Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/d1ec7d81-82ad-3029-abd2-5405897dacbf.roa
File: d1ec7d81-82ad-3029-abd2-5405897dacbf.roa (raw, json)
Hash identifier: TQpV4MYk/2M7xQJTa9xA6AuxgRemJVtsgErlr6YSB60=
Subject key identifier: 44:E3:5D:7D:54:CE:CC:B7:68:EC:65:29:8B:AC:7B:84:52:53:A0:81
Certificate issuer: /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Certificate serial: 010D0C9F432858484AAADFE475DC036760E29880
Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/d1ec7d81-82ad-3029-abd2-5405897dacbf.roa
Signing time: Sun 22 Dec 2024 14:00:51 +0000
ROA not before: Sun 22 Dec 2024 14:00:51 +0000
ROA not after: Sat 22 Mar 2025 13:00:51 +0000
asID: 62651
IP address blocks: 2604:c980:800::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4a:aa:df:e4:75:dc:03:67:60:e2:98:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Validity
Not Before: Dec 22 14:00:51 2024 GMT
Not After : Mar 22 13:00:51 2025 GMT
Subject: CN=4e2f66c5-d059-4576-8899-593a55539ccd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:15:be:ce:da:6e:93:e4:26:83:01:1b:2d:64:
be:bb:c0:4b:20:dd:75:a6:b9:6f:80:ba:6f:ef:75:
47:60:63:7e:df:fb:73:bb:fa:27:33:e3:5c:42:04:
63:28:de:4e:8f:82:f9:b5:4c:00:de:57:e6:bd:ef:
5c:b6:01:79:e8:bb:15:ef:f4:21:36:73:7e:e3:38:
ca:c9:80:de:c8:39:05:8c:55:09:e9:5d:a5:12:87:
a3:c5:1b:30:9b:a6:0d:9b:ac:c9:2d:87:7f:13:86:
05:a7:13:63:3f:7c:e1:48:31:b7:ee:4e:4d:f2:a0:
35:53:cf:29:a7:02:e0:fa:f2:cc:2e:6f:c9:88:09:
e6:9b:1e:6b:59:9c:dd:b7:1f:2e:66:29:ca:9e:98:
d8:71:73:69:cd:13:6c:95:9d:d7:94:74:32:55:df:
b6:4a:98:7d:93:e3:8b:31:aa:0e:70:26:93:20:d5:
e3:ec:d1:1f:63:e4:09:12:65:79:df:df:2b:c9:5e:
79:c5:08:2a:a4:06:0c:31:63:b0:69:c8:b1:a6:9a:
5f:c3:75:fc:ef:32:59:db:e3:4d:e5:26:42:b6:cf:
ae:70:52:d6:2f:e5:ea:f2:0c:ca:46:e4:fc:fc:aa:
03:14:c4:9e:98:7e:ba:79:de:9f:7f:46:af:34:7f:
15:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:E3:5D:7D:54:CE:CC:B7:68:EC:65:29:8B:AC:7B:84:52:53:A0:81
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/d1ec7d81-82ad-3029-abd2-5405897dacbf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl
X509v3 Authority Key Identifier:
keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:c980:800::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1a:2c:c1:78:f6:d0:d1:3b:80:ad:4a:80:22:cd:a7:0c:d0:e3:
58:60:d5:19:c8:63:74:8f:61:40:28:4c:24:89:25:17:a2:65:
ef:10:ad:14:2d:3c:b3:de:fb:d0:7a:a5:69:c3:34:ab:dc:84:
96:f4:e7:1a:77:ba:c5:c8:72:5b:b0:e6:c9:51:56:bc:8c:cd:
5e:5a:7b:5b:1e:0b:fa:09:bc:f7:7c:d6:e3:19:b2:5b:13:62:
28:d9:a2:a5:e4:7a:09:ca:e3:4a:43:d4:5a:b0:30:f3:4a:ac:
25:81:69:be:97:99:49:a0:b2:c0:8f:35:13:fd:4c:9e:59:44:
81:50:29:34:07:a7:df:61:f9:f4:6c:8e:55:b1:b5:ed:a5:bc:
57:c9:82:7f:1e:5c:85:05:fb:70:61:ef:b8:3e:f2:6d:aa:2d:
52:a8:2a:dc:d7:c5:2f:7a:79:5b:d8:cb:55:f1:ac:37:d5:26:
1b:d6:86:8d:17:66:87:f1:59:a0:31:30:62:e8:de:8b:7b:39:
d5:f4:f9:8c:91:e0:51:66:54:dd:11:ed:c8:30:03:17:7c:e0:
a1:4f:f8:34:a1:2a:5c:3c:8f:19:83:e6:3a:40:f9:ab:dd:bf:
5f:41:2f:3f:c3:96:b2:88:70:ac:8c:e4:1d:1f:7b:41:89:10:
b9:d7:62:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 15:34:41 2025 by rpki-client