Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e72d57b5-e9f1-34fb-8ac7-f4d0629d7ba2.roa
File: e72d57b5-e9f1-34fb-8ac7-f4d0629d7ba2.roa (raw, json)
Hash identifier: kTD0pHvGAMEyFkYWsbLwIDtE/YOk7UYt4Y3/8Kdr7y4=
Subject key identifier: C1:E8:D1:FA:E8:2E:7A:C7:89:0E:E3:59:F3:19:92:D2:30:DF:06:02
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285847F1550E51B468383085C4F1A0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e72d57b5-e9f1-34fb-8ac7-f4d0629d7ba2.roa
Signing time: Wed 20 Nov 2024 14:00:52 +0000
ROA not before: Wed 20 Nov 2024 14:00:52 +0000
ROA not after: Tue 18 Feb 2025 14:00:52 +0000
asID: 7029
IP address blocks: 2604:cb00:2b::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:f1:55:0e:51:b4:68:38:30:85:c4:f1:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Nov 20 14:00:52 2024 GMT
Not After : Feb 18 14:00:52 2025 GMT
Subject: CN=a0f8ece3-359a-4df6-ab68-7946b6c0f73c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:f3:d3:83:68:6c:0b:9c:e0:7f:a5:95:1f:58:
85:ea:87:36:8a:d2:d6:2c:c7:74:74:c1:79:8f:c1:
8d:e9:22:34:b8:f6:d4:cf:d5:a2:ad:3a:32:b8:1f:
25:6d:27:16:7c:37:78:52:c3:6b:47:88:2c:86:6a:
97:dc:1b:d4:67:bc:df:53:f0:7e:0a:5e:7d:df:3b:
df:18:d4:69:14:b8:6e:42:6e:31:f7:24:16:03:9d:
9a:5b:61:2f:3b:a5:08:a7:fe:61:b1:e6:3f:7c:8c:
72:d8:97:0b:bb:67:54:77:32:07:6b:25:bd:8b:a9:
93:51:45:1d:2a:81:49:f5:84:45:1e:91:a3:37:f2:
33:87:2e:2d:53:4a:59:0b:27:0e:12:85:ea:4c:c0:
2f:98:de:cf:c5:8c:b2:c7:d9:5f:80:02:80:62:5e:
30:3b:39:9b:72:27:7a:3a:e6:2a:04:33:2c:b7:96:
fa:cf:02:e0:c1:01:16:1e:be:36:1e:34:03:af:f4:
44:82:59:d5:47:41:a8:5f:d5:57:b6:cc:ec:3d:17:
bf:e6:e9:b6:52:56:cd:76:62:49:a7:19:0c:48:b6:
55:6d:44:da:15:24:8e:81:97:2a:4d:21:72:18:bb:
8f:d1:f8:a4:10:04:8a:f3:0a:cf:37:94:d0:5a:18:
f4:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:E8:D1:FA:E8:2E:7A:C7:89:0E:E3:59:F3:19:92:D2:30:DF:06:02
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e72d57b5-e9f1-34fb-8ac7-f4d0629d7ba2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:cb00:2b::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7c:98:52:56:59:19:0c:c6:96:fa:b4:03:cd:02:b7:ec:1e:d2:
79:d3:ea:62:19:2a:3b:b3:73:c9:75:9c:b1:76:31:43:06:76:
ff:ba:42:c9:75:09:8e:17:20:a9:cd:c3:98:5d:b8:6a:31:55:
fb:5f:74:c7:16:a2:f8:71:92:17:d7:a8:9b:7b:4e:d9:ea:13:
b6:48:ec:86:f3:98:50:cd:b3:dc:e2:36:cb:99:6e:bf:ac:34:
20:a1:d7:70:70:99:da:d5:3f:bc:85:0b:4a:33:04:e8:74:21:
76:69:13:5e:74:fe:8f:42:d6:98:d3:39:d2:7d:e0:7a:cd:fa:
8b:78:70:ca:d2:02:4f:8b:e4:05:03:7e:b9:4a:de:e3:cf:d6:
46:54:26:78:66:ca:27:4b:fb:6a:cb:ab:c5:59:8e:9e:b6:af:
9e:ca:42:16:03:f9:73:03:18:15:d3:2a:05:31:0d:51:e8:69:
44:a8:77:86:59:79:69:06:9a:da:73:e2:ec:6c:08:73:9a:df:
da:c8:31:85:23:9b:13:de:81:1a:77:06:a1:6b:9b:63:67:66:
cc:4c:b3:a7:35:7d:b1:7a:ea:01:0e:80:ce:0d:68:87:6e:85:
30:43:96:c6:83:c5:45:bd:62:ca:24:88:d2:45:18:c8:1a:34:
53:79:de:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 12:21:37 2025 by rpki-client