Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a51f6d22-d81f-32ae-a32c-b267b380db27.roa
File: a51f6d22-d81f-32ae-a32c-b267b380db27.roa (raw, json)
Hash identifier: KBHZqtjUSJld+yUWVWFK7vOzh70NJV9n2MEYhzFNe00=
Subject key identifier: 72:A1:B0:47:44:F3:1A:5A:23:FD:7D:62:2B:96:B6:8E:28:70:2A:FE
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848222FD6096E0FBD31F1D3E020
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a51f6d22-d81f-32ae-a32c-b267b380db27.roa
Signing time: Sun 08 Dec 2024 02:00:39 +0000
ROA not before: Sun 08 Dec 2024 02:00:39 +0000
ROA not after: Sat 08 Mar 2025 02:00:39 +0000
asID: 12222
IP address blocks: 2001:4878:c038::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:22:2f:d6:09:6e:0f:bd:31:f1:d3:e0:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 8 02:00:39 2024 GMT
Not After : Mar 8 02:00:39 2025 GMT
Subject: CN=578d4738-ffce-4d82-b52d-28dc21c1b1ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:17:cb:d9:44:e1:8a:ea:0d:44:e2:bc:9d:ca:
67:da:af:f1:a7:9d:35:c3:c6:93:33:82:71:04:de:
9c:59:1b:9f:04:77:d9:d2:90:ad:96:43:06:e4:f2:
0f:16:0e:ad:06:85:76:ec:ff:c9:aa:4f:24:30:72:
59:94:70:91:dd:40:7a:5f:c2:85:8f:e7:7c:f4:3b:
c3:5e:8b:aa:81:7f:a1:dd:f2:bc:01:d0:30:08:e0:
5f:bb:0c:e0:a1:eb:0e:43:28:e1:16:a6:e5:0b:4f:
f8:1f:ba:c7:40:b4:6e:e2:20:18:c6:9e:00:b0:38:
ff:6f:85:43:62:f1:eb:d8:67:3f:5a:f9:cd:d8:d4:
ad:b9:c8:bc:cf:d0:c2:63:45:d0:6f:b2:da:41:cc:
8c:70:88:35:8b:b7:7a:f1:d4:a0:03:34:19:15:81:
7f:cd:8d:ad:ea:32:26:e9:c3:30:ba:9a:65:7c:69:
17:0e:67:04:b5:11:12:1b:14:c4:5f:e8:9a:c6:91:
f1:42:01:7f:97:37:87:1c:38:fe:03:40:b5:10:cf:
21:91:cd:a4:b9:12:c2:65:e2:37:56:ce:df:bf:1b:
eb:f2:8b:77:3a:58:55:f9:d2:5c:8d:3e:e8:44:55:
ef:69:e9:56:a4:32:46:b0:f9:39:c8:02:65:92:bd:
65:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:A1:B0:47:44:F3:1A:5A:23:FD:7D:62:2B:96:B6:8E:28:70:2A:FE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a51f6d22-d81f-32ae-a32c-b267b380db27.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:4878:c038::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2f:39:e2:12:d1:62:3b:76:82:63:13:95:0c:29:e4:2d:8b:e3:
5e:92:2b:cd:26:21:73:8b:c3:16:4b:e3:66:1c:bd:de:19:03:
a8:21:0c:6f:5a:fd:96:e3:4d:fd:f1:9b:b9:dc:55:00:f7:2d:
16:d6:9d:a1:b2:aa:c5:78:4e:94:07:c5:b9:74:31:b8:2d:ce:
b1:81:aa:c6:4f:98:19:79:e1:8c:6d:d2:1e:74:2d:2c:ff:ca:
05:7a:26:59:11:59:ec:70:1b:bc:de:bc:2a:ab:5c:2d:f3:42:
74:c4:a3:39:99:e9:96:f8:90:17:2c:e3:94:89:de:a9:36:4b:
f3:74:05:70:2d:0a:ef:e8:43:19:f9:d8:a3:ff:8f:f9:30:e1:
fb:82:20:4b:8a:a1:13:b4:8d:b3:9e:c0:62:8e:9f:4e:e1:4e:
c8:85:9d:8f:2b:79:20:e5:85:4d:79:55:9f:fe:8a:24:cd:39:
b7:57:72:67:49:90:35:72:fb:65:56:95:65:15:b1:f3:c0:22:
6c:bf:5e:a0:6c:b9:9d:cf:af:81:43:83:5a:dd:2b:59:97:90:
c7:89:71:e9:df:dd:30:e5:ef:3e:96:3c:83:10:be:a8:c5:d8:
c1:0a:41:91:e7:21:1b:94:5e:e2:63:02:1e:2d:30:ea:52:d1:
71:cf:e6:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:32:31 2025 by rpki-client