Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ab09c07a-dd77-3414-a8f6-7a6c42d872f1.roa
File: ab09c07a-dd77-3414-a8f6-7a6c42d872f1.roa (raw, json)
Hash identifier: Cm3Hg7N4kiJ5hhA7gLhsgy5zCUZ3RSj/vh9ibsjW2rk=
Subject key identifier: 39:46:C3:1F:F7:55:85:1E:31:B7:10:06:55:5F:47:CB:1A:83:55:E6
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285847F584DF9147916C77FF5B57E0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ab09c07a-dd77-3414-a8f6-7a6c42d872f1.roa
Signing time: Fri 22 Nov 2024 02:00:40 +0000
ROA not before: Fri 22 Nov 2024 02:00:40 +0000
ROA not after: Thu 20 Feb 2025 02:00:40 +0000
asID: 20940
IP address blocks: 2600:1488:a007::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:f5:84:df:91:47:91:6c:77:ff:5b:57:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Nov 22 02:00:40 2024 GMT
Not After : Feb 20 02:00:40 2025 GMT
Subject: CN=dd90683d-16c5-4aa0-bfe3-ee96d9a16fdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:6a:55:94:75:8b:7b:2b:d8:2c:7c:4b:1c:28:
de:21:1b:84:98:32:78:28:bb:52:03:b6:3b:35:ce:
7e:f8:5f:9e:d9:ea:af:13:da:b8:33:b4:99:f9:71:
09:f0:83:4f:b4:3c:6c:57:7f:72:28:eb:c7:1d:81:
8f:67:73:cc:69:6a:ad:24:97:26:7b:ce:31:30:9e:
66:23:8b:f1:92:63:c5:57:87:a4:48:d5:d6:76:52:
1b:4a:91:a0:7d:ce:84:54:ef:6f:9a:41:9b:1a:c0:
33:89:6f:9a:10:25:ef:09:d2:82:ba:c5:05:f4:5b:
f5:6b:de:21:3c:30:e6:3b:da:3c:9d:fd:04:b1:8c:
4e:bd:f6:d4:5a:0c:e8:61:22:08:c1:95:4c:14:ba:
72:1e:e7:c5:e9:47:62:9a:29:0b:fa:cd:48:fd:e4:
e4:d0:80:c0:bb:a0:b8:13:22:a3:ed:a0:74:4f:f6:
d4:9a:56:10:66:ca:f0:d2:6e:71:28:2a:0a:00:d3:
64:63:7f:96:62:15:9a:cf:5c:10:9f:b4:8a:94:c0:
37:1c:1e:bd:bb:3c:cd:47:92:a7:d4:61:26:82:98:
77:c4:44:a1:56:38:dd:27:13:04:23:26:b2:c8:50:
f2:7b:62:59:f4:da:de:d4:a7:21:c6:a1:38:63:d4:
ba:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:46:C3:1F:F7:55:85:1E:31:B7:10:06:55:5F:47:CB:1A:83:55:E6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ab09c07a-dd77-3414-a8f6-7a6c42d872f1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:1488:a007::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
71:3b:63:45:12:e8:91:63:99:6d:b4:87:fa:d1:40:5e:74:2c:
96:e8:7d:d2:17:26:c5:5c:a5:48:c8:07:5a:13:d1:b3:eb:48:
bd:21:11:1a:ed:01:57:22:08:f9:75:84:1a:fc:78:68:b0:a9:
7b:79:50:97:da:5e:41:90:c7:fa:de:47:23:7a:f3:1e:3a:84:
97:a4:a2:2e:d8:5b:a7:b4:50:13:a5:aa:97:18:be:78:8c:ae:
0f:05:70:12:ce:ad:93:1d:8d:67:f3:fa:9a:6c:8f:6a:17:09:
e0:02:c3:60:80:75:04:6c:87:95:85:4c:f4:02:01:82:c9:71:
3f:07:bb:77:8c:65:b9:85:30:41:d0:ae:09:df:35:3d:0e:84:
28:a8:16:21:83:ea:03:4c:ad:c5:e3:75:81:77:24:a8:16:ec:
3f:cf:99:e3:23:e6:60:fc:6e:14:86:96:08:cf:10:95:b4:2f:
a1:27:0b:51:5f:cb:a2:86:8e:55:ea:cf:0b:0a:f9:67:fa:cf:
3f:c8:2a:61:f4:e0:ee:34:38:3f:1e:8e:9f:72:9c:94:52:91:
7c:e5:0e:72:f5:bb:6a:e8:d0:7f:48:cb:0e:fc:b2:d5:7a:2e:
d4:2f:13:52:52:bb:c3:ad:bf:3f:95:c4:1c:a8:7f:7d:8e:f2:
f9:0a:20:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 01:51:22 2025 by rpki-client