Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/28fc964b-d021-3c83-80eb-e3bea9004433.roa
File: 28fc964b-d021-3c83-80eb-e3bea9004433.roa (raw, json)
Hash identifier: uf0pDLzgPa4orRpsAAT9+hILiRyXmICuu5+pOBIshvI=
Subject key identifier: 7C:D4:C8:67:59:E3:35:49:6D:1E:21:9C:2C:AB:73:49:64:E7:37:BE
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858481F6528304AE6AE799EF3AB60
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/28fc964b-d021-3c83-80eb-e3bea9004433.roa
Signing time: Sat 07 Dec 2024 02:00:39 +0000
ROA not before: Sat 07 Dec 2024 02:00:39 +0000
ROA not after: Fri 07 Mar 2025 02:00:39 +0000
asID: 12222
IP address blocks: 2001:4878:a136::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:1f:65:28:30:4a:e6:ae:79:9e:f3:ab:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 7 02:00:39 2024 GMT
Not After : Mar 7 02:00:39 2025 GMT
Subject: CN=f2ad6815-0949-4bfe-8494-f2d2f2349b35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:40:a4:00:0d:96:f7:05:c7:84:0a:aa:3c:8d:
e3:b5:b8:59:73:25:d5:55:cf:f0:f5:87:9c:a3:16:
58:60:0b:77:d4:ed:1f:46:d3:38:62:b9:da:37:f6:
70:91:51:72:b9:76:b7:57:4c:9c:85:0f:19:74:9c:
a1:90:7d:d8:01:91:74:83:9b:66:a5:c6:3b:01:91:
ad:e3:78:22:0b:d7:59:1a:5f:0a:c7:98:8f:0b:e9:
da:4c:5d:7e:3d:1b:21:e1:bd:db:ef:c1:2e:be:a0:
9b:f9:ec:bf:57:59:13:02:21:d0:ad:6b:61:13:6d:
b1:b4:a6:61:ad:76:61:71:0e:e1:93:96:ef:b6:6a:
ab:4e:1b:ba:7a:a5:47:0a:81:76:3b:84:45:48:2a:
72:42:06:64:6d:18:52:54:cf:86:dc:0f:25:cc:69:
e2:fc:ff:72:c0:5c:fc:94:f8:1a:90:c1:bf:46:1c:
a3:0a:5d:87:7b:0a:f7:86:2b:15:20:f7:61:75:9f:
dd:06:8b:a8:e3:ef:28:1e:19:57:70:fd:4d:64:13:
95:06:56:b6:95:5a:c3:21:3d:d5:a5:18:cd:bd:d6:
c0:f3:33:cd:60:84:7b:30:cb:81:21:cc:86:31:6e:
e2:03:96:c2:2a:7d:9b:20:e7:05:55:c5:ba:31:47:
83:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:D4:C8:67:59:E3:35:49:6D:1E:21:9C:2C:AB:73:49:64:E7:37:BE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/28fc964b-d021-3c83-80eb-e3bea9004433.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:4878:a136::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
51:9f:51:b8:43:32:b3:4b:6b:e6:56:d9:24:c3:f0:af:42:87:
77:3a:a9:68:5e:30:70:5c:c9:31:83:22:03:ba:50:60:5b:26:
4c:56:60:41:36:31:f8:d4:7b:b5:3a:43:35:e1:79:2a:40:2a:
85:15:7f:95:2d:7d:16:f7:4f:70:90:d4:13:76:d4:ed:0d:78:
21:4c:4e:d7:7e:d4:d6:e0:8f:40:1b:67:03:56:cb:3f:d6:84:
dc:b9:5b:1b:2b:f2:b3:c6:5f:12:74:7c:0d:23:d2:50:69:3e:
2b:e3:35:6d:ac:4f:20:b8:e4:dd:72:b9:ab:f3:30:0e:96:2d:
80:3a:cf:2f:8b:c3:1e:6d:52:72:64:f4:7a:24:e8:3a:2d:f7:
c7:20:89:b2:89:e5:95:3a:8f:ab:40:4d:09:60:61:d6:af:5e:
85:b2:28:94:72:4b:ee:f0:a0:d5:21:12:70:e2:85:26:89:ef:
56:28:a1:d7:68:c3:d0:aa:47:11:d5:46:e8:73:f8:97:b7:45:
3f:a3:0d:0c:f8:11:82:2d:97:33:46:64:34:cd:9f:22:79:f2:
78:5b:6d:cd:72:48:55:df:a0:fb:e7:38:fe:e0:1c:45:c4:b9:
27:ed:c3:8f:82:2e:4c:e3:05:50:cb:d2:6b:86:7e:ba:92:22:
73:51:21:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 12:07:31 2025 by rpki-client