Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c/88fa80cf-a4cb-3ced-a935-1fe3c40c4de0.roa
File: 88fa80cf-a4cb-3ced-a935-1fe3c40c4de0.roa (raw, json)
Hash identifier: INuhXOug4jxkJg+/F4SIBzEg89XLs9vAxAwg51u2DsU=
Subject key identifier: A6:1E:D1:32:AA:22:C5:0C:0F:16:00:0C:37:F6:62:91:3A:BC:20:55
Certificate issuer: /CN=d12ff9c7-ced8-4cc2-b3d5-adf1859a808c
Certificate serial: 010D0C9F432858482D5A870E45A173ED8AC2FB80
Authority key identifier: 5A:CD:BF:B9:70:80:A4:AA:F3:8E:B8:58:29:11:41:07:9C:EE:FD:D7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c/88fa80cf-a4cb-3ced-a935-1fe3c40c4de0.roa
Signing time: Thu 12 Dec 2024 02:00:38 +0000
ROA not before: Thu 12 Dec 2024 02:00:38 +0000
ROA not after: Wed 12 Mar 2025 01:00:38 +0000
asID: 14618
IP address blocks: 2620:121:5080::/43 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2d:5a:87:0e:45:a1:73:ed:8a:c2:fb:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ff9c7-ced8-4cc2-b3d5-adf1859a808c
Validity
Not Before: Dec 12 02:00:38 2024 GMT
Not After : Mar 12 01:00:38 2025 GMT
Subject: CN=8987f829-aa32-4fdc-aeef-477c5da7188a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:a8:5d:f3:cc:1c:83:3d:f8:54:41:7c:9c:9b:
06:cb:ec:87:25:10:ba:d2:3f:0b:f6:12:66:7e:e7:
cf:61:36:77:a5:12:71:18:54:cd:a0:7d:df:11:02:
a3:5a:40:af:06:e7:96:d4:86:ea:d1:65:dd:dd:10:
3e:46:07:d8:24:9a:96:7b:b1:32:6a:3e:19:40:b3:
b7:a6:e4:f4:e7:6c:31:2a:5b:1a:98:d2:af:48:51:
79:e9:0b:56:c3:27:50:02:8f:33:21:a5:c7:46:02:
10:39:b0:2c:24:bb:4a:df:d9:c6:42:f1:fe:c2:c2:
4b:3f:36:83:0d:fd:ef:5e:ea:a1:b7:ac:5e:2e:8a:
d5:29:bc:91:68:c9:94:95:3e:99:5e:64:2a:45:ce:
4f:fc:d5:40:2d:7f:a1:ec:57:d1:c5:2b:ed:3f:1c:
07:e4:18:05:d6:f6:3f:c7:57:62:47:dc:7a:ab:f5:
64:60:c2:df:09:11:3f:0b:01:f9:8b:a2:70:a6:b7:
31:18:73:41:21:b3:91:70:ca:08:16:87:86:55:45:
e2:1f:8a:e1:e4:b2:80:ed:2a:b9:be:43:54:df:b1:
a7:1e:a7:d3:6d:7b:ae:03:c8:4a:8a:78:ea:e7:31:
90:f5:22:e7:3e:dc:69:36:94:04:d2:24:97:31:11:
5e:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:1E:D1:32:AA:22:C5:0C:0F:16:00:0C:37:F6:62:91:3A:BC:20:55
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c/88fa80cf-a4cb-3ced-a935-1fe3c40c4de0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c.crl
X509v3 Authority Key Identifier:
keyid:5A:CD:BF:B9:70:80:A4:AA:F3:8E:B8:58:29:11:41:07:9C:EE:FD:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:121:5080::/43
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
50:13:a7:f6:04:b5:0e:b4:43:9c:47:5d:3e:bd:a3:c4:a1:9c:
0c:4c:1f:48:8f:dc:81:18:10:ce:26:63:3f:03:cc:d4:95:21:
33:df:a9:32:38:2f:83:ec:a2:b3:36:8c:05:b9:a7:c5:5d:30:
e8:38:dd:ee:88:e5:8f:f0:c6:ed:a1:f3:99:14:0c:13:41:7e:
18:ec:a4:a6:21:19:25:59:d1:c6:e4:b7:e5:b1:fe:e9:7d:7a:
4a:bc:1e:1e:a4:72:ee:b5:fa:d4:d6:f6:8e:9c:8e:a2:5a:ad:
8b:fa:ec:e5:b2:af:13:bf:c1:bd:86:42:09:2e:16:10:f0:1c:
60:a0:db:36:19:bd:07:14:7f:68:4e:ce:51:07:8c:dc:d9:9f:
fd:bd:4d:a1:cc:69:67:0d:ac:df:42:18:dd:bc:8c:77:de:c1:
0f:f9:f5:b6:3f:c7:48:b8:14:74:87:94:29:86:60:84:2a:ca:
f7:ca:c3:26:4b:c7:08:bc:b5:92:cd:c1:3c:d0:9e:9b:5c:cd:
e8:43:79:b1:ee:67:fc:81:b2:86:45:f3:39:9c:02:29:77:f2:
2f:8f:91:6f:a1:8c:bc:65:90:65:b4:04:08:44:81:f4:a4:1a:
75:c3:82:11:09:2d:2a:c6:25:33:9c:54:27:d6:d8:37:02:ae:
3b:eb:19:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:27:09 2025 by rpki-client