Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b8904cb7-bab9-31df-b3d3-17c3ea2d2f16.roa
File: b8904cb7-bab9-31df-b3d3-17c3ea2d2f16.roa (raw, json)
Hash identifier: +zuZuF/0JwU60c2Dt2evyvWfQXi5ZG5EdmpE15izPco=
Subject key identifier: 5E:CA:FB:20:EE:8D:7B:09:35:2F:48:19:61:27:32:8F:9B:6F:84:1D
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858482C1B9B9644FEA4C1DDCD64C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b8904cb7-bab9-31df-b3d3-17c3ea2d2f16.roa
Signing time: Wed 11 Dec 2024 15:18:05 +0000
ROA not before: Wed 11 Dec 2024 15:18:05 +0000
ROA not after: Tue 11 Mar 2025 14:18:05 +0000
asID: 397204
IP address blocks: 2620:0:5050::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2c:1b:9b:96:44:fe:a4:c1:dd:cd:64:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 11 15:18:05 2024 GMT
Not After : Mar 11 14:18:05 2025 GMT
Subject: CN=02d13da0-026a-4fb3-a642-5ba592982eb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:61:76:8d:ed:54:6a:74:f1:45:91:ce:03:40:
e4:a7:ae:76:d6:85:8d:bd:73:35:fb:1a:52:26:55:
15:d6:9e:4f:50:cb:fc:25:4a:88:18:77:9d:53:3b:
ce:66:5c:2e:11:65:64:5e:87:aa:29:fe:7b:3a:02:
c7:27:08:f3:f0:e5:80:df:f8:a2:57:03:4c:8d:5d:
4a:70:f9:00:42:40:36:ab:bc:da:8d:e4:58:3f:5a:
a2:26:1c:66:f2:56:f7:b5:42:c6:52:ae:c3:60:33:
dd:d3:75:dd:78:eb:52:35:94:4d:e9:a1:69:68:39:
55:e6:18:d6:19:73:2b:7b:37:88:92:59:a7:a1:76:
dd:13:0d:bc:d2:c5:c2:62:52:e6:92:f3:5c:ae:9d:
ff:7a:72:e7:b5:ed:19:e8:ad:0f:fe:db:ef:2f:03:
21:b3:cd:2d:ec:c5:66:27:da:b5:5e:9c:88:a4:f0:
e4:17:f8:7b:7b:5b:38:74:41:b2:cb:54:99:1e:28:
f7:18:10:74:b1:77:d8:ed:69:a5:e6:26:4e:2f:70:
0f:a4:e9:82:e1:78:44:05:fb:64:5d:f1:45:43:b1:
ea:fd:b0:14:68:ea:f2:fd:fa:c5:5e:6a:99:2f:d1:
19:55:50:f0:57:13:00:b0:d2:fc:4b:f3:c4:fc:19:
36:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:CA:FB:20:EE:8D:7B:09:35:2F:48:19:61:27:32:8F:9B:6F:84:1D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b8904cb7-bab9-31df-b3d3-17c3ea2d2f16.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:0:5050::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
79:d0:a2:c8:dc:60:fd:87:2f:42:b6:1d:9f:41:ce:cd:46:53:
c6:cd:42:b7:0e:4d:5c:ae:2f:31:bd:11:78:1e:f5:6b:f0:61:
4c:69:5e:c0:2d:31:1a:03:cb:55:89:84:3b:8b:60:19:48:af:
e0:ab:7a:13:24:df:93:b1:7f:ea:d0:6e:b4:8b:3c:7c:9e:95:
f5:30:42:a1:36:0e:3e:ac:66:b6:c4:99:ca:fe:1a:2c:1c:14:
fe:2d:72:c5:3c:dd:bd:23:38:18:94:25:57:e6:d2:17:dd:01:
05:03:22:9a:19:9a:4d:4e:a8:2f:96:db:66:55:be:35:e4:e2:
4c:33:93:41:03:89:87:c2:5e:55:9e:70:08:90:c1:e8:66:cd:
28:a7:d0:cf:21:04:01:44:f4:ea:d6:5d:a7:0d:42:6d:0a:29:
5a:be:48:96:4d:e4:bc:4a:71:8d:fa:f7:59:e1:cc:d9:df:85:
2e:0a:20:2b:55:79:a0:86:f1:d6:69:c9:94:84:24:6f:db:b4:
b2:1e:cc:5e:b3:46:cc:03:dd:03:63:c9:db:8b:1a:63:3e:cf:
85:f7:0f:f3:ef:e9:a4:93:38:84:17:72:64:7b:45:fc:7d:d8:
f6:c7:b8:21:39:56:3d:44:6d:d9:d6:26:d8:f0:94:95:aa:96:
eb:09:f5:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:01:10 2025 by rpki-client