Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e338c053-4245-3a14-a659-c72c06efd67e.roa
File: e338c053-4245-3a14-a659-c72c06efd67e.roa (raw, json)
Hash identifier: 3uFGx0tO44EneEAoeZGSAtb+OHIzxvM1OmKULPdkmCI=
Subject key identifier: C3:D7:DD:AB:F1:80:35:DF:C2:A6:79:14:A3:F4:29:7A:99:47:D6:D9
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848222FD5D8A79CA20387557A00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e338c053-4245-3a14-a659-c72c06efd67e.roa
Signing time: Sun 08 Dec 2024 02:00:39 +0000
ROA not before: Sun 08 Dec 2024 02:00:39 +0000
ROA not after: Sat 08 Mar 2025 02:00:39 +0000
asID: 12222
IP address blocks: 2001:4878:c010::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:22:2f:d5:d8:a7:9c:a2:03:87:55:7a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 8 02:00:39 2024 GMT
Not After : Mar 8 02:00:39 2025 GMT
Subject: CN=bc054816-b16f-4f9d-abb5-de237cd4a559
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:4b:cf:25:92:ac:91:76:9e:15:c0:c3:d8:a6:
2c:33:a0:09:73:68:67:9a:b5:53:28:8d:b6:ac:88:
bc:0e:58:39:9c:b7:e8:aa:5e:21:c4:85:d8:b0:52:
d1:1b:80:85:0e:43:ac:69:06:6d:b7:02:08:fb:3c:
a6:82:d4:b6:36:33:18:07:96:70:e4:43:c4:a3:1b:
9b:89:3c:70:cf:59:bd:91:be:d9:ad:75:66:0b:9d:
d5:ba:4b:a0:70:a2:a6:b9:20:90:46:37:16:76:ac:
08:67:3a:b4:4f:16:5e:5b:bb:f4:29:c3:13:c1:20:
50:d3:f9:81:a5:8c:8e:32:25:e7:11:2a:c6:b2:0c:
05:0a:04:88:dc:15:15:72:4b:46:1d:fe:de:6d:a2:
7e:20:2a:f9:c2:fa:9e:6e:c4:7b:de:f3:ee:c4:b5:
a2:dd:0d:5e:08:b4:5c:8f:5a:62:7e:ab:01:5a:5a:
38:b9:d0:08:c6:bf:fd:3d:13:89:5e:9e:9e:e4:3b:
15:57:54:ed:65:0a:af:4a:f9:49:b1:06:61:0a:b0:
ba:a2:b6:37:64:ef:c2:43:a3:9f:3f:42:13:b4:98:
be:be:b3:a7:2d:51:f8:de:fd:44:cf:83:83:c0:c6:
89:18:cf:49:8e:15:c3:f0:9b:40:c1:b8:db:91:29:
31:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:D7:DD:AB:F1:80:35:DF:C2:A6:79:14:A3:F4:29:7A:99:47:D6:D9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e338c053-4245-3a14-a659-c72c06efd67e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:4878:c010::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
24:17:33:40:16:be:d6:2a:56:5c:45:11:33:6b:e7:c5:e5:f4:
5a:d0:e7:19:8f:e3:be:d7:1b:33:aa:91:3e:6c:51:3b:02:fd:
bc:c8:16:2b:4d:08:07:1a:3e:8c:77:10:a7:52:83:00:9c:a1:
68:1a:d7:c8:d2:8c:0b:0c:c2:70:3d:ff:46:62:01:21:41:8d:
c6:39:cb:ab:35:2e:89:07:4f:79:c2:ab:36:a6:8d:2a:e5:e1:
f1:a7:ea:52:1a:13:25:71:c4:e0:1f:9b:ff:93:0a:6e:af:a2:
8a:e2:b7:8a:ae:ff:f9:71:1d:d5:97:14:5c:11:a4:75:56:ac:
2a:b9:7c:ab:5b:61:e1:e2:63:e7:cb:bf:fe:6e:0a:c0:d1:61:
c9:a9:89:b8:c6:af:62:4d:c8:05:f3:17:db:7d:fd:1e:f8:78:
ba:20:e1:87:38:eb:77:bf:56:20:c1:49:87:32:e5:26:b5:05:
99:5b:5c:52:dd:3d:8b:27:14:f0:c6:a9:ac:8f:1f:9e:f0:e5:
87:2d:01:a0:34:31:59:ba:1a:66:a6:82:3b:07:9e:9f:14:ad:
49:bd:81:50:3c:d9:78:70:fe:d9:ec:a8:6f:fa:b7:35:06:1c:
23:02:e3:0d:0d:44:81:2a:a3:70:62:59:8d:ee:f2:3e:89:b6:
ba:e5:48:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:34:08 2025 by rpki-client