Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/359be0a6-df37-3b7f-955e-bf7fa5fd86f4.roa
File: 359be0a6-df37-3b7f-955e-bf7fa5fd86f4.roa (raw, json)
Hash identifier: I10YtgULIdQvJ/HqTUhZg7ycAksPUdskYGvEjKlG3+g=
Subject key identifier: 00:11:AA:02:40:1F:C7:BF:F5:BD:F8:35:5D:BE:DA:D2:5D:B4:05:D4
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858481C9A7F568E1269001BC05080
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/359be0a6-df37-3b7f-955e-bf7fa5fd86f4.roa
Signing time: Fri 06 Dec 2024 02:00:39 +0000
ROA not before: Fri 06 Dec 2024 02:00:39 +0000
ROA not after: Thu 06 Mar 2025 02:00:39 +0000
asID: 12222
IP address blocks: 2001:4878:4321::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:1c:9a:7f:56:8e:12:69:00:1b:c0:50:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 6 02:00:39 2024 GMT
Not After : Mar 6 02:00:39 2025 GMT
Subject: CN=cd286414-4d7a-4bfc-b4ec-05254fa53639
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f9:83:00:64:1a:f0:6f:1a:8f:66:b4:bb:90:
02:5f:70:25:fe:c4:39:20:b3:23:76:ca:cd:d7:aa:
6b:10:eb:95:66:9e:e9:11:36:93:e0:ac:75:f4:35:
5e:18:01:3a:70:f7:9a:58:73:e9:df:77:1a:ac:a1:
b0:85:94:98:25:c3:36:4b:3d:22:bc:0e:34:0f:6f:
ae:74:09:70:ec:f5:5e:a5:55:e9:6d:06:d4:d4:87:
9b:63:2f:e4:6e:95:ea:d6:c0:85:d4:ec:a9:b4:69:
36:ef:4e:ef:fb:42:27:5a:0f:97:04:73:a5:0e:87:
65:c4:41:73:61:8a:af:c0:3f:f8:a3:92:11:df:6f:
3a:06:d0:b8:d2:ac:ea:51:1a:74:b0:3c:94:a8:ca:
a1:31:54:c1:c0:e3:17:0f:3c:e4:96:df:af:87:8e:
c0:93:c5:04:fc:5c:0b:11:60:d2:14:70:9f:94:60:
d4:de:19:54:fc:74:da:79:1b:e7:b9:10:4c:9c:a0:
04:0e:d1:27:1a:b8:67:2c:9b:75:45:d9:de:80:fb:
04:55:13:c9:01:6b:03:54:3a:8c:aa:22:77:a3:61:
fc:05:e6:d5:85:f9:ea:d7:b1:1f:69:7c:8b:9a:e4:
45:14:74:44:af:a9:7a:89:12:26:3d:c9:5e:0b:70:
51:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:11:AA:02:40:1F:C7:BF:F5:BD:F8:35:5D:BE:DA:D2:5D:B4:05:D4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/359be0a6-df37-3b7f-955e-bf7fa5fd86f4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:4878:4321::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
89:e7:3e:10:41:81:67:d9:c5:00:75:d4:94:b7:21:06:ea:2d:
92:15:48:5d:55:a7:82:4b:fb:03:3d:ff:a0:e2:61:0a:1d:3f:
19:20:d6:73:2e:0c:78:9e:6c:06:7f:54:6c:5a:15:6e:fa:4e:
08:e0:d0:95:78:10:70:b9:17:28:80:71:1a:42:bc:77:3b:9d:
b3:b6:0d:fe:b2:46:b0:76:4a:1d:52:b8:b9:2c:35:d3:f7:51:
14:85:85:19:89:03:b3:75:c3:df:80:75:9b:b9:32:d1:7c:fe:
dd:a0:a0:a6:14:a7:63:19:98:35:df:b8:be:c3:b3:f8:00:66:
61:6d:71:fb:03:4e:86:28:e2:d3:ac:69:3a:ae:7c:8e:8c:45:
3a:55:5d:0e:5d:1d:45:86:f5:89:c6:90:c1:84:e3:47:71:e2:
a9:2d:3d:24:ca:bf:0f:52:09:ba:b1:80:02:07:e2:ed:b1:8a:
32:1e:99:d3:36:f3:8a:1c:a5:bf:59:2b:51:99:79:9a:c6:be:
e7:5e:46:f6:4a:41:14:d4:df:74:02:d1:1a:8c:11:c9:ee:73:
f9:a3:0e:ab:bc:62:5d:b1:d7:ce:48:3f:38:07:3b:c9:c0:ee:
6e:ae:23:99:af:68:5e:ec:f1:85:8d:9e:a2:4e:b8:0b:bb:a6:
23:2f:58:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:49:52 2025 by rpki-client