Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1978fe26-ee4a-3600-88d3-139e23593437.roa
File: 1978fe26-ee4a-3600-88d3-139e23593437.roa (raw, json)
Hash identifier: x3G4jHp+zZtaodJcvZ+Ww3WriAzSZtnAwXOD/ukwyd0=
Subject key identifier: 7F:69:F4:E3:28:48:DD:FB:AC:8E:E1:02:6A:7A:FC:3C:06:A0:3F:D1
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858481C9A7CB65773467E3F872D80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1978fe26-ee4a-3600-88d3-139e23593437.roa
Signing time: Fri 06 Dec 2024 02:00:39 +0000
ROA not before: Fri 06 Dec 2024 02:00:39 +0000
ROA not after: Thu 06 Mar 2025 02:00:39 +0000
asID: 12222
IP address blocks: 2001:4878::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:1c:9a:7c:b6:57:73:46:7e:3f:87:2d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 6 02:00:39 2024 GMT
Not After : Mar 6 02:00:39 2025 GMT
Subject: CN=96b3717e-67d6-4de1-ae0f-3f1e86202595
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:81:8e:76:2a:d8:fd:9f:86:51:69:1f:ea:62:
db:b3:08:ea:cc:0b:55:0b:11:18:e1:5c:63:6e:c7:
12:1e:b5:29:4b:e8:f6:d8:51:7b:9b:e1:05:8e:98:
5e:53:27:da:b9:bb:d5:a1:69:48:b3:e0:d7:44:0f:
a2:05:12:9c:ba:cc:78:11:5b:27:d7:d0:a3:db:f1:
e4:77:42:d5:69:05:92:a6:44:24:3b:0b:b4:5b:ae:
be:51:a4:62:b2:8a:e8:43:f0:0f:27:c0:04:c3:d5:
13:de:20:b0:08:18:b1:57:1d:dd:13:a5:91:9d:22:
da:b8:5b:7b:93:d0:48:76:8f:58:22:d9:2d:08:dd:
99:ae:0e:f8:ec:35:eb:55:fe:3b:82:68:07:b0:91:
bd:0c:5b:1a:a5:07:81:3d:3d:9a:27:6e:1f:b1:ed:
2a:18:c6:5c:3b:44:40:53:35:13:91:50:33:ea:ae:
75:c0:fd:48:d5:4a:d1:02:2e:88:de:c5:4a:ed:0b:
bc:b1:fb:c7:f6:ce:73:10:bd:9c:30:04:a4:f8:29:
86:e0:8e:c9:c1:45:33:87:c3:00:9b:50:b1:bc:63:
5e:f5:09:a9:ce:08:78:69:da:7e:27:4c:60:67:a4:
84:40:e0:c4:58:58:13:67:d3:48:0e:0d:50:3f:d7:
d1:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:69:F4:E3:28:48:DD:FB:AC:8E:E1:02:6A:7A:FC:3C:06:A0:3F:D1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1978fe26-ee4a-3600-88d3-139e23593437.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:4878::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2f:40:64:4b:0d:16:a2:d7:ac:cf:e3:db:09:c1:aa:15:03:0a:
75:ff:ca:32:e4:20:83:ec:04:a2:2c:ee:84:08:3a:8a:fd:5e:
eb:57:5e:ed:8f:82:f0:29:a7:ef:73:ee:ec:cd:f9:4d:10:80:
f9:16:47:87:7e:05:d0:3c:2c:b3:8e:4b:52:22:fe:93:b2:7f:
3c:b3:66:93:40:87:67:51:14:f1:ee:f8:5c:da:19:30:ca:3b:
78:47:f7:09:82:cb:76:1d:4d:bf:76:8f:26:28:42:fc:04:0f:
d8:62:02:27:f6:71:45:49:8e:84:57:6e:16:6c:29:1b:0e:3f:
74:fc:f6:61:81:6b:94:67:25:7a:a6:98:90:00:83:dd:90:ef:
84:bf:e7:0e:80:71:68:9f:93:57:d3:bf:85:e2:4d:3c:f0:18:
9b:dc:08:6a:37:52:cd:b1:52:f2:f6:b5:63:e6:53:ef:8a:8b:
79:5c:b3:db:6a:85:90:25:5e:49:66:96:fd:08:93:05:d7:b5:
c3:6a:39:d9:d5:e2:12:35:68:e5:65:d5:13:43:55:7c:6a:0c:
38:29:d2:3f:91:0d:6c:80:44:be:88:e7:ae:af:de:ad:a1:45:
ca:62:1e:49:c7:55:11:ad:5f:5f:8b:b9:75:6b:dc:3d:fc:83:
9a:b9:2f:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:51:13 2025 by rpki-client