Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/33b856a0-dad6-347d-a745-ddf890e79e43.roa
File: 33b856a0-dad6-347d-a745-ddf890e79e43.roa (raw, json)
Hash identifier: rGgda8XscuDYwPkBl1O9OocSzOc4q5SmW+IXWYYlwww=
Subject key identifier: D2:7D:9D:59:30:FC:A0:D6:A7:E4:BA:12:79:6B:0A:1E:58:8F:AA:07
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848222FD506DCC6CB02B0173080
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/33b856a0-dad6-347d-a745-ddf890e79e43.roa
Signing time: Sun 08 Dec 2024 02:00:39 +0000
ROA not before: Sun 08 Dec 2024 02:00:39 +0000
ROA not after: Sat 08 Mar 2025 02:00:39 +0000
asID: 12222
IP address blocks: 2001:4878:b008::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:22:2f:d5:06:dc:c6:cb:02:b0:17:30:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 8 02:00:39 2024 GMT
Not After : Mar 8 02:00:39 2025 GMT
Subject: CN=8f30ad95-c8f7-4bae-b669-8f9237dcec55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:68:d0:37:66:22:12:45:c1:fa:8a:0f:c2:0e:
f9:c5:6a:69:76:e0:e4:9e:7e:ab:97:7b:0c:26:bd:
ec:83:fb:1a:2c:fd:4a:95:1e:df:d8:1f:7d:29:e4:
0c:85:13:c4:08:99:42:c0:65:7c:f6:20:05:93:6b:
cf:5b:56:f3:1f:3a:a2:77:6f:2d:e9:c9:ed:00:5c:
0d:e2:79:56:2b:77:60:e2:3d:1d:58:7c:62:30:a5:
21:34:34:6b:1c:f4:58:a4:58:5d:8f:93:43:69:82:
59:b7:f4:d6:fd:d3:2c:0e:ed:54:ed:a8:7b:cb:5b:
3e:1d:35:6b:33:74:3a:cc:ed:76:c3:5e:e0:b6:c2:
4a:66:55:7a:c7:e0:14:26:34:e2:ed:85:da:0e:90:
5e:3f:8d:39:2b:f1:e0:3f:b6:b9:90:3f:4e:9c:d1:
47:aa:b8:ae:a7:ac:07:0d:86:c5:e6:8b:5c:a0:72:
2e:00:ca:ef:59:fb:0c:35:4f:5b:40:67:fa:3e:94:
1c:3c:62:bd:fb:ad:82:2e:f2:f5:13:d6:c6:26:ee:
54:cd:bd:42:e2:9d:b8:33:dc:50:a9:02:85:37:b6:
bd:d7:4e:13:14:2b:2a:03:32:c7:70:76:1b:d8:f3:
fc:5d:26:0c:89:65:11:c7:fc:4d:b4:d9:c8:04:4e:
c7:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:7D:9D:59:30:FC:A0:D6:A7:E4:BA:12:79:6B:0A:1E:58:8F:AA:07
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/33b856a0-dad6-347d-a745-ddf890e79e43.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:4878:b008::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
67:8a:e9:26:7a:85:38:62:1c:48:fc:4d:39:81:f8:4c:99:3f:
74:9b:ed:6a:93:1c:8b:48:d6:91:4e:d0:e1:75:f9:5c:a0:d6:
53:ac:4b:ef:b3:d4:b2:7b:a0:b8:99:bd:8d:7d:66:15:15:fa:
97:15:06:99:f3:9a:e8:c3:01:01:c6:2c:d4:5c:61:a3:c0:d5:
3e:f5:7f:81:c7:a5:b3:80:ec:a3:8f:5a:58:dd:5e:fa:74:92:
23:f7:13:fc:ee:13:a9:46:29:85:ff:9d:2e:13:2b:bc:c9:1d:
a1:91:98:e7:52:6f:f0:d8:a7:d1:bc:64:4a:2b:24:0d:03:e4:
fc:ad:89:41:f8:fe:c8:58:f2:ac:26:8e:a4:92:cc:3d:7b:9e:
16:18:44:68:29:a5:8f:cf:3b:28:1c:d9:59:2a:8a:fd:b9:0d:
7f:5b:0a:63:e3:84:9d:5f:0c:a7:39:5a:5f:32:4f:af:25:0c:
9e:d0:26:63:df:19:36:61:cc:47:34:e4:5a:04:5a:d9:26:4f:
5f:f6:d0:fb:0b:1d:0d:df:83:d6:3e:35:17:59:ab:1d:bb:53:
1d:af:ff:de:1c:8c:08:06:61:4d:72:10:c7:8d:97:02:74:cb:
44:3e:56:41:74:ac:ee:8e:e7:d7:c0:2d:54:84:40:e0:e4:82:
59:a3:60:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:49:12 2025 by rpki-client