Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/0c65eb67-1e62-3a03-a201-d462f1ece7b4.roa
File: 0c65eb67-1e62-3a03-a201-d462f1ece7b4.roa (raw, json)
Hash identifier: repxWoyHVkmBiV72zeqDDmqqAwSuFd3oLCIJIrYKvqA=
Subject key identifier: B2:5D:28:05:10:8A:EB:9A:D4:0B:44:64:84:F6:3A:4C:0F:E2:5E:A9
Certificate issuer: /CN=50d23085-72e3-499d-9b7f-e552792b3f1b
Certificate serial: 010D0C9F4328584827C54953485382207ECD4A00
Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/0c65eb67-1e62-3a03-a201-d462f1ece7b4.roa
Signing time: Tue 10 Dec 2024 02:00:40 +0000
ROA not before: Tue 10 Dec 2024 02:00:40 +0000
ROA not after: Mon 10 Mar 2025 01:00:40 +0000
asID: 61317
IP address blocks: 2604:4500:1a::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:27:c5:49:53:48:53:82:20:7e:cd:4a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b
Validity
Not Before: Dec 10 02:00:40 2024 GMT
Not After : Mar 10 01:00:40 2025 GMT
Subject: CN=672a85ca-5d65-434e-9a1e-677b17fed62c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c1:6d:b1:2c:a6:f3:1f:66:91:bb:03:52:33:
41:aa:79:87:c1:d9:03:03:c2:f7:c3:92:93:18:6c:
bd:ab:ba:69:18:e9:f9:dd:c4:b1:4f:c8:0f:76:c7:
9c:a0:e0:0b:7b:31:9b:0e:19:d1:20:1d:71:64:55:
cd:6d:e9:ca:1a:d0:95:31:b2:ea:e4:10:d3:04:d9:
07:f7:0b:bf:0f:2a:cf:5d:91:a3:e9:df:b2:97:be:
5c:ad:11:d5:26:83:e3:f6:09:4e:0e:f7:7b:05:7a:
ca:52:a4:97:d3:40:a6:b1:16:e5:02:3c:65:05:38:
99:4f:2d:0a:24:8c:00:37:10:88:f4:2a:2b:2d:d8:
b3:00:85:51:8b:e1:b6:01:f1:cd:4a:b4:3b:bd:3b:
e8:19:2f:0c:e0:69:0e:06:dd:09:c6:45:f4:99:25:
bc:c9:75:ce:5c:dd:3a:84:6a:a6:64:31:c3:44:f3:
f5:52:0b:03:a8:37:45:e2:bf:6e:8a:61:84:d8:10:
e2:b9:01:57:09:85:6d:46:0e:13:e3:bc:97:45:9f:
0a:21:44:f6:66:80:4f:11:e2:cd:58:48:f8:16:09:
cd:85:13:82:05:96:23:e9:24:c0:ed:82:94:74:b7:
34:04:38:a8:66:b3:bc:d6:58:33:43:a0:01:e1:2e:
1f:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:5D:28:05:10:8A:EB:9A:D4:0B:44:64:84:F6:3A:4C:0F:E2:5E:A9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/0c65eb67-1e62-3a03-a201-d462f1ece7b4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl
X509v3 Authority Key Identifier:
keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:4500:1a::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
31:e4:37:f4:6d:6a:6a:17:08:1b:6f:79:62:85:79:65:0e:7b:
da:1c:bf:b7:c7:dd:89:94:7a:9f:ce:1b:a8:e8:8e:59:83:c4:
fe:20:95:95:07:25:ba:ff:5f:f2:75:e7:bc:a5:2a:45:35:22:
0a:b7:ec:5e:88:0b:51:a3:53:16:3a:db:7a:5b:a0:a1:2a:d5:
a3:e9:ab:7f:26:4f:c0:6b:bb:a9:5f:10:2b:59:f0:d6:53:98:
2c:06:18:c3:7f:7c:49:7a:99:a0:aa:72:d7:27:f9:be:b9:bb:
5c:fc:2e:df:71:01:e2:bf:e7:66:64:06:f5:1f:9f:0f:47:87:
b0:91:23:70:b5:3c:54:33:88:84:b1:47:9d:91:09:d8:60:d3:
f8:21:00:3e:f8:f5:9a:28:80:fc:76:6e:64:d3:f9:ac:40:4e:
70:be:54:32:cf:e7:b6:8e:20:4e:cd:0a:dd:a7:85:bc:39:a2:
71:0b:4d:42:4c:26:d3:f5:1b:1b:2f:c7:5a:2c:54:90:ad:f8:
7c:53:e5:0b:20:40:b0:b2:a2:d3:f9:75:6a:f3:49:9c:79:7e:
32:0b:71:c5:d5:c5:51:1d:ff:6e:29:ad:08:5b:b5:a3:8d:ec:
68:b6:0b:2e:b7:ab:62:15:ad:2e:db:dc:9b:1e:25:99:f2:ea:
05:73:7d:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:38:14 2025 by rpki-client