Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/52e61a17-7b88-4574-9ed5-dc56420f7ed2/fc1bdf31-d6ba-35ad-9615-093ad4b3f160.roa
File: fc1bdf31-d6ba-35ad-9615-093ad4b3f160.roa (raw, json)
Hash identifier: xhNR6y1G9HUV8YVqPMUahtH7vsx6Bz8fgQULPmSVQf4=
Subject key identifier: EE:D2:5E:E2:EC:04:D3:3C:A6:7A:64:C0:A3:13:2B:A7:B0:BD:B5:DF
Certificate issuer: /CN=52e61a17-7b88-4574-9ed5-dc56420f7ed2
Certificate serial: 010D0C9F43285848887541F93F7E278AC6A11380
Authority key identifier: 58:B1:F7:35:D6:61:15:EE:55:37:68:BD:BF:61:8D:AF:9F:36:81:51
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/52e61a17-7b88-4574-9ed5-dc56420f7ed2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/52e61a17-7b88-4574-9ed5-dc56420f7ed2/fc1bdf31-d6ba-35ad-9615-093ad4b3f160.roa
Signing time: Mon 13 Jan 2025 17:13:05 +0000
ROA not before: Mon 13 Jan 2025 17:13:05 +0000
ROA not after: Sun 13 Apr 2025 16:13:05 +0000
asID: 3477
IP address blocks: 2620:12e:b000::/46 maxlen: 46
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:88:75:41:f9:3f:7e:27:8a:c6:a1:13:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52e61a17-7b88-4574-9ed5-dc56420f7ed2
Validity
Not Before: Jan 13 17:13:05 2025 GMT
Not After : Apr 13 16:13:05 2025 GMT
Subject: CN=c6aa90dc-7597-485d-8494-7f077797f3e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:8f:22:7c:1c:ef:52:f7:66:65:32:16:1c:0b:
4a:db:90:ce:13:43:62:2a:1f:0d:e5:7c:fd:44:56:
51:93:25:8b:ec:74:85:4d:19:89:ab:fb:c7:a2:e4:
b9:73:cf:8e:85:d3:96:f8:bf:f3:4e:da:53:ec:99:
4a:66:e7:60:73:b6:54:a7:95:83:dc:a7:f2:36:12:
6a:f0:1c:e6:41:47:ef:14:00:06:6e:6c:c4:d0:fc:
86:ef:e7:3d:b9:db:b0:c9:44:bb:9c:2a:0d:ff:c8:
04:9d:1c:f5:ec:6a:ba:57:d8:7c:7f:c7:f4:4d:af:
99:ef:12:1e:7d:cb:12:b0:53:66:de:da:a5:0e:ce:
23:5d:f7:de:ea:ec:d9:99:2e:05:11:e6:37:fe:6e:
33:70:ed:30:00:22:e8:27:8b:c8:5c:ad:07:df:da:
29:5b:d6:4e:f0:f5:df:e2:8c:79:5e:29:d7:60:67:
cf:f4:80:03:20:68:b8:7e:b0:12:92:06:52:bd:65:
29:4b:53:f5:f5:ca:86:08:f5:8a:48:f7:39:85:64:
3b:be:d5:a6:5d:76:a1:d1:6c:74:fb:4c:de:13:7d:
64:63:d5:ca:57:9a:d7:e5:47:2f:44:00:0d:29:2b:
4e:f8:ac:3a:27:1e:d3:c5:de:a2:69:75:20:a8:d5:
2d:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:D2:5E:E2:EC:04:D3:3C:A6:7A:64:C0:A3:13:2B:A7:B0:BD:B5:DF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/52e61a17-7b88-4574-9ed5-dc56420f7ed2/fc1bdf31-d6ba-35ad-9615-093ad4b3f160.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/52e61a17-7b88-4574-9ed5-dc56420f7ed2/52e61a17-7b88-4574-9ed5-dc56420f7ed2.crl
X509v3 Authority Key Identifier:
keyid:58:B1:F7:35:D6:61:15:EE:55:37:68:BD:BF:61:8D:AF:9F:36:81:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/52e61a17-7b88-4574-9ed5-dc56420f7ed2.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:12e:b000::/46
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
20:79:b7:b6:2e:0a:2a:70:3d:26:69:4a:e0:c9:8b:38:af:87:
72:c8:97:9a:c4:92:b5:5b:14:b8:e8:f2:81:6d:57:19:70:ff:
f5:73:f4:b5:0d:a4:ca:58:9f:96:49:15:4e:1c:5c:d9:e4:80:
08:24:c9:28:93:e6:ad:ae:10:3d:b2:13:3d:26:23:63:10:8d:
6f:30:ab:67:50:93:b4:22:15:c3:e0:66:54:aa:3f:25:b9:7e:
e0:5f:25:d6:ed:cc:e8:09:b0:e3:34:30:c2:c0:0c:09:ce:99:
83:80:59:0f:4e:00:00:ad:95:be:cc:3a:ee:f4:35:36:87:d2:
65:0c:88:51:4f:de:9d:1a:a1:a9:10:a2:ff:80:68:78:6b:eb:
4b:01:59:86:ce:08:73:42:7d:fb:6c:4c:2c:aa:ae:e9:40:4b:
3d:7b:31:93:73:8b:f6:1a:09:da:59:2c:21:11:f2:30:8f:f2:
a4:2f:63:33:1a:a7:0b:b5:46:d9:c2:fb:b2:ad:48:40:e1:d0:
82:8d:4f:75:39:73:f6:ba:11:51:49:f3:c7:f1:f1:2a:8b:cc:
81:89:ac:56:6c:82:be:cc:aa:31:ba:1e:2e:06:fc:26:78:02:
f1:71:25:c5:5e:43:55:99:fc:28:7a:7c:b9:28:82:78:25:5f:
ae:00:e1:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:43:29 2025 by rpki-client