Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/885b3a77-fcc4-3ab3-96fb-a4ddce6f0b20.roa
File: 885b3a77-fcc4-3ab3-96fb-a4ddce6f0b20.roa (raw, json)
Hash identifier: Ao6C2AS8WH0GCzdN65AGIVL4lmcebJkHYIzQjCS3SbA=
Subject key identifier: 4D:41:57:AE:AB:2A:27:7F:52:F2:B2:EE:67:E3:0B:6E:71:8A:23:3A
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848159FE731DD9013F30ECD5240
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/885b3a77-fcc4-3ab3-96fb-a4ddce6f0b20.roa
Signing time: Tue 03 Dec 2024 14:00:52 +0000
ROA not before: Tue 03 Dec 2024 14:00:52 +0000
ROA not after: Mon 03 Mar 2025 14:00:52 +0000
asID: 33905
IP address blocks: 2600:1480:c000::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:15:9f:e7:31:dd:90:13:f3:0e:cd:52:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 3 14:00:52 2024 GMT
Not After : Mar 3 14:00:52 2025 GMT
Subject: CN=8609a99e-3023-48ed-8ed7-bd8cdbbf44cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:cd:f5:ff:06:fb:39:d1:38:47:8b:b2:f8:12:
2e:49:38:f3:7e:5a:aa:ae:7e:7f:4c:d3:36:f9:e8:
62:c6:63:f6:ee:6e:9a:47:97:9b:4b:63:43:a3:2b:
89:e6:bc:c6:69:c1:c4:94:4c:2d:5c:ee:d2:33:2e:
8a:0e:37:63:b3:40:74:88:61:a6:5d:16:ac:3d:97:
ff:55:97:51:f7:6e:54:dc:75:ed:7e:85:03:8f:d3:
aa:21:9a:22:30:7d:8d:1b:b1:99:0c:03:05:fa:a1:
57:d7:26:26:15:aa:8a:5d:75:26:78:bf:bd:45:04:
c4:50:5d:94:7e:c6:fc:0c:76:43:0b:5d:7f:37:36:
25:96:13:30:3a:d2:af:f3:f4:26:5a:15:da:f1:6c:
ca:36:5e:f6:91:47:83:fc:67:e5:20:79:fd:f3:cb:
38:5f:65:f9:e0:00:d3:e9:7e:2f:4e:dc:39:b8:1b:
21:1e:76:bb:26:13:a5:94:fa:df:8d:b8:6e:b2:3d:
9e:00:27:0e:b2:fb:75:36:46:55:51:82:bf:01:47:
0d:e2:4c:fe:fe:04:73:e1:a3:03:59:8c:00:52:d7:
0c:ac:81:eb:3b:63:ca:7d:30:43:ca:d6:71:54:e1:
1a:c9:5d:b5:1c:d5:bd:17:f3:d7:e8:d7:1c:2c:cd:
8d:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:41:57:AE:AB:2A:27:7F:52:F2:B2:EE:67:E3:0B:6E:71:8A:23:3A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/885b3a77-fcc4-3ab3-96fb-a4ddce6f0b20.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:1480:c000::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3b:b1:7a:35:ac:46:4e:3d:3c:6b:97:d7:6f:cc:e0:60:d5:d5:
97:d2:3f:ee:c1:7e:59:89:91:6f:23:85:16:6e:8b:4a:ca:a8:
9b:d6:89:0f:fc:9c:b5:09:3b:52:5e:89:1f:fb:da:79:c7:b8:
78:c2:52:49:28:73:22:21:ae:66:de:20:d2:e4:99:c3:95:4e:
40:5e:4a:dd:f6:b0:a8:70:ba:b4:fd:12:c0:4a:ef:79:e0:8a:
eb:7c:87:c2:cd:7c:29:28:8c:9a:76:db:29:06:46:02:54:2e:
49:a1:84:4d:f9:43:ff:13:78:25:1e:f1:7c:78:35:28:c9:d3:
2d:f2:d0:46:91:f5:35:08:50:85:97:77:54:4c:9e:a8:55:d6:
9a:e3:6d:99:ab:c5:48:8e:60:41:a0:c7:68:b5:62:a6:d1:a3:
35:76:79:c4:64:74:93:d5:d0:4f:66:c4:c0:f9:f1:e0:ed:bc:
61:b7:9d:49:fc:bd:88:8b:61:78:01:cd:d0:93:f5:09:34:1a:
9f:b9:0c:3f:2f:92:92:d5:65:c7:bb:32:40:c8:f0:ce:6d:a5:
93:a2:f1:67:21:5b:c7:09:c5:ee:d5:02:35:b8:9f:35:d1:7e:
48:b5:2d:ef:42:07:cf:eb:e0:83:70:e1:a5:83:3e:24:e9:08:
ce:b0:3c:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:21:57 2025 by rpki-client