Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3cb37982-fd30-3c19-ac7b-75845707a035.roa
File: 3cb37982-fd30-3c19-ac7b-75845707a035.roa (raw, json)
Hash identifier: ElFD51+OYlYqeYqLTLHe2KbulTIBe6Kg0LSPXity64o=
Subject key identifier: A4:53:F8:65:25:63:41:FF:7E:FF:0E:52:38:31:FD:BC:8F:20:2A:52
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858481C9A84C3F05F3EB974123D80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3cb37982-fd30-3c19-ac7b-75845707a035.roa
Signing time: Fri 06 Dec 2024 02:00:39 +0000
ROA not before: Fri 06 Dec 2024 02:00:39 +0000
ROA not after: Thu 06 Mar 2025 02:00:39 +0000
asID: 12222
IP address blocks: 2001:4878:225::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:1c:9a:84:c3:f0:5f:3e:b9:74:12:3d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 6 02:00:39 2024 GMT
Not After : Mar 6 02:00:39 2025 GMT
Subject: CN=46c6af20-e438-4678-b492-c250209767a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:0e:ea:a0:80:cd:86:82:1e:15:0b:d6:16:b1:
36:68:14:16:2b:b7:44:77:32:1a:f6:83:e3:18:46:
51:4f:5a:a2:85:05:0b:e5:75:b3:d6:1d:78:b1:dc:
e9:1f:e9:5b:39:3d:44:ca:6c:ea:a5:aa:de:e9:61:
93:1d:46:f8:d6:5f:43:8d:ff:40:a0:5a:e1:ac:a6:
88:aa:0e:98:a3:f8:d2:d7:fa:62:d0:d8:d8:c7:b9:
45:70:40:99:ad:09:66:8c:e4:09:b8:32:b8:8d:25:
e4:e8:8e:f1:ac:e0:13:6f:b5:f9:da:0d:85:a9:92:
6e:82:19:80:b8:cb:4f:af:0b:36:06:a9:27:f5:9a:
d0:f8:e3:0f:85:0d:f4:94:de:2a:ef:c1:ca:6d:6e:
c8:bb:f7:a7:74:b6:09:92:6b:65:96:95:59:de:6f:
6d:fe:fb:08:71:89:11:f7:80:cc:09:e6:16:de:1b:
5a:4f:6a:92:41:e6:ed:c4:a8:c0:08:91:73:2f:21:
a0:a6:8a:45:20:04:0a:b8:dc:95:72:1a:92:cf:ee:
af:35:e8:b4:84:24:59:12:de:fe:c2:af:65:b4:f7:
ce:b8:4c:e7:27:e1:bf:07:a9:b4:04:78:58:ba:41:
ed:99:c7:32:e6:8f:4a:ee:ac:59:e2:f0:58:be:63:
18:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:53:F8:65:25:63:41:FF:7E:FF:0E:52:38:31:FD:BC:8F:20:2A:52
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3cb37982-fd30-3c19-ac7b-75845707a035.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:4878:225::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
65:0a:b5:cc:dc:0a:c9:b2:8e:16:cf:2c:63:c1:37:b5:51:ba:
f5:cf:a3:8b:fc:fc:77:a0:eb:12:5d:42:1e:b9:cf:9d:76:82:
be:d8:7e:ab:05:73:81:4b:9c:e0:c9:73:5a:bb:4a:ea:c9:fd:
e2:25:18:8e:9d:e1:86:30:19:87:9e:94:9d:e4:7b:1f:07:f4:
38:18:0d:15:a7:2b:be:2b:53:5d:12:1d:b9:e9:f7:4f:90:b6:
14:6e:ab:b3:ea:1f:03:e0:7f:23:c0:c2:d9:4d:7c:dd:50:23:
cd:bc:72:3a:d4:0a:ee:6a:de:cf:7d:cb:6d:aa:1c:14:10:75:
c5:c4:72:be:53:04:90:cd:b2:fe:00:20:19:f2:6a:5d:93:c3:
bd:03:b1:96:f0:eb:62:04:b1:60:cb:19:13:c6:a0:cb:69:9b:
c2:e2:4d:9a:c3:1b:2f:76:87:7a:c3:b1:29:67:91:16:06:6b:
73:0d:26:96:cc:e5:9b:49:09:ec:6a:2a:c3:a7:f4:c7:bf:b8:
c3:32:94:77:b9:18:81:4e:e8:1d:02:5b:29:b1:5b:b6:b0:70:
ff:8a:6a:bc:c8:d2:7d:57:f1:e9:33:05:45:b2:bb:86:b7:9c:
f0:0e:d2:58:56:46:6f:8e:a2:e4:68:8e:e0:0b:15:2e:11:93:
36:83:fd:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:44:32 2025 by rpki-client