Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8be0b04f-9463-370b-8d93-9d314ada547c.roa
File: 8be0b04f-9463-370b-8d93-9d314ada547c.roa (raw, json)
Hash identifier: eNXGeHeXRvlTq76aSUOqIHY2txCORIlqdUfsB6sWWt0=
Subject key identifier: 43:1F:0B:E7:A2:E1:4B:89:40:4A:3A:FD:1B:5C:5D:33:A2:D3:FC:08
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858481C9A7D3D4A2E9B5FC4F5FFC8
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8be0b04f-9463-370b-8d93-9d314ada547c.roa
Signing time: Fri 06 Dec 2024 02:00:39 +0000
ROA not before: Fri 06 Dec 2024 02:00:39 +0000
ROA not after: Thu 06 Mar 2025 02:00:39 +0000
asID: 12222
IP address blocks: 2001:4878:136::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:1c:9a:7d:3d:4a:2e:9b:5f:c4:f5:ff:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 6 02:00:39 2024 GMT
Not After : Mar 6 02:00:39 2025 GMT
Subject: CN=d86f3b87-6b1f-4e81-80a6-579304fd4cec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:52:f4:25:1a:9e:59:70:06:46:9c:54:cf:b9:
9f:66:e8:a4:64:13:83:c9:02:ba:5d:16:8a:b2:a7:
62:f0:fd:37:75:7e:df:cc:12:cd:2c:0d:c0:09:22:
e3:9f:c2:e0:70:23:8b:de:36:ca:98:c1:4c:07:c9:
58:bc:84:8a:a1:4f:ef:c4:4a:b6:f0:15:ec:c6:7d:
af:da:2c:0c:82:83:00:6e:e7:8f:60:1f:f9:5a:1f:
ef:d5:db:8c:22:7f:a4:5f:23:49:35:dc:b1:e1:00:
03:61:ce:18:e7:01:23:3b:40:38:9b:a1:85:5f:4a:
78:9b:ea:f0:c4:42:52:12:e8:e1:5a:81:30:bc:05:
22:82:20:05:f6:13:45:2f:c4:40:41:b4:27:81:80:
76:18:64:82:df:a1:40:19:7f:a5:dd:94:17:c3:3c:
b1:50:1d:53:24:d3:ae:09:62:13:83:b6:e4:68:0e:
e1:b5:b7:bc:41:40:3a:73:43:9a:9a:37:2d:16:ec:
c1:de:49:03:ea:74:5c:06:b3:b2:eb:e1:2a:a8:14:
59:ee:86:e4:8b:37:dc:7f:b4:ee:bf:58:2d:e4:21:
a7:8d:15:5b:dc:17:75:8e:82:e9:80:1c:f1:f9:6b:
45:7e:ed:7f:e6:a7:6a:81:77:f3:a7:5e:4b:79:9b:
fb:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:1F:0B:E7:A2:E1:4B:89:40:4A:3A:FD:1B:5C:5D:33:A2:D3:FC:08
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8be0b04f-9463-370b-8d93-9d314ada547c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:4878:136::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
06:ad:40:b8:e2:51:4c:45:15:51:de:32:9f:23:4f:04:15:cd:
b7:1a:c4:f0:0c:36:8b:b5:91:90:6d:36:6d:2d:8d:cc:6f:2f:
22:e3:43:a6:7d:81:eb:f8:31:86:fd:c7:35:3f:e6:97:2e:1a:
98:dd:5d:5b:2f:15:b1:d3:8a:e9:49:f6:30:b6:07:df:8d:34:
ed:48:76:8c:db:6c:e0:8a:17:cb:b6:6b:6e:21:43:5d:29:d4:
3c:99:39:7c:9f:83:2d:f8:12:49:98:36:79:cb:00:5f:19:1f:
6d:5b:02:aa:f8:4e:1f:d5:4c:32:8c:5a:23:ab:91:f5:7c:09:
63:ea:24:37:db:7f:84:99:00:e3:2e:73:c9:bf:6e:ad:79:6c:
10:a9:05:b6:01:b3:c2:98:3d:48:ed:86:ef:60:f4:e7:dc:15:
69:cc:5d:ac:56:5f:9d:91:4e:8b:cb:6f:d9:40:45:98:de:fc:
ed:d7:14:f4:70:08:cc:cb:07:88:14:a4:c3:13:20:7d:5c:53:
c7:f0:72:ca:52:f2:12:bb:71:93:40:cb:72:7c:39:05:d1:b6:
24:7c:01:b4:51:04:c2:72:ed:c7:64:e2:2f:d8:8a:dc:1b:05:
3c:47:de:c0:f3:ec:55:f7:8b:3a:fe:38:d9:47:09:4e:05:b1:
4d:66:41:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:45:00 2025 by rpki-client