Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1c409d7b-5bdf-30f8-8c61-de5f13fd1d4a.roa
File: 1c409d7b-5bdf-30f8-8c61-de5f13fd1d4a.roa (raw, json)
Hash identifier: /YdHNnfiClh3bDgG8TeXxblGQ4QigDAiRsC4/oEz+w4=
Subject key identifier: 25:A6:93:12:76:8E:EF:53:EB:1F:2E:F9:E4:E3:87:86:5E:CE:4D:EE
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858481F653115B1967D1A1DB55900
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1c409d7b-5bdf-30f8-8c61-de5f13fd1d4a.roa
Signing time: Sat 07 Dec 2024 02:00:39 +0000
ROA not before: Sat 07 Dec 2024 02:00:39 +0000
ROA not after: Fri 07 Mar 2025 02:00:39 +0000
asID: 12222
IP address blocks: 2001:4878:a062::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:1f:65:31:15:b1:96:7d:1a:1d:b5:59:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 7 02:00:39 2024 GMT
Not After : Mar 7 02:00:39 2025 GMT
Subject: CN=c476da5e-fe2c-48d5-a6ff-c1946fe2a89f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e6:2e:bb:6c:f7:cc:9c:66:3b:d9:5a:3d:1b:
45:67:52:26:66:49:03:ea:9b:dd:3b:c2:9e:78:0e:
ed:8b:32:9a:0e:09:cf:93:18:82:22:c3:3f:23:c6:
79:df:16:13:98:28:6f:f6:60:b3:01:91:d7:76:30:
76:b1:39:b5:0d:de:80:03:fd:28:13:74:06:f3:64:
3c:88:38:30:f6:19:dd:fb:96:7a:c0:bf:f4:4e:52:
83:0e:5d:f1:38:83:33:b6:13:20:25:1c:a9:dd:4e:
1b:d8:f0:13:09:e2:c6:26:c4:06:0c:a9:8e:4f:d2:
45:6c:67:38:d1:0c:d7:9a:4a:ce:ea:4f:8c:8f:55:
c0:e9:0b:26:82:e0:7b:7f:a9:5b:2a:dd:e0:cd:06:
bd:b9:f3:63:96:d1:18:96:28:17:1e:12:03:8c:58:
b6:2b:3b:92:db:c9:35:ff:6e:0b:1c:0b:3a:cb:9f:
c6:ae:e8:61:36:e6:78:ae:a9:e4:11:bf:9c:35:2e:
dc:f6:7b:4c:1d:1d:bf:a3:92:b6:36:91:6f:b7:b4:
19:33:6a:45:b6:1b:b7:37:7c:fb:ad:20:1b:47:b4:
6d:f2:ac:13:9e:2f:05:aa:8a:38:5c:ee:38:5b:ab:
f4:1f:b3:a6:fe:fe:f7:a0:1b:c4:70:8f:32:9f:39:
36:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:A6:93:12:76:8E:EF:53:EB:1F:2E:F9:E4:E3:87:86:5E:CE:4D:EE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1c409d7b-5bdf-30f8-8c61-de5f13fd1d4a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:4878:a062::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
82:27:69:08:35:ac:90:10:a1:4e:64:cb:6f:22:77:ce:3e:31:
2b:4b:b2:c6:c2:9c:dd:9e:53:2b:b0:25:49:8e:85:be:31:7a:
55:5c:4e:14:05:ec:94:f4:41:db:f6:9b:3d:b3:cd:bb:35:2c:
a6:00:95:7f:f6:b6:ab:09:88:b3:ee:b0:be:90:51:f3:78:7d:
84:2b:59:f8:81:b9:03:b5:ca:4b:7b:4c:1a:34:8b:e5:5c:7a:
d1:96:7d:ef:61:9f:0e:96:12:06:6e:de:34:7a:56:22:30:b2:
7d:f1:28:bc:70:a2:c0:d5:02:94:7c:97:63:6b:34:c5:02:9b:
b5:df:75:4e:f9:1e:ba:4e:6b:55:52:0a:94:e9:f0:fc:9e:27:
d0:d0:26:4e:95:70:ae:4f:4e:50:5e:cf:3d:88:c2:f4:6c:b6:
42:58:45:2d:20:a3:00:d3:fc:c9:21:3c:bf:54:d5:29:b9:c7:
2d:46:92:61:b2:e6:98:be:49:45:a8:b2:83:be:9c:48:09:0c:
19:58:70:8c:ff:42:b3:c8:85:f5:6e:9b:47:e7:a8:da:22:78:
cd:3d:25:58:95:76:cb:26:b1:d2:08:d9:cf:29:b7:5b:ca:51:
94:f4:dd:a8:6c:55:bb:1c:93:67:ef:4d:66:5f:0a:39:95:21:
fb:4b:98:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:37:57 2025 by rpki-client