Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/7ed0b9d0-0c7f-32e1-8116-6f8776bec31e.roa
File: 7ed0b9d0-0c7f-32e1-8116-6f8776bec31e.roa (raw, json)
Hash identifier: TWS45Ab1m03QKuZIDrlI7g5Vy1ekv4PmXpiQk6ORt/o=
Subject key identifier: 27:77:F1:A7:0F:53:1B:A6:6E:28:5C:61:69:93:90:AA:1D:D2:18:06
Certificate issuer: /CN=d00749ed-70ef-447c-b17c-da6be8d7f312
Certificate serial: 010D0C9F4328584851A570BC7F85D45777117D00
Authority key identifier: F5:20:15:87:33:58:C5:12:78:64:66:F3:B0:E3:5D:8A:F4:78:79:74
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/7ed0b9d0-0c7f-32e1-8116-6f8776bec31e.roa
Signing time: Wed 25 Dec 2024 02:00:38 +0000
ROA not before: Wed 25 Dec 2024 02:00:38 +0000
ROA not after: Tue 25 Mar 2025 01:00:38 +0000
asID: 16686
IP address blocks: 2620:49::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:51:a5:70:bc:7f:85:d4:57:77:11:7d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d00749ed-70ef-447c-b17c-da6be8d7f312
Validity
Not Before: Dec 25 02:00:38 2024 GMT
Not After : Mar 25 01:00:38 2025 GMT
Subject: CN=f33f13d3-3fbf-4d94-ba89-3711bc240458
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:00:d1:b4:d4:e8:b3:5a:c1:7b:f7:d9:ee:fc:
44:fe:da:d2:6f:a9:35:49:6e:8e:2d:86:61:85:2a:
a2:e8:23:2b:b0:30:b2:a5:dd:86:7c:a6:f6:0f:ee:
c8:44:6b:b1:7e:d8:7e:7a:a0:e7:22:9e:f8:c9:5a:
9b:30:0d:7b:54:de:92:52:4b:e8:26:63:19:25:fc:
98:4e:40:3c:ce:60:23:c7:32:77:1a:47:53:36:4d:
1c:2c:4f:a0:8f:83:4f:04:62:3c:a7:1f:5c:f7:b9:
66:95:33:74:ad:48:0f:a7:cf:f4:b4:e0:4d:6c:16:
15:3c:4c:0a:20:a3:35:c2:c2:ec:d7:a8:71:bd:e2:
be:7a:c7:18:4e:83:1a:6b:ed:5f:06:36:e0:d3:9d:
f4:20:98:76:8d:6f:03:eb:f3:89:98:1a:24:8d:c7:
a1:54:fd:07:45:5d:8c:05:03:d7:88:63:41:56:81:
f2:7b:9c:08:ca:94:2f:55:8a:07:94:fa:01:4d:56:
43:ec:10:ad:25:ca:4e:e2:44:24:62:2a:b6:2d:03:
45:f5:17:5a:21:a0:87:b5:10:fb:b1:94:50:c9:bc:
75:7a:55:70:d0:48:ad:dc:83:40:44:ed:b0:cd:15:
08:b0:bf:55:ab:39:32:2d:8e:d2:09:02:29:80:b1:
95:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:77:F1:A7:0F:53:1B:A6:6E:28:5C:61:69:93:90:AA:1D:D2:18:06
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/7ed0b9d0-0c7f-32e1-8116-6f8776bec31e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/d00749ed-70ef-447c-b17c-da6be8d7f312.crl
X509v3 Authority Key Identifier:
keyid:F5:20:15:87:33:58:C5:12:78:64:66:F3:B0:E3:5D:8A:F4:78:79:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:49::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1a:6c:4c:fd:24:ae:3b:1b:2f:f7:12:bb:bd:46:4a:45:64:d2:
f6:90:51:ce:57:db:b3:ac:63:49:3e:fe:1d:cb:03:ba:8a:3c:
8b:0c:e3:b6:c2:55:14:2a:06:3c:f7:1e:f0:f2:83:c5:fd:8a:
a4:4f:d9:2c:4d:bf:17:22:98:43:59:ef:e0:43:35:73:d3:63:
6e:20:de:6b:58:32:19:e4:93:94:62:40:7f:78:2f:6f:6f:13:
6a:a3:69:8c:57:cc:12:50:71:97:03:64:4b:a3:f5:04:cb:22:
e5:8d:f5:59:07:c1:b0:4d:bd:53:7e:2f:e6:c0:86:f4:d3:0d:
5e:e0:d3:66:64:91:57:d4:10:e7:14:1f:9b:30:7c:6d:5e:e5:
f7:4f:52:68:25:bd:b3:76:d3:99:76:5f:cb:41:97:31:cd:44:
77:04:e8:42:6b:f9:85:8a:e5:76:e3:fa:02:e5:3d:c2:e5:68:
4d:e3:db:f2:26:2d:4a:29:b2:98:3e:cc:56:7a:d7:a8:b1:7a:
f1:d9:bb:fb:23:6d:77:da:67:95:c4:f4:3c:b9:a0:21:43:3f:
ea:54:bf:45:32:ca:cb:28:6d:45:88:56:5c:5e:97:80:3a:9c:
ff:19:99:a8:af:b5:b3:e1:69:af:9b:13:92:30:7a:91:8a:b4:
71:43:10:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 11:54:20 2025 by rpki-client