Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/f420756d-56c5-38ae-8497-eb0829a92be6.roa
File: f420756d-56c5-38ae-8497-eb0829a92be6.roa (raw, json)
Hash identifier: XuhKugTSsnoEpkSG9czdcqlf20eARsZuO+Bq0ea/q48=
Subject key identifier: 79:B0:B5:C2:E5:E7:95:D4:34:A0:9F:88:0D:84:E8:68:B1:08:84:BC
Certificate issuer: /CN=52e7b96d-0aa5-402a-b2fe-337d7c207eee
Certificate serial: 010D0C9F43285848530AEB7B814EB12734F59680
Authority key identifier: 9B:6A:6C:86:9C:34:20:C4:8F:63:A2:11:A4:03:41:1A:D2:5D:9F:31
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/f420756d-56c5-38ae-8497-eb0829a92be6.roa
Signing time: Wed 25 Dec 2024 14:00:52 +0000
ROA not before: Wed 25 Dec 2024 14:00:52 +0000
ROA not after: Tue 25 Mar 2025 13:00:52 +0000
asID: 13780
IP address blocks: 2602:fc09:aa::/48 maxlen: 48
2602:fc09:bb::/48 maxlen: 48
2602:fc09:cc::/48 maxlen: 48
2602:fc09:dd::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:53:0a:eb:7b:81:4e:b1:27:34:f5:96:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52e7b96d-0aa5-402a-b2fe-337d7c207eee
Validity
Not Before: Dec 25 14:00:52 2024 GMT
Not After : Mar 25 13:00:52 2025 GMT
Subject: CN=319a34a5-0a4e-4aaf-a827-b28879eabe94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:c8:0a:09:9e:f1:62:a5:e5:9b:ab:b5:fd:6c:
cc:95:32:ae:86:bc:25:2e:58:35:7b:48:11:39:ca:
c9:4f:f3:d1:ba:ba:a0:0f:ef:5e:82:53:9a:56:78:
1f:92:6e:6f:ab:4e:9f:16:d1:bf:c1:f4:2e:2a:80:
6d:a8:e6:33:e3:71:df:fc:65:ba:8d:c4:f8:bd:e9:
1a:6d:36:1b:56:ee:7e:0d:04:f6:48:44:a7:51:46:
1f:b6:15:a5:f5:5e:34:96:bb:6c:b7:a7:35:8d:6c:
75:4e:9d:74:0a:86:c1:df:f1:6a:62:17:e8:95:47:
c4:3d:e1:6c:31:b3:ab:8b:49:31:c2:45:0e:dc:a6:
21:43:6c:25:8e:e2:de:15:68:b6:58:5c:47:81:3b:
ba:79:fe:1f:e4:96:14:9f:b5:1b:7e:e1:1a:14:0c:
40:4e:e7:f2:f3:3c:ef:4b:5a:13:17:76:db:8d:bf:
0b:b4:90:0d:ad:f9:b4:0c:ba:be:d7:99:dd:d8:f8:
7b:e1:f9:ca:5b:00:eb:35:f0:4a:f2:1c:88:9c:b1:
20:d0:7d:b5:23:15:78:7a:54:c5:a2:5f:3a:e8:36:
3a:ad:d7:74:ed:dd:ce:8d:67:25:f4:83:68:b5:3f:
1e:03:7d:1e:30:d2:d6:13:d5:b7:5a:ab:a0:1d:0c:
49:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:B0:B5:C2:E5:E7:95:D4:34:A0:9F:88:0D:84:E8:68:B1:08:84:BC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/f420756d-56c5-38ae-8497-eb0829a92be6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/52e7b96d-0aa5-402a-b2fe-337d7c207eee.crl
X509v3 Authority Key Identifier:
keyid:9B:6A:6C:86:9C:34:20:C4:8F:63:A2:11:A4:03:41:1A:D2:5D:9F:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:fc09:aa::/48
2602:fc09:bb::/48
2602:fc09:cc::/48
2602:fc09:dd::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
74:81:3a:9f:0b:7e:fe:15:fc:5c:9f:1d:5b:d1:25:89:c5:b6:
4b:72:9b:6c:58:19:c9:1b:0e:2a:bd:c3:d8:8c:c1:0b:a2:ec:
ca:1d:2b:03:48:43:8b:c3:94:18:60:ec:b9:c2:a5:bd:7d:8f:
b7:77:20:f4:3a:bb:8b:d1:55:75:c9:e9:36:ef:5b:a7:f3:39:
d8:f8:34:1c:37:09:68:a2:be:69:d9:2a:5a:98:6f:2d:f0:03:
bb:45:a2:92:c7:eb:38:d9:c5:f3:b1:29:ca:d5:51:82:de:80:
00:17:1c:b0:9d:16:29:25:b3:aa:ac:38:d0:6b:26:97:2f:89:
8f:86:c9:2b:22:e8:2d:3b:5d:a3:bf:e9:04:f5:8f:59:d5:98:
fa:a9:e6:fd:e1:a8:4e:a0:c0:bc:8b:32:1e:e1:90:84:f4:22:
c7:af:fb:e7:40:22:49:75:d8:53:13:f3:25:9e:d1:03:9d:d1:
77:32:42:87:3b:56:87:c2:36:8a:2a:f5:19:8b:eb:79:dc:d8:
9a:27:ec:02:78:ae:64:2a:f7:0c:e6:00:09:22:48:b3:9d:0c:
5e:5d:9b:f0:90:14:20:45:0c:ae:8c:a2:0f:24:4f:ff:d0:22:
ae:0c:d0:8f:59:78:37:cb:ed:cc:af:4b:09:78:6f:56:3a:08:
19:24:8c:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 22:56:51 2025 by rpki-client