:7b:bf:8f:d6:
03:1a:b5:b7:c9:e8:b6:a5:cd:c4:28:38:ae:86:aa:
e6:90:e2:4e:19:30:2e:fa:97:9a:82:2b:94:31:71:
1e:97:74:2b:1f:b6:38:c5:1e:fa:dd:7d:10:aa:e5:
23:44:2d:3a:d5:d8:e4:b9:d6:20:8b:b9:a9:24:fa:
c3:81:71:77:1f:8d:6d:17:db:7f:94:34:df:f3:70:
07:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:04:1A:25:49:D9:D9:22:67:4D:56:4E:74:08:2E:F3:8E:4D:C2:80
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3d41a0e8-6429-38f2-9bd0-d2a0a00cdc73.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:0:5050::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a2:4d:41:42:41:d9:fb:74:61:19:7f:2e:9a:4a:b9:41:f3:19:
ce:c1:94:bc:5f:77:7d:70:dd:42:7f:61:fc:ec:b0:3c:94:ab:
0d:9e:c0:fb:01:1d:36:b6:d3:56:b7:dc:b0:99:44:bf:6a:88:
90:a7:41:81:08:e4:53:e4:25:e8:96:3e:e2:fb:33:64:21:bc:
f9:76:d5:2c:5e:56:56:84:1e:a3:54:d1:5e:60:bf:12:76:ff:
54:1e:d8:2d:d4:4f:43:aa:9f:f8:99:0b:b3:5f:ed:0f:33:d1:
6f:4f:4d:2b:75:3f:a3:7a:df:d6:a4:7b:c9:bb:86:19:b8:42:
20:cf:67:87:44:36:f4:a3:7c:f0:c1:22:c2:bc:fa:e7:4e:b9:
6f:ee:a2:09:06:90:87:bb:1f:17:c9:95:a6:0a:2d:97:4f:5c:
29:d2:ad:eb:12:69:e7:55:21:f4:ec:3a:35:b5:1d:3f:c6:84:
85:69:7d:9a:29:f5:1a:96:c7:de:53:30:83:9c:83:5e:f2:40:
03:77:19:89:d4:45:fa:24:88:a4:be:9a:b4:99:ec:8b:0e:ef:
e4:06:ea:28:cc:7c:63:5c:56:fb:22:b9:69:3c:c5:cc:53:58:
e8:44:e4:27:58:9c:a3:87:a7:53:02:21:01:ee:fb:50:d9:34:
58:1f:1b:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:32:00 2025 by rpki-client