Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/96cce0b9-6dbd-3a0a-aa86-6b9a084a9987.roa
File: 96cce0b9-6dbd-3a0a-aa86-6b9a084a9987.roa (raw, json)
Hash identifier: h/TRInZRsb7q9hVF3Ch9E79oQfK7QUYTjmkSDXgO3RI=
Subject key identifier: C1:F3:30:7A:CB:66:6E:36:92:C4:53:96:6E:CA:CF:AA:9E:FD:77:75
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858481F652756E9BA2754780EDE00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/96cce0b9-6dbd-3a0a-aa86-6b9a084a9987.roa
Signing time: Sat 07 Dec 2024 02:00:39 +0000
ROA not before: Sat 07 Dec 2024 02:00:39 +0000
ROA not after: Fri 07 Mar 2025 02:00:39 +0000
asID: 12222
IP address blocks: 2001:4878:8215::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:1f:65:27:56:e9:ba:27:54:78:0e:de:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 7 02:00:39 2024 GMT
Not After : Mar 7 02:00:39 2025 GMT
Subject: CN=be2f5df7-71d3-4b39-bd56-690213290ae8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:8d:df:13:74:80:30:fd:bc:d6:00:14:96:fe:
1e:38:2d:81:f1:3b:94:75:be:bd:28:0b:b8:94:8d:
9c:28:0a:2d:3c:2a:05:26:fe:a7:a9:d8:52:a2:5e:
1a:24:16:ad:1f:93:91:9e:9d:02:cb:20:53:fa:de:
64:78:6a:76:6d:80:a1:81:f2:58:9c:23:42:19:74:
b1:d6:62:c7:f3:59:6b:6f:e3:5c:37:03:a6:59:08:
ca:5c:ff:dc:f4:db:47:0d:c6:57:9e:03:b5:1c:e2:
a4:6b:2c:47:af:7f:50:91:46:77:7c:33:55:fc:39:
6c:60:26:b5:74:ef:68:92:26:71:87:c8:e8:b7:af:
83:c0:f6:2f:2a:31:a3:71:45:a6:a5:f1:dd:bd:c6:
c9:71:d3:f4:c7:fe:51:f6:30:a7:64:44:8a:03:c4:
9c:73:ea:3f:fb:46:dc:ac:02:89:0c:58:09:f3:3e:
61:40:87:de:85:75:59:24:eb:79:10:7b:2f:da:eb:
91:51:6f:9c:ea:e7:64:40:56:bb:ce:b4:be:87:87:
b9:c4:fb:d6:83:5a:9d:e8:47:01:97:b9:9a:f3:8d:
e4:aa:63:04:78:56:f7:4c:d5:96:5f:f0:f4:3a:f8:
34:d8:2a:2e:8d:f8:d8:19:5e:5c:1f:0b:b5:71:b2:
dd:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:F3:30:7A:CB:66:6E:36:92:C4:53:96:6E:CA:CF:AA:9E:FD:77:75
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/96cce0b9-6dbd-3a0a-aa86-6b9a084a9987.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:4878:8215::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
86:2b:60:36:4c:0c:dd:db:cc:86:e1:1a:02:61:75:8c:b1:a2:
ed:d1:f5:27:89:43:59:a1:9a:4d:6d:1e:e2:58:f0:49:fd:d5:
dc:a7:28:54:1d:23:b6:66:f1:b5:5e:1e:5d:63:4c:35:3a:12:
45:3a:ec:d7:5d:f7:61:b5:9b:60:f7:9e:61:c5:be:e7:01:ac:
a2:8d:3f:df:fb:6e:96:28:71:4e:c6:82:2a:2b:bf:06:db:6c:
e9:3e:fc:6a:f1:fb:d8:4c:fa:84:1a:c6:6c:1a:38:f9:33:7c:
50:4a:c4:9a:36:cb:26:8d:ae:54:9d:3e:bc:82:31:92:97:65:
3f:69:bc:dd:2a:35:14:f7:76:27:e5:74:70:21:d7:73:6f:19:
27:7b:ee:f3:9b:66:a6:0b:fe:1d:6f:86:e7:41:78:17:67:dc:
82:1f:92:34:c3:c1:94:97:56:8f:e6:40:a8:99:6d:64:60:e9:
b1:f2:21:7c:65:ba:f5:85:03:53:41:26:e3:29:ac:a9:b2:83:
a6:21:7d:ee:c4:20:75:79:3d:16:67:1a:85:af:f7:82:d5:b9:
cd:9d:79:c7:81:f0:76:e8:fd:42:a9:64:4a:45:a4:14:40:03:
82:e6:c4:71:f1:4c:1b:c7:e9:37:0e:fe:ce:4d:70:15:23:55:
3a:74:39:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:35:37 2025 by rpki-client