Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a4727c7f-d497-3b2f-a315-9a42a3754e3e.roa
File: a4727c7f-d497-3b2f-a315-9a42a3754e3e.roa (raw, json)
Hash identifier: LLUkwaM5mLxBVX0sx1L5vlgstVwSXu3hJtze12tQS0o=
Subject key identifier: 33:BA:B2:E1:F4:A1:96:E8:10:3D:57:44:05:9C:B0:C2:FD:1D:68:A7
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858482C1BA240D274F59BDC491300
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a4727c7f-d497-3b2f-a315-9a42a3754e3e.roa
Signing time: Wed 11 Dec 2024 15:18:08 +0000
ROA not before: Wed 11 Dec 2024 15:18:08 +0000
ROA not after: Tue 11 Mar 2025 14:18:08 +0000
asID: 397208
IP address blocks: 2620:0:5050::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2c:1b:a2:40:d2:74:f5:9b:dc:49:13:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 11 15:18:08 2024 GMT
Not After : Mar 11 14:18:08 2025 GMT
Subject: CN=1050cad8-c91f-41c8-9531-50d5a3c77997
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c6:00:44:97:b6:5e:99:c2:fd:44:d5:31:45:
be:5e:af:23:c1:cd:6d:d2:09:07:21:68:61:53:24:
22:91:61:a9:6e:4d:c7:14:c0:be:8a:fd:8a:10:3d:
4e:f9:94:58:71:26:24:e8:12:19:93:0c:09:ad:41:
75:f5:9f:9f:ce:bd:66:23:68:61:55:f6:0a:f4:3e:
95:3c:d8:07:1b:3c:2f:13:a4:81:ff:fe:fe:85:6b:
80:07:f1:ce:26:fd:6f:c6:31:b6:21:c6:2f:69:3d:
b8:20:e0:b7:fa:c4:c6:c8:2d:af:16:b5:55:61:b5:
17:62:a6:eb:b0:5c:d0:d6:36:0d:10:82:d6:e3:6a:
ec:13:e4:c2:d8:a8:49:f1:ee:98:d9:86:19:2c:7c:
c5:1d:18:79:55:0a:99:8d:68:d4:9a:2b:76:ba:2a:
7a:6a:7f:98:8f:8c:eb:c6:7e:af:a0:e2:0b:81:38:
5f:12:fa:e4:07:cb:dd:9d:2e:15:dc:07:f4:c8:5c:
07:0b:28:38:33:39:24:5d:00:70:0b:08:69:c2:2e:
65:11:e4:9e:17:36:57:72:3b:f4:61:50:32:a9:05:
c9:78:85:f3:49:3c:61:f4:ae:07:c9:48:0a:03:f1:
ed:dc:2f:14:9f:cf:46:53:4c:e9:4d:8d:b5:c7:33:
40:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:BA:B2:E1:F4:A1:96:E8:10:3D:57:44:05:9C:B0:C2:FD:1D:68:A7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a4727c7f-d497-3b2f-a315-9a42a3754e3e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:0:5050:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
05:42:21:ea:65:ea:eb:bc:4b:b6:1d:fd:8f:d3:b9:b5:a3:10:
a6:2e:52:c7:2e:e7:0f:80:9a:52:e6:40:a8:1b:5d:f7:a4:75:
f6:14:a6:2c:45:ea:42:db:f4:ac:28:81:a5:b5:d4:2f:f3:1f:
81:99:8d:ba:04:f1:c8:bc:6e:51:c7:96:f0:63:85:e2:00:54:
ce:f2:10:05:f7:ef:69:73:fc:40:9c:ad:f9:e4:00:40:7f:7b:
ed:6b:dc:7d:b9:4e:4a:c8:da:9a:59:63:a4:9e:26:68:19:a6:
7c:ce:3f:33:4c:b3:53:c0:b2:28:df:dc:65:93:66:50:b6:6f:
83:75:b3:4b:2a:f6:2b:b6:4b:70:59:06:72:1b:6e:0e:a4:b1:
ce:7b:ec:e8:1a:d6:c8:27:54:49:f4:16:43:d1:bf:76:b9:d2:
67:9a:69:9e:12:25:d2:fe:07:96:16:ce:46:ec:af:83:01:da:
03:a6:cd:bc:15:e3:17:c8:72:d4:b3:b2:ff:d6:53:57:59:6d:
4c:2d:d6:c6:c6:a1:43:66:53:1c:36:1a:ab:0d:b9:58:ac:ad:
fc:92:4f:df:84:d4:9d:5b:72:39:72:8f:e6:dc:64:91:dc:b9:
d9:8e:b3:55:10:ae:e8:8d:92:94:8d:ac:44:ba:4c:9b:fb:d0:
d4:83:8b:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:53:10 2025 by rpki-client