Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/b95371c1-c1d8-3e6d-802e-5783e35d6b9f.roa
File: b95371c1-c1d8-3e6d-802e-5783e35d6b9f.roa (raw, json)
Hash identifier: KZr9ehUBAn+hXpCchWQ4xAqtmJB+OdH5dvmnEfGPZXc=
Subject key identifier: A5:5A:0E:B7:74:EA:29:A9:3C:05:EC:A6:6D:39:7D:AF:B9:2F:C6:08
Certificate issuer: /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Certificate serial: 010D0C9F43285848090FA6DF512F0204AF904540
Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/b95371c1-c1d8-3e6d-802e-5783e35d6b9f.roa
Signing time: Fri 29 Nov 2024 02:00:39 +0000
ROA not before: Fri 29 Nov 2024 02:00:39 +0000
ROA not after: Thu 27 Feb 2025 02:00:39 +0000
asID: 62651
IP address blocks: 2604:fc80:2400::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:09:0f:a6:df:51:2f:02:04:af:90:45:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Validity
Not Before: Nov 29 02:00:39 2024 GMT
Not After : Feb 27 02:00:39 2025 GMT
Subject: CN=e95fd8ad-79bc-41b1-aad9-118769eaef16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f2:c6:76:eb:a8:a7:01:eb:9a:cd:74:59:37:
4f:8b:73:a0:13:41:db:04:be:2c:d8:b9:b5:0e:5f:
c5:23:11:f1:5f:eb:f6:d1:33:7e:f0:7e:88:16:95:
0f:9a:8c:31:5a:0c:96:9d:07:82:52:b8:7a:ae:a2:
7f:14:53:c1:32:1f:db:74:22:3a:cf:39:3e:19:35:
49:cf:4c:b3:d8:a5:5b:2c:80:c9:e7:49:e7:f4:44:
3a:6b:83:a4:0d:cf:07:7d:ba:39:eb:f8:c8:6e:91:
7d:af:8f:f8:6b:a4:dc:dd:94:28:43:85:1a:6b:63:
5a:3a:23:63:9c:f0:c4:db:ea:dd:ae:c7:7e:de:76:
5b:ea:16:3f:c3:bd:a7:66:6b:03:74:e5:b1:5b:a6:
5f:49:fa:d1:d1:02:0e:3b:15:d4:bd:1f:24:fb:6b:
5f:8c:cd:67:c7:e1:94:14:a1:eb:d2:72:8f:1f:03:
92:6d:e6:95:89:54:90:b0:71:73:e6:53:0e:5d:88:
35:b0:da:5e:7b:95:c9:08:09:97:49:24:31:be:a7:
ab:d9:23:d0:da:f0:67:11:41:7e:1e:b4:18:a9:96:
69:f7:2a:c4:b1:d1:ca:98:86:00:6e:ad:6e:67:a6:
a9:85:c1:8e:3c:46:2d:c6:50:09:37:38:71:d0:3d:
9a:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:5A:0E:B7:74:EA:29:A9:3C:05:EC:A6:6D:39:7D:AF:B9:2F:C6:08
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/b95371c1-c1d8-3e6d-802e-5783e35d6b9f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl
X509v3 Authority Key Identifier:
keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:fc80:2400::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
73:84:70:f8:7a:fd:fe:d9:d9:c4:b9:9f:eb:d4:9b:89:84:33:
f5:e4:b7:3c:47:29:80:33:b7:49:32:51:bd:ba:5f:a9:af:b9:
c5:5a:60:52:ca:c5:d6:43:ed:6e:7a:dc:3a:65:d0:9d:8d:b1:
97:ad:9e:0c:2f:1e:14:dc:49:ee:72:8b:fc:e1:b9:0a:67:03:
c3:7a:c3:78:8a:e6:a0:2c:89:91:db:68:7d:3f:65:97:bb:01:
91:67:a1:ef:2f:a5:c1:5a:6d:17:17:8c:e6:ec:80:b4:31:d3:
c6:91:30:f6:6e:24:de:75:16:da:24:d1:06:48:28:23:60:57:
3a:4d:6f:b4:63:71:ba:5c:93:86:ff:fa:a2:86:ff:d1:05:cc:
eb:ec:c7:3d:72:4b:75:00:b0:09:8e:e8:c8:e1:e2:df:60:1e:
90:a6:68:29:d7:60:97:e7:dc:9a:c0:c6:c1:6c:0b:2d:fe:a1:
c9:2e:a2:db:7f:33:2c:47:7d:bd:63:ea:5e:d2:c1:43:97:5d:
8b:be:7a:8c:77:47:9c:35:f2:18:5b:c7:9a:5c:37:c0:10:a3:
75:67:65:4a:ec:db:a3:d6:e3:a6:72:f6:f2:ab:69:98:37:18:
32:33:08:87:84:95:d7:e6:8a:95:b4:2f:bc:59:ec:b7:78:fa:
22:ad:cd:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 15:07:56 2025 by rpki-client