Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c9862c02-9f6e-316e-afd2-a6099ac02e0f.roa
File: c9862c02-9f6e-316e-afd2-a6099ac02e0f.roa (raw, json)
Hash identifier: SbSPk7scXncvGbw+f9VCyvR+wNBMID3kCmpIYAWIxtw=
Subject key identifier: 20:0D:79:E7:65:C1:63:EA:5D:17:1A:D1:21:14:79:B4:23:F0:50:4C
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858481C9A862082F244278DED7280
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c9862c02-9f6e-316e-afd2-a6099ac02e0f.roa
Signing time: Fri 06 Dec 2024 02:00:39 +0000
ROA not before: Fri 06 Dec 2024 02:00:39 +0000
ROA not after: Thu 06 Mar 2025 02:00:39 +0000
asID: 12222
IP address blocks: 2001:4878:2164::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:1c:9a:86:20:82:f2:44:27:8d:ed:72:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 6 02:00:39 2024 GMT
Not After : Mar 6 02:00:39 2025 GMT
Subject: CN=1295c136-7083-4272-b115-0cd2f20aabbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:77:77:c0:5b:73:ff:fb:44:1a:67:1b:a3:c7:
ce:f1:cd:ca:fb:78:ad:9f:2f:b9:27:e2:ce:3c:38:
a6:91:ae:a9:a8:10:61:96:3a:bb:a1:4f:db:95:b2:
ec:c4:0b:9e:02:9b:7e:96:11:d0:17:aa:88:e1:24:
1a:46:86:d4:4b:3a:41:7a:35:ab:77:57:36:fa:f6:
68:16:37:b9:48:a3:bc:ea:46:a1:ea:ea:b7:c6:d6:
d2:be:94:f0:39:9f:c4:ef:07:d0:1f:67:a9:c9:d2:
27:d3:41:1f:8b:ec:44:6c:1c:01:52:c2:1a:7a:c3:
8c:05:b1:26:63:a2:b4:31:66:45:80:45:f5:fe:3d:
d3:21:bf:55:5d:0a:44:bf:9f:9d:48:12:2a:4e:b1:
28:e2:3a:27:4b:73:c0:cf:c1:8c:2b:7a:52:97:0e:
db:d6:b6:b0:8b:4e:08:a8:3a:8e:44:30:b1:c9:4b:
be:49:a6:2d:f5:de:2e:09:0f:3b:f4:76:34:a4:cc:
9f:84:29:67:94:06:8a:c1:f2:b9:ef:33:cf:13:17:
07:e9:1f:38:b2:a2:87:d6:98:da:be:77:af:38:65:
85:68:4a:0f:b2:d6:41:e2:c0:d1:44:8b:32:13:4d:
2c:28:7c:45:92:e5:f9:dc:51:4d:ea:36:46:79:e4:
85:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:0D:79:E7:65:C1:63:EA:5D:17:1A:D1:21:14:79:B4:23:F0:50:4C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c9862c02-9f6e-316e-afd2-a6099ac02e0f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:4878:2164::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7d:45:ab:2f:12:e2:12:c5:7e:2f:bc:6d:ff:2b:30:71:1f:67:
10:f0:d2:5e:20:90:de:45:84:38:b2:48:36:a7:22:0d:4a:69:
e5:67:f0:14:fb:96:25:76:dd:9d:dc:c3:82:f7:cb:c2:b3:05:
9a:65:a2:ab:32:8c:68:1d:df:69:a8:c1:5b:7c:d9:05:dc:7d:
d5:41:3c:0d:95:4d:a4:21:54:c4:86:2f:ab:27:e5:23:6f:30:
7a:f1:fc:9a:89:ae:67:8b:5e:e9:e9:7e:90:a3:bf:5e:f5:ab:
84:2a:09:22:5a:47:61:a7:df:8a:e2:d2:3e:9e:73:47:67:51:
a0:52:bb:84:2c:97:c4:98:91:1f:af:51:d0:b0:68:e0:46:63:
fc:26:74:97:c4:52:5b:46:2a:74:70:a9:52:89:5f:ca:89:dd:
03:29:bd:32:17:f8:ac:c1:3d:35:0d:94:fd:83:0d:ec:17:54:
59:62:d9:a9:8a:5b:3a:48:a2:53:83:e7:65:90:c4:8f:0e:ba:
af:91:15:a0:46:0d:29:b2:0f:a1:64:28:e3:5e:93:e8:7c:71:
ee:9e:7d:d0:46:c3:8f:3e:94:4f:66:58:07:2c:63:74:f9:80:
d8:14:bd:de:92:80:53:9f:ce:f9:9e:3b:22:bf:3b:99:6e:ef:
af:5a:5d:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 12:20:50 2025 by rpki-client