Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8b28561c-59aa-3e04-a897-3f2b7325bcd5.roa
File: 8b28561c-59aa-3e04-a897-3f2b7325bcd5.roa (raw, json)
Hash identifier: uOPNSTQenmAUx5CwblYN2GPptmnXTRxp01salDeOuQ4=
Subject key identifier: 7E:EE:5B:67:08:91:30:81:64:49:F9:28:B9:FF:E5:9B:AE:47:9F:36
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848222FE0C92273F818645F1800
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8b28561c-59aa-3e04-a897-3f2b7325bcd5.roa
Signing time: Sun 08 Dec 2024 02:00:39 +0000
ROA not before: Sun 08 Dec 2024 02:00:39 +0000
ROA not after: Sat 08 Mar 2025 02:00:39 +0000
asID: 12222
IP address blocks: 2001:4878:c324::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:22:2f:e0:c9:22:73:f8:18:64:5f:18:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 8 02:00:39 2024 GMT
Not After : Mar 8 02:00:39 2025 GMT
Subject: CN=afd55cc1-7ef6-4da8-b107-7b56c5cf36aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:76:fb:c4:3c:c1:52:a1:86:46:f4:19:28:6a:
53:9e:5c:ec:82:53:ae:cc:71:96:29:5b:e3:4c:7b:
a8:0f:00:2e:2f:73:4f:84:dd:61:2f:70:f5:50:c5:
b7:db:dc:a5:d7:21:27:f4:10:8f:24:2d:e4:87:ff:
99:b7:37:a8:ab:e7:e5:42:39:60:e2:14:be:57:9b:
e1:c9:41:51:d1:08:de:94:59:10:f9:32:70:77:bc:
33:b4:4c:5d:aa:a7:b1:08:18:cc:4c:23:6d:ce:a8:
82:ac:5b:00:71:32:cf:6c:0c:8c:28:09:6f:70:17:
ea:4e:01:a3:52:ef:89:d8:5a:25:45:30:53:10:88:
9d:53:30:af:73:75:9c:d1:48:ad:05:4c:c2:1e:8b:
d4:21:fb:f6:e3:1f:e5:1a:01:87:97:24:de:33:bf:
3b:a9:85:95:5e:e1:6c:57:dc:57:ea:29:32:e8:82:
0e:e8:73:9f:f0:a5:e1:ab:cc:f2:c4:e9:44:a6:b9:
63:52:3c:6d:ab:05:b0:4c:bf:e3:00:fe:92:18:16:
15:24:27:e2:ae:9a:ba:80:db:75:d6:17:5e:38:1c:
05:39:8d:2e:7a:d4:ba:e5:82:3f:1c:50:c5:0c:64:
b0:19:c4:20:17:b5:a0:36:eb:a8:65:ee:a0:0b:49:
0b:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:EE:5B:67:08:91:30:81:64:49:F9:28:B9:FF:E5:9B:AE:47:9F:36
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8b28561c-59aa-3e04-a897-3f2b7325bcd5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:4878:c324::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
10:df:25:72:7a:44:94:61:93:61:47:81:15:65:85:a8:89:bb:
c8:e1:f9:06:62:f1:0b:57:4c:4e:c3:ed:00:e4:2f:c8:ff:af:
c9:ed:7d:d9:94:2a:b7:71:1f:fd:e6:2e:8a:5f:b7:a1:a7:25:
a5:10:05:4a:07:fc:6b:03:34:62:bc:e0:5d:11:8f:2c:e4:ce:
a0:6a:b6:17:96:ea:14:1a:23:35:1a:fa:12:ad:81:5a:8b:3f:
0d:cb:b4:81:16:90:4d:91:3d:11:d3:cd:08:89:fd:17:06:7f:
f3:7c:1b:d5:35:aa:32:e4:b5:6c:15:1c:d5:c1:bc:5b:e1:5e:
20:47:c4:eb:96:0d:36:97:1a:87:a8:54:26:27:db:57:3b:6d:
6d:5e:b6:18:d2:8c:d4:11:45:8f:1b:4f:28:88:ac:ce:27:53:
74:f1:36:29:7c:cd:64:5f:3d:d6:34:bb:ba:ef:2b:a9:3a:c0:
04:52:c0:a1:78:0b:4b:b9:ae:50:57:bc:be:e8:dd:e2:4b:6b:
47:a3:78:bd:c2:8c:3b:dc:3d:91:c2:ec:72:aa:8b:3e:d9:56:
a4:c2:cf:2a:3e:a5:06:e0:e7:44:ef:cc:47:cb:33:f8:3d:91:
7d:f3:92:2d:26:7d:13:ee:d2:e7:eb:c9:df:a8:da:68:b0:de:
f0:9d:6b:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:37:54 2025 by rpki-client