Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d9ff0c2e-878a-3253-8f86-4d25cba06841.roa
File: d9ff0c2e-878a-3253-8f86-4d25cba06841.roa (raw, json)
Hash identifier: 4+Zs0dgxHMY8qo2kI8HdaC4nHoNDOfgKoYk3sOELq60=
Subject key identifier: B4:BF:1A:5D:8D:29:0F:D3:BB:6D:5A:D8:59:BB:A3:02:43:D6:59:DF
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858481C9A87FE1C6DFBD62803E780
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d9ff0c2e-878a-3253-8f86-4d25cba06841.roa
Signing time: Fri 06 Dec 2024 02:00:39 +0000
ROA not before: Fri 06 Dec 2024 02:00:39 +0000
ROA not after: Thu 06 Mar 2025 02:00:39 +0000
asID: 12222
IP address blocks: 2001:4878:4347::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:1c:9a:87:fe:1c:6d:fb:d6:28:03:e7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 6 02:00:39 2024 GMT
Not After : Mar 6 02:00:39 2025 GMT
Subject: CN=bba3b302-31e4-4768-9bd7-414b2e1c8b14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ca:cf:cf:89:f7:79:ff:a7:a1:ce:76:1f:ab:
ad:60:d7:c6:33:3e:c8:cd:35:c4:48:be:80:d9:82:
46:b5:8e:21:03:b6:97:c3:ba:b6:a1:95:50:f7:93:
0e:fe:a0:7a:d0:5a:b7:67:ea:ee:f3:a8:64:f3:5f:
6e:2c:e7:e0:43:90:a9:3e:11:93:54:02:7c:da:eb:
c7:50:b2:3a:92:58:ce:41:49:22:7c:85:b9:1e:df:
ab:0a:77:2b:46:95:a2:ac:fa:58:17:be:61:ef:2f:
dd:cc:02:cb:bf:6e:42:7e:9b:d5:9b:1a:ad:d0:db:
f2:bd:09:13:c1:9e:60:12:f6:51:ec:62:63:bc:31:
a1:04:35:63:21:b6:92:a2:d3:0a:55:22:ac:af:e3:
fe:28:b7:19:d4:99:dd:d1:72:a9:06:74:de:74:8f:
68:8c:7a:7a:f9:25:df:ad:cf:8f:5c:fd:4c:01:a0:
3f:0c:4f:35:06:2f:72:93:05:2a:72:8d:96:c6:e1:
e9:5a:d5:5d:ec:79:eb:ea:26:99:52:96:f9:2f:26:
12:70:c2:c6:82:a1:32:25:a4:4e:a2:2e:bf:94:dc:
98:54:57:e2:a3:a2:87:09:57:fe:ad:93:f8:6d:c0:
16:6e:41:9a:be:28:68:02:ed:70:4e:50:fc:ad:8e:
e1:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:BF:1A:5D:8D:29:0F:D3:BB:6D:5A:D8:59:BB:A3:02:43:D6:59:DF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d9ff0c2e-878a-3253-8f86-4d25cba06841.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:4878:4347::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
68:df:59:30:b7:3a:6d:97:76:8f:3a:8b:2c:7f:7c:f0:85:02:
44:be:0d:ac:ed:00:91:d0:e6:f2:4a:61:f4:29:f5:f8:14:0a:
28:9f:44:9e:9a:e5:ae:c4:c9:d9:22:c8:e2:01:ee:ed:66:e3:
3c:ab:25:d5:7e:a3:6d:fb:a8:6d:d6:e2:1c:96:28:98:af:ac:
fc:5a:80:62:2d:9e:ba:ed:18:2e:5d:67:db:e9:98:bc:cd:6c:
ca:58:51:cd:ff:06:a1:f0:70:85:b1:f1:97:ab:f6:7f:2e:37:
f0:3f:ea:2d:a4:f7:01:b3:73:8c:64:bd:a6:51:a2:9a:84:02:
fb:1c:24:a3:c8:e3:b2:6c:ba:1a:0a:dd:de:8e:b7:d3:eb:2a:
e7:d4:78:17:ca:8d:27:85:42:6d:db:fe:35:25:1f:e0:06:8e:
0b:a5:98:78:30:55:4f:c7:dd:73:4e:9b:fd:63:de:45:2b:ff:
6f:c1:1e:d3:2a:fd:61:ef:80:85:3f:c2:53:09:1d:5b:af:14:
9d:49:3c:cd:1b:df:3f:88:af:37:91:57:c6:3f:1f:ed:4d:c5:
ff:8a:17:4c:3c:58:40:8d:cd:85:cc:6f:8e:76:b7:6f:aa:bf:
fd:a4:61:24:37:94:f7:82:92:da:88:4a:e1:b1:3e:22:6c:ab:
63:50:b7:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:43:11 2025 by rpki-client