Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ced95784-a28b-3be4-995a-6e8991f7142c.roa
File: ced95784-a28b-3be4-995a-6e8991f7142c.roa (raw, json)
Hash identifier: mDEvahfbfNu00a9G1dv5dfTjxI+NJSKcg9rEshu8m8c=
Subject key identifier: EF:C2:AB:A0:94:9E:E8:DE:0F:66:E0:DD:90:A4:42:81:56:DE:A9:CB
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858482C1B96EC8F9A47F0A1E5A1C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ced95784-a28b-3be4-995a-6e8991f7142c.roa
Signing time: Wed 11 Dec 2024 15:18:03 +0000
ROA not before: Wed 11 Dec 2024 15:18:03 +0000
ROA not after: Tue 11 Mar 2025 14:18:03 +0000
asID: 397207
IP address blocks: 2620:0:5050::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2c:1b:96:ec:8f:9a:47:f0:a1:e5:a1:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 11 15:18:03 2024 GMT
Not After : Mar 11 14:18:03 2025 GMT
Subject: CN=9eb04517-df5e-4e62-816f-876320573280
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:83:7e:90:e1:70:4c:b8:de:f7:eb:d5:be:ca:
b9:75:f4:43:95:9a:a0:97:31:e1:47:8a:38:c5:1f:
5c:bd:b9:fd:8e:a1:29:3c:be:f5:37:b6:6f:01:3f:
70:3a:5f:4a:03:da:a8:14:a3:ea:20:0e:7f:e2:0a:
4f:6d:92:cc:db:5f:bb:56:ff:1b:6c:b3:2f:df:22:
f2:08:bc:e5:18:23:e9:b7:c9:61:e3:56:6d:57:70:
10:6f:59:58:b9:5f:8c:14:c5:16:20:6b:78:74:6f:
78:8c:8d:30:86:ac:e4:1b:04:c5:64:6c:e1:23:29:
5c:42:bf:64:6e:10:b7:34:3f:7c:79:4c:d6:41:4b:
e6:ba:cd:d5:a7:be:97:ee:e7:05:2a:dc:ea:fa:ab:
4e:85:81:d4:84:3f:2e:72:f5:78:d1:d9:0b:34:2d:
fc:b9:15:39:71:6c:7c:0f:df:83:8b:1b:6a:c7:a4:
12:86:04:2f:39:e0:25:78:d0:63:f0:6a:c1:46:d0:
2d:d8:a4:44:71:e6:1e:27:47:a1:85:71:79:8b:74:
8a:0f:e1:dd:70:7c:89:07:cc:f2:e7:d2:ea:60:c5:
6e:05:6d:c2:6b:e5:73:87:cb:aa:0a:53:bf:b8:f6:
cf:b6:10:e8:2b:17:83:34:cc:b3:db:be:8c:94:55:
dd:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:C2:AB:A0:94:9E:E8:DE:0F:66:E0:DD:90:A4:42:81:56:DE:A9:CB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ced95784-a28b-3be4-995a-6e8991f7142c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:0:5050::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
44:89:95:bd:22:84:af:f3:3f:db:c6:3d:62:f7:bc:df:06:06:
7f:66:5b:80:60:31:41:7b:92:dc:6d:b9:a3:3e:45:3d:02:7d:
e7:7e:19:f1:25:d8:07:ba:78:25:92:52:e7:fd:52:41:53:83:
98:ba:97:61:a5:30:10:c3:c9:1a:74:7b:79:56:f3:0f:8c:e9:
11:c3:eb:63:00:b5:41:79:c9:00:35:f8:72:97:34:91:a7:13:
8c:70:b0:5b:cc:a7:6b:60:72:09:13:0f:2a:f7:48:75:f5:ef:
34:95:53:54:64:52:f3:b2:f5:6b:91:b2:f3:17:38:33:f8:52:
d7:81:e6:56:d6:e7:aa:24:b2:c8:ad:a3:29:05:79:6a:e2:73:
df:d7:7b:ac:2a:9b:cb:36:aa:1e:4e:61:5d:5c:8e:3e:68:85:
0c:07:44:87:ce:2e:1c:9e:96:3e:04:cc:08:5a:21:f0:5a:de:
3f:ed:26:a1:be:99:4e:44:df:a3:6f:12:a1:eb:82:f5:3b:48:
94:76:d6:5a:cc:62:eb:0e:e6:c1:14:68:c0:95:03:ad:47:f2:
f7:a9:92:f4:26:5b:2f:56:46:ed:46:ee:0a:74:7b:0c:d2:ae:
ec:7e:04:dc:bb:21:5d:79:79:9e:a5:7e:83:79:a1:1e:86:cc:
3d:5c:c4:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:52:35 2025 by rpki-client