Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3b9fe6af-4127-3909-bb31-619bfe6bb5db.roa
File: 3b9fe6af-4127-3909-bb31-619bfe6bb5db.roa (raw, json)
Hash identifier: dr01K9KHXJE1UJ8m+gK2C3tQMrOvr4m3VREwHcr7yaQ=
Subject key identifier: E8:8F:90:43:1B:FA:2C:56:58:43:0D:0E:56:64:DF:38:40:75:E5:CD
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858481F653055C033338D11E4AE20
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3b9fe6af-4127-3909-bb31-619bfe6bb5db.roa
Signing time: Sat 07 Dec 2024 02:00:39 +0000
ROA not before: Sat 07 Dec 2024 02:00:39 +0000
ROA not after: Fri 07 Mar 2025 02:00:39 +0000
asID: 12222
IP address blocks: 2001:4878:8259::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:1f:65:30:55:c0:33:33:8d:11:e4:ae:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 7 02:00:39 2024 GMT
Not After : Mar 7 02:00:39 2025 GMT
Subject: CN=bfaaf8aa-3b59-4efc-84a1-fbbe59fcf5f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f0:be:b8:6c:b0:31:1b:fb:b0:4b:a9:63:01:
46:01:c9:a7:b3:a2:7b:48:60:fb:37:ef:e4:08:ed:
fb:70:57:7d:df:ec:f9:60:25:0b:7e:67:fd:64:2a:
93:e5:3f:41:b4:d4:81:a6:55:e3:62:50:b2:95:c3:
15:89:e0:73:9d:86:bf:57:2b:cd:fd:49:dd:65:db:
5c:01:f7:44:c4:29:af:4b:5f:df:01:b8:27:0c:55:
3a:72:4f:29:18:ee:cf:20:08:74:db:09:63:e2:4f:
ff:ea:ed:ab:08:d9:f2:51:64:77:b3:f5:02:e3:c0:
e2:d0:69:6e:ac:f1:43:67:25:a7:aa:95:76:f6:18:
1b:e9:81:d7:c6:5d:99:a9:d4:5e:97:c3:09:3e:cc:
ce:b0:bc:c7:c8:34:25:32:5e:c2:65:b0:08:5c:e2:
fb:1b:65:c6:9f:a8:9d:86:8e:1b:02:17:b9:8c:b2:
c2:82:26:82:d7:ea:d0:b0:f5:24:84:b0:7d:8a:58:
10:47:eb:74:fe:b1:f3:4e:1b:4f:de:ab:e2:9c:7c:
50:ed:e0:50:00:fe:65:7f:44:a2:b1:90:3b:2f:2c:
5a:6a:f7:c8:01:0f:82:80:cf:44:0c:c7:f9:be:69:
6f:1f:77:e6:07:73:4d:f3:eb:2f:01:28:e8:bc:e1:
0d:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:8F:90:43:1B:FA:2C:56:58:43:0D:0E:56:64:DF:38:40:75:E5:CD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3b9fe6af-4127-3909-bb31-619bfe6bb5db.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:4878:8259::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
86:05:02:ad:0d:cf:d9:7e:80:26:97:0b:f0:24:26:b5:8e:67:
a6:01:9b:18:9d:8a:20:01:df:a2:8b:29:54:be:ba:89:74:b6:
20:ed:34:19:37:41:32:67:a4:46:7f:ae:28:52:33:5b:8f:b7:
fb:34:0f:9c:aa:3b:83:f2:93:eb:e5:97:b4:a1:1e:7e:f4:f9:
c8:a4:f5:96:5a:90:08:b5:ef:fd:6d:70:02:94:66:67:bb:bd:
5a:d7:97:8a:63:30:0d:1d:75:b8:97:c2:7c:a2:c2:6c:dc:b9:
fe:e7:f7:80:68:28:9b:96:5e:9c:86:07:dc:03:13:60:a4:dd:
55:1b:0b:c8:8c:9c:76:0c:f0:e6:72:62:aa:d9:ba:f3:c2:7f:
02:8e:65:48:de:dc:49:ef:6a:be:23:46:f5:3d:db:12:c4:da:
38:45:7d:db:84:5e:9e:ff:ec:c2:88:99:8e:c3:63:75:d7:ab:
90:af:ad:9d:7a:7b:f6:03:e9:50:9b:77:ab:5e:47:11:f6:2f:
dc:fa:fa:92:0b:9f:ff:3a:b5:88:0f:f7:fc:fc:89:21:1f:9e:
b9:3a:3b:90:cd:f1:b9:cf:60:b0:32:c9:2b:29:3a:f1:e5:72:
d5:b4:f3:db:68:6a:c1:f2:b4:a7:56:1f:cf:35:41:7e:d4:63:
62:ca:79:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:47:36 2025 by rpki-client