Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac870f3e-b014-4387-bb59-63f4192b5665/5fe237b2-f5a5-3dfd-b09a-589bda76baca.roa
File: 5fe237b2-f5a5-3dfd-b09a-589bda76baca.roa (raw, json)
Hash identifier: uEYw5ad9xYdB3SQiwt5pXI47YaOgbGCZvQ9YGQ83P18=
Subject key identifier: 5E:49:5B:1A:56:C3:F4:A6:2C:E7:4D:CE:BB:FE:B3:0E:BD:45:38:34
Certificate issuer: /CN=ac870f3e-b014-4387-bb59-63f4192b5665
Certificate serial: 010D0C9F4328584824FA889126A2C2AB43E497C0
Authority key identifier: AF:EC:1A:43:17:16:55:FD:C0:A8:F8:4B:A8:5C:40:F8:E5:1E:89:C6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac870f3e-b014-4387-bb59-63f4192b5665.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac870f3e-b014-4387-bb59-63f4192b5665/5fe237b2-f5a5-3dfd-b09a-589bda76baca.roa
Signing time: Mon 09 Dec 2024 02:00:40 +0000
ROA not before: Mon 09 Dec 2024 02:00:40 +0000
ROA not after: Sun 09 Mar 2025 02:00:40 +0000
asID: 395400
IP address blocks: 2604:49c0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:24:fa:88:91:26:a2:c2:ab:43:e4:97:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac870f3e-b014-4387-bb59-63f4192b5665
Validity
Not Before: Dec 9 02:00:40 2024 GMT
Not After : Mar 9 02:00:40 2025 GMT
Subject: CN=ce7096f1-f634-4f24-8785-76fd173fdf17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:3a:95:6c:24:fa:97:22:95:b9:5b:8a:b1:fe:
80:59:f1:42:87:6c:d0:83:ae:0c:dd:69:e8:4c:e4:
41:24:4b:4b:80:a6:65:73:c1:22:f7:3b:d1:dd:76:
df:35:ff:bf:a6:2e:00:83:0f:01:ed:ec:f0:6e:b4:
af:a3:54:48:88:52:21:82:6d:ad:25:e9:57:5e:4d:
1e:e8:96:62:29:5b:4d:de:96:6a:ce:d8:78:19:1e:
09:13:6a:8e:e3:d4:30:35:69:93:c6:48:1c:d3:1c:
6a:f3:ca:8d:46:d7:f0:4d:11:89:10:a0:1c:67:0d:
fc:c3:f5:a0:a2:13:2b:b2:48:9f:a7:d1:dc:31:d6:
eb:7d:af:77:d8:ff:96:d3:3f:62:b5:5e:15:82:27:
0b:3c:af:54:62:16:88:35:48:27:dd:30:34:7c:f6:
97:e8:fd:27:6c:0c:d9:4e:eb:e5:5c:c9:77:5b:c7:
bf:be:7e:c4:a8:97:59:c4:b5:46:4a:44:7e:f1:61:
a9:51:95:e8:43:c7:a5:9f:76:2f:be:78:14:a7:87:
54:73:a4:bd:e3:e8:b0:9d:85:bc:15:e4:a3:51:10:
a0:7a:3f:31:f1:9e:7d:7d:ce:b7:85:68:aa:4a:86:
5f:d8:f5:49:93:a9:cc:5a:32:05:cb:5d:12:ad:09:
69:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:49:5B:1A:56:C3:F4:A6:2C:E7:4D:CE:BB:FE:B3:0E:BD:45:38:34
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac870f3e-b014-4387-bb59-63f4192b5665/5fe237b2-f5a5-3dfd-b09a-589bda76baca.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac870f3e-b014-4387-bb59-63f4192b5665/ac870f3e-b014-4387-bb59-63f4192b5665.crl
X509v3 Authority Key Identifier:
keyid:AF:EC:1A:43:17:16:55:FD:C0:A8:F8:4B:A8:5C:40:F8:E5:1E:89:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac870f3e-b014-4387-bb59-63f4192b5665.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:49c0::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5d:fd:42:52:00:b0:e3:a0:a0:16:92:5f:84:7e:3e:40:c0:7b:
a1:ca:f4:ec:95:86:16:1b:69:de:b7:02:11:8d:fc:d3:1d:c4:
a2:bb:09:14:87:a9:74:fc:44:a9:6d:43:bc:b6:8a:fc:77:2a:
4b:00:f6:5b:af:5c:f9:b5:ca:4c:4b:9e:5d:97:d5:63:21:ef:
ab:f7:37:31:35:f9:8b:18:05:b6:70:a7:7d:f1:d6:a9:13:88:
3b:7a:f8:eb:63:ce:c6:c6:d6:c4:e1:ff:13:55:9e:f7:40:8e:
7c:0b:e6:ee:e6:ae:68:a7:d0:8a:29:60:71:a5:03:69:e3:b7:
bf:42:69:47:b7:1f:b8:b9:20:bc:13:a2:e1:73:30:31:93:a4:
b9:a3:77:58:64:ae:cb:31:a8:e5:b6:cb:f5:99:0f:ec:9c:86:
35:7a:a1:21:aa:f5:1b:7c:25:56:fd:a5:58:14:f7:37:06:e6:
86:e8:93:6a:8f:ef:8a:42:4b:07:63:c0:99:a9:76:a3:c1:fa:
d6:1f:16:40:db:9d:d6:ab:9c:34:a4:ca:1f:58:d7:59:46:4a:
d3:ad:26:be:44:9c:a8:b2:d8:ec:ab:07:d5:fe:6d:44:9d:98:
f5:85:18:65:42:3e:a4:c9:aa:52:a6:84:1f:42:02:d3:43:dd:
25:43:98:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:57:12 2025 by rpki-client