Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cdf72001-bb33-3830-8e3a-b2019a6a8a55.roa
File: cdf72001-bb33-3830-8e3a-b2019a6a8a55.roa (raw, json)
Hash identifier: 4K6bVVKfLZqV8Un0fBs7qTCjAhte3PBuqFiXKRzGsy4=
Subject key identifier: 47:84:94:72:48:9D:5F:77:34:D3:E8:8C:7D:35:77:83:DF:11:70:31
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858482C1B90CE751D888A31E90180
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cdf72001-bb33-3830-8e3a-b2019a6a8a55.roa
Signing time: Wed 11 Dec 2024 15:18:00 +0000
ROA not before: Wed 11 Dec 2024 15:18:00 +0000
ROA not after: Tue 11 Mar 2025 14:18:00 +0000
asID: 36629
IP address blocks: 2620:0:5050::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2c:1b:90:ce:75:1d:88:8a:31:e9:01:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 11 15:18:00 2024 GMT
Not After : Mar 11 14:18:00 2025 GMT
Subject: CN=978cd1f9-17f2-40aa-b218-0b9900cd5d9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:af:20:25:b6:3e:77:52:37:cd:9b:25:87:a8:
e5:92:40:7f:7f:a5:0b:25:77:d7:5d:6e:6d:c6:c4:
ec:3b:93:cf:ab:d4:48:88:fb:b4:83:f2:e0:97:1b:
a1:1d:42:8c:f0:d3:a1:1d:10:3d:58:5e:28:ac:df:
e5:a4:36:de:15:f7:8e:45:fe:51:62:6c:7b:03:2e:
18:d9:a1:f9:83:8d:09:6e:10:af:03:82:49:15:22:
a2:73:44:5f:e5:1c:56:54:c9:dc:94:59:19:c4:57:
73:1a:50:72:54:ef:e9:d1:70:32:d7:25:67:57:5e:
50:3d:e8:4f:36:4a:43:15:8f:ef:94:7f:2e:9a:44:
69:50:5a:07:31:3f:45:00:59:7b:b2:09:5e:fb:bb:
2f:e0:2e:c1:d5:3c:1e:9f:9a:c0:e3:7e:c8:27:f8:
78:4d:4e:de:6e:ef:ca:83:ad:d7:94:b5:f6:22:5c:
f5:9f:36:af:1d:f6:23:75:f0:90:9f:cb:fc:29:6c:
a6:92:c5:be:71:69:8b:71:30:92:16:1b:85:89:fe:
13:c8:51:58:bc:9c:76:39:ce:28:5e:ec:fd:f1:41:
8e:86:d3:7c:39:4d:ce:fc:e9:f8:bd:51:1a:bb:44:
39:70:08:63:63:02:f5:3f:83:2e:59:9b:8f:ac:7c:
b4:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:84:94:72:48:9D:5F:77:34:D3:E8:8C:7D:35:77:83:DF:11:70:31
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cdf72001-bb33-3830-8e3a-b2019a6a8a55.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:0:5050::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
05:fa:98:a3:df:61:f4:90:c1:c6:0b:8f:08:57:6e:77:6c:01:
e2:71:1e:28:a8:59:62:6e:04:67:16:51:9d:21:b2:ef:a1:74:
0d:65:2c:91:15:e6:9b:62:7f:82:e3:b4:12:6a:89:92:bc:4c:
49:a1:d9:8e:bf:b2:9c:98:18:d4:2c:12:cd:80:d3:1a:e6:a6:
93:61:35:ff:fa:da:3f:6e:16:76:e8:0f:f7:c0:09:71:d4:1c:
02:cc:eb:17:4b:f8:07:4d:78:92:74:04:53:fb:87:b4:a9:bd:
1c:c6:67:6e:db:44:a8:da:39:c5:10:0c:c6:a0:a0:54:37:a8:
13:16:44:f7:5e:7a:0c:a5:5f:b8:51:ef:20:42:5b:7a:e1:e7:
db:82:4b:7f:bf:e5:73:9e:b0:12:18:d5:a9:fe:fb:1b:b3:ba:
be:8c:be:03:31:d4:c2:5d:58:a1:d8:23:71:47:e4:a1:b7:29:
b4:90:0e:34:67:e4:a3:3c:cb:1a:f1:fc:5f:2a:c7:e9:7d:02:
2f:8e:29:17:74:ab:d0:90:7c:31:ff:bb:77:83:b8:9a:76:7c:
52:bd:66:23:4b:97:ec:54:e8:54:50:e3:6a:fa:ab:f5:5e:88:
57:be:93:8f:64:4e:79:95:8c:a2:b2:dc:67:4e:11:e4:78:16:
fa:6e:5c:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:24:31 2025 by rpki-client