Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/53d7ea68-351e-38c3-937e-8f2e48e70aa3.roa
File: 53d7ea68-351e-38c3-937e-8f2e48e70aa3.roa (raw, json)
Hash identifier: tJrMF96tHUCflwkuoOZfObvbWzNYuQGFHAbkrA0e2nI=
Subject key identifier: DC:C2:84:F6:E5:EA:B3:E2:7E:49:EF:46:E5:C5:4D:59:60:B3:24:3D
Certificate issuer: /CN=d44d6f8c-85e9-4a47-97c9-dbc11c12210c
Certificate serial: 010D0C9F43285848222FE71074D47061D34AA800
Authority key identifier: D2:B9:24:B1:BD:21:D1:D9:FF:F2:C7:5E:A3:7A:8C:48:9D:90:B9:16
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/53d7ea68-351e-38c3-937e-8f2e48e70aa3.roa
Signing time: Sun 08 Dec 2024 02:00:39 +0000
ROA not before: Sun 08 Dec 2024 02:00:39 +0000
ROA not after: Sat 08 Mar 2025 02:00:39 +0000
asID: 32181
IP address blocks: 2001:1850::/32 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:22:2f:e7:10:74:d4:70:61:d3:4a:a8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d44d6f8c-85e9-4a47-97c9-dbc11c12210c
Validity
Not Before: Dec 8 02:00:39 2024 GMT
Not After : Mar 8 02:00:39 2025 GMT
Subject: CN=cf08f831-7130-4781-88b0-f93a7bf2f0bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:4a:1f:0c:cd:10:8d:90:b0:dd:b7:76:79:05:
b5:b3:8d:03:3d:49:ef:59:78:98:a7:6f:09:cf:dc:
43:28:4d:08:1c:17:1b:80:68:89:95:ee:23:d6:23:
6f:ba:e3:f9:ae:bd:41:a6:cd:45:e5:c6:06:b4:0a:
59:3f:f0:1b:4e:4c:34:16:37:b1:08:b8:3a:cb:9f:
aa:b0:9a:7f:3b:1b:6d:66:16:32:3d:df:e6:c6:4d:
0b:86:21:35:2c:dd:a2:54:d2:28:be:02:64:72:f4:
34:4d:6b:ec:6f:7c:03:dc:39:a1:11:9f:15:ab:01:
64:46:0c:b8:24:73:19:da:07:47:8c:21:72:70:34:
89:0b:d9:14:fa:7c:a1:b0:f4:c6:6a:3b:fd:8c:50:
2d:3a:b5:61:fd:6f:b6:8b:d3:9e:ba:01:0a:ac:6d:
3b:47:15:e5:26:68:73:3b:c9:61:5a:53:02:a7:e8:
85:8e:2d:ac:5f:95:a0:e2:2e:a7:3a:fe:7e:77:eb:
6b:48:03:a4:7f:cf:06:f1:df:3c:50:ef:a8:47:a7:
23:0b:b0:31:cb:56:2a:42:3b:17:13:40:db:3f:5b:
6b:6c:36:9a:fa:c4:23:f0:96:be:82:a9:03:29:4c:
1f:da:87:08:61:b5:b4:c4:5d:a4:b6:38:f5:47:60:
9e:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:C2:84:F6:E5:EA:B3:E2:7E:49:EF:46:E5:C5:4D:59:60:B3:24:3D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/53d7ea68-351e-38c3-937e-8f2e48e70aa3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.crl
X509v3 Authority Key Identifier:
keyid:D2:B9:24:B1:BD:21:D1:D9:FF:F2:C7:5E:A3:7A:8C:48:9D:90:B9:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:1850::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a8:5d:74:b0:6a:93:75:1b:9c:9f:97:e3:8f:7a:e2:97:ac:03:
81:e9:b0:7d:fe:5b:6c:2c:31:b6:51:08:f5:e7:f1:57:61:fd:
49:29:76:14:fa:0f:02:e6:89:18:d4:b0:27:73:54:c7:31:a9:
a2:1e:ae:b6:7f:43:99:fe:0f:2a:fa:71:12:a5:01:90:21:11:
50:ca:ee:a9:8a:88:3f:df:27:e8:14:4b:77:a0:b3:35:47:46:
2e:23:49:44:48:44:ee:ce:09:ac:60:20:bb:7c:7d:29:61:3a:
1a:8d:2e:ec:0f:d3:3c:ca:ca:9b:11:81:d9:84:f7:21:7f:ad:
30:5d:3c:af:5b:f9:92:2e:b5:0e:da:68:93:be:77:cf:fb:bb:
80:f7:17:4b:0c:05:9f:7c:1a:90:0a:47:d5:7b:65:8c:17:c1:
eb:51:c4:ef:2e:86:4b:d3:89:8b:c1:50:ee:39:ed:17:33:b2:
40:79:72:0e:52:c5:32:a9:26:ac:b0:31:f8:17:d8:70:4f:15:
d2:5d:93:25:9d:3b:71:49:c3:33:a5:a7:92:30:83:21:25:af:
67:fb:03:8a:5b:b6:7e:d0:72:39:86:c8:78:8e:d9:03:ca:92:
25:da:24:4b:27:d7:1a:ec:e4:3c:a8:00:ec:de:2a:f2:82:b1:
69:19:20:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 21:44:52 2025 by rpki-client