Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/df87bb72-dc52-3639-a0af-dcba3509be30.roa
File: df87bb72-dc52-3639-a0af-dcba3509be30.roa (raw, json)
Hash identifier: MH2Q75QOmXwPdnP63JuGcv93q7wmp7M0e6tvKWP4VP0=
Subject key identifier: 72:A5:31:BC:FE:CA:1D:0E:71:C4:AB:74:1B:D1:E9:67:5F:2A:E4:C7
Certificate issuer: /CN=d00749ed-70ef-447c-b17c-da6be8d7f312
Certificate serial: 010D0C9F4328584851A5725650B9C11EC2FA3420
Authority key identifier: F5:20:15:87:33:58:C5:12:78:64:66:F3:B0:E3:5D:8A:F4:78:79:74
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/df87bb72-dc52-3639-a0af-dcba3509be30.roa
Signing time: Wed 25 Dec 2024 02:00:38 +0000
ROA not before: Wed 25 Dec 2024 02:00:38 +0000
ROA not after: Tue 25 Mar 2025 01:00:38 +0000
asID: 36236
IP address blocks: 2620:49:4::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:51:a5:72:56:50:b9:c1:1e:c2:fa:34:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d00749ed-70ef-447c-b17c-da6be8d7f312
Validity
Not Before: Dec 25 02:00:38 2024 GMT
Not After : Mar 25 01:00:38 2025 GMT
Subject: CN=42fd4c30-8035-4546-95c8-3ff01d13ba18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:d1:4a:ab:9d:25:f2:51:9c:9a:43:76:bf:64:
d5:bb:9b:15:36:b1:ef:ad:77:16:84:c7:7d:f4:45:
fb:19:7b:a4:05:d8:8a:3f:bc:81:d5:42:5a:80:09:
87:f7:bc:40:25:ef:db:a4:a0:3e:fb:eb:a0:b0:b4:
05:70:e4:93:3d:53:60:fb:99:12:c4:4d:46:28:ae:
61:dc:0b:d5:3d:83:aa:bd:67:d1:56:ee:09:02:4d:
92:e8:20:68:88:9f:05:1a:08:57:71:b1:c6:5e:38:
b9:1f:d2:0b:03:8c:ab:fe:e0:22:3b:25:56:a0:0a:
64:94:d3:a1:d4:0a:d8:1f:cc:53:6a:dd:d5:12:59:
42:c3:50:2a:d5:00:06:70:81:e1:b5:bf:26:75:ec:
b8:5a:16:e9:67:0c:d0:2d:b7:16:d7:a4:5b:6f:26:
31:fc:21:87:90:af:22:a6:af:64:2d:b5:c6:9c:1e:
d1:f9:33:ba:89:69:92:d5:57:1c:94:4c:05:fd:68:
63:8c:6a:bf:1f:9d:18:b7:f9:bd:2a:a7:e2:a9:7c:
7b:d0:0c:b2:ed:2c:26:14:d5:4a:c4:b4:28:41:0d:
3f:64:52:7b:35:63:82:4a:8e:57:93:7e:2c:0c:1c:
c5:86:47:e8:4d:b6:fa:eb:9a:02:61:12:aa:d4:a9:
d2:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:A5:31:BC:FE:CA:1D:0E:71:C4:AB:74:1B:D1:E9:67:5F:2A:E4:C7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/df87bb72-dc52-3639-a0af-dcba3509be30.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/d00749ed-70ef-447c-b17c-da6be8d7f312.crl
X509v3 Authority Key Identifier:
keyid:F5:20:15:87:33:58:C5:12:78:64:66:F3:B0:E3:5D:8A:F4:78:79:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:49:4::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0f:6a:7f:57:47:d2:06:bb:e2:2f:1a:c4:09:8e:1b:0c:aa:0f:
ad:b0:8e:12:4e:09:c3:14:60:59:ea:bd:ac:4c:59:0e:ed:a3:
d2:8f:a2:95:ef:e9:69:e3:91:84:e0:da:79:20:6b:fd:c2:e0:
9e:ac:09:a1:88:ef:49:4e:e2:dd:f2:37:6f:48:58:0f:23:66:
fb:de:5b:6d:2d:77:2c:4e:3a:a0:55:2a:aa:cb:31:24:9a:eb:
80:bd:30:9e:7d:e6:f4:3e:21:cd:ab:65:6c:95:0d:e1:fa:d0:
6a:83:44:f9:1b:57:c6:13:1c:b6:df:8b:a7:7a:eb:40:20:f8:
10:6f:2d:8d:b7:61:b2:f5:d4:7d:75:61:b8:9b:5f:86:ca:02:
ad:10:dd:84:2a:6f:b4:a1:77:34:fd:9a:35:aa:53:f9:8f:f5:
bd:cd:ee:ec:c7:3c:cb:59:4d:15:43:79:65:dd:78:8f:a8:b6:
d0:09:05:37:81:33:e0:43:bd:1c:78:fc:fc:fa:1a:2b:6f:71:
3c:84:0a:a2:08:4c:76:26:90:be:89:a6:95:dc:4b:48:d6:8b:
17:41:58:7c:1b:4d:c4:eb:57:41:e9:d9:45:fe:19:39:aa:8e:
22:6f:73:b5:49:96:ce:ce:94:88:f7:79:4d:4e:ad:5b:ed:3a:
4a:2e:91:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:33:03 2025 by rpki-client