Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f/25dfc76c-b579-36f8-95b3-a1b22bcff809.roa
File: 25dfc76c-b579-36f8-95b3-a1b22bcff809.roa (raw, json)
Hash identifier: Pp2c79VGIwhK64kjplgsT3H7QusndY9OEnoHvdOmMtg=
Subject key identifier: BF:02:50:70:2A:B0:A9:86:52:1F:3A:C8:12:3D:2B:44:10:38:FB:7D
Certificate issuer: /CN=2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f
Certificate serial: 010D0C9F4328584858A059F868C439F897901280
Authority key identifier: E7:C3:4D:92:13:BD:90:DE:BE:98:53:B6:75:61:97:86:5B:27:46:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f/25dfc76c-b579-36f8-95b3-a1b22bcff809.roa
Signing time: Fri 27 Dec 2024 14:00:52 +0000
ROA not before: Fri 27 Dec 2024 14:00:52 +0000
ROA not after: Thu 27 Mar 2025 13:00:52 +0000
asID: 0
IP address blocks: 2001:504:100::/48 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:58:a0:59:f8:68:c4:39:f8:97:90:12:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f
Validity
Not Before: Dec 27 14:00:52 2024 GMT
Not After : Mar 27 13:00:52 2025 GMT
Subject: CN=4b55b003-51f5-460c-a8f4-a72fc5ba8369
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:3d:8a:60:8b:6e:79:cc:bc:65:4f:79:c7:50:
3e:a2:a8:29:04:3c:13:cd:38:5d:66:45:17:a0:8a:
2a:a0:2c:85:de:b9:94:be:5c:14:8c:2a:97:ea:e9:
64:6b:53:2e:fa:63:91:8b:ea:da:4f:de:62:32:b6:
a2:b0:0d:ee:ed:c6:bd:96:3e:f0:f2:f9:d3:d3:70:
e8:7b:77:81:69:10:52:68:df:4b:55:8f:31:7f:56:
6d:4a:3d:38:01:13:ef:b0:54:d4:40:8e:36:8a:c9:
ab:a5:2d:2d:b2:b4:ca:a6:7b:7e:42:82:cc:e8:1d:
1d:b6:5a:9d:1c:02:df:d4:04:76:9c:0e:a8:f2:e6:
28:9d:da:28:64:43:e1:15:1d:8f:23:39:5b:61:59:
8f:60:ce:2b:4d:e4:56:cb:ad:e7:6b:61:b2:d0:66:
6d:3b:e5:60:91:c4:57:51:46:57:3d:9f:b9:fe:92:
49:f8:36:5a:08:54:0f:94:ef:a7:4d:b0:91:7e:89:
8b:c8:59:0e:9c:5c:ad:ee:13:a3:51:f3:d9:90:97:
bf:78:5a:df:68:b4:72:ec:82:c8:92:76:31:3b:66:
58:0d:e4:bb:ea:7d:7a:ce:e5:b0:fd:fa:58:c0:7e:
c1:ea:bd:39:1e:fb:24:64:d7:1c:e7:70:cf:b1:db:
00:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:02:50:70:2A:B0:A9:86:52:1F:3A:C8:12:3D:2B:44:10:38:FB:7D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f/25dfc76c-b579-36f8-95b3-a1b22bcff809.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f.crl
X509v3 Authority Key Identifier:
keyid:E7:C3:4D:92:13:BD:90:DE:BE:98:53:B6:75:61:97:86:5B:27:46:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:504:100::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
54:a5:79:44:93:fd:58:11:cb:c7:0f:41:9a:5a:cf:b6:d2:b2:
f0:86:89:11:74:8d:a8:04:96:1b:b7:bd:89:75:3c:c5:e3:d2:
ea:2d:af:8d:00:9c:f4:62:d8:7f:9f:f6:41:f1:8b:21:0c:15:
52:c8:c6:e2:25:7f:55:4e:4d:02:7a:9a:35:0d:77:24:62:47:
03:eb:c8:84:d7:b6:7f:f0:24:7d:c7:7e:68:35:12:4f:71:e7:
09:f2:d8:1b:73:14:45:1e:5c:56:43:8a:48:b1:76:2e:d9:91:
07:3f:4c:ef:00:f8:93:db:c7:66:e4:ee:b5:56:f0:6f:fa:52:
66:48:7a:59:48:81:0c:c3:9b:52:ce:86:0f:36:8c:4f:86:6d:
29:23:92:24:87:8c:30:fb:e2:47:20:2c:c6:86:6a:c0:bb:f1:
52:44:8a:43:c5:d7:6a:ca:0c:f8:5f:40:cd:09:42:6f:5b:1d:
30:de:2d:31:f1:2c:74:9e:4b:6a:cd:06:52:92:f0:ab:fa:8b:
ee:6f:75:d6:a2:f9:d7:04:39:25:fb:04:95:6a:0c:04:6e:92:
de:1d:8b:19:ed:2c:e4:8f:cb:0b:c5:1e:88:b9:8d:69:4e:ab:
a0:21:be:90:3a:52:dd:84:d4:f9:73:c3:dc:58:5a:3a:9a:59:
01:5e:b7:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:30:03 2025 by rpki-client