Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0cd10b2b-b090-3f14-996e-19a04b88a216.roa
File: 0cd10b2b-b090-3f14-996e-19a04b88a216.roa (raw, json)
Hash identifier: lbvLZGcC+an+zaTw8q7n3k3xAlEJU/X1+F7v05GXtNg=
Subject key identifier: 24:F3:A8:A8:1D:DD:3E:C8:E5:C7:B8:6C:4A:26:60:D3:72:69:78:6E
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584913AC44755C7E7F24C696B530
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0cd10b2b-b090-3f14-996e-19a04b88a216.roa
Signing time: Tue 04 Mar 2025 14:00:52 +0000
ROA not before: Tue 04 Mar 2025 14:00:52 +0000
ROA not after: Mon 02 Jun 2025 13:00:52 +0000
asID: 20940
IP address blocks: 2600:14a0:8::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:13:ac:44:75:5c:7e:7f:24:c6:96:b5:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Mar 4 14:00:52 2025 GMT
Not After : Jun 2 13:00:52 2025 GMT
Subject: CN=0480eafe-3ca0-4d87-b340-26ae60b965be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:d3:fe:b6:0b:71:95:af:92:a4:1f:c9:5f:fb:
aa:31:4c:b7:5e:98:e5:c8:ab:00:9f:3a:c6:bf:3a:
12:b6:03:44:b1:30:81:24:6a:d5:ae:7a:65:ff:56:
04:7a:dd:a9:34:f3:09:c3:4b:c3:17:75:2a:b0:c9:
61:42:2e:63:8d:39:5b:da:dd:10:fc:86:05:8a:1b:
4a:f3:69:ab:37:f1:1a:ae:4c:29:17:aa:01:3a:c0:
05:e4:cf:6d:f6:73:ee:19:6f:1a:9c:d3:27:79:aa:
0f:b5:97:06:83:3c:d8:ff:15:77:e6:89:37:17:ce:
f7:5d:21:ff:52:e8:f2:15:f9:80:41:ee:70:38:c2:
2b:45:15:b7:32:96:ed:81:7d:62:bd:6f:a4:cd:00:
17:6a:c1:d0:32:cc:a8:59:a5:4f:89:f8:a4:68:16:
9a:82:6a:4c:b9:4b:30:f9:f5:19:78:66:51:7a:6a:
a1:d1:28:4d:6a:33:7e:82:53:31:83:ae:dd:dd:b7:
15:8a:d2:cb:65:e1:1e:61:59:81:31:bd:d3:31:06:
83:37:48:d1:a2:bf:b2:0d:fb:3a:fd:4b:86:1b:83:
e4:0e:be:fb:73:c9:fd:3f:4e:74:49:b9:18:17:65:
d2:40:4f:9b:cd:55:78:fa:bd:e4:cf:b6:99:ad:01:
dc:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:F3:A8:A8:1D:DD:3E:C8:E5:C7:B8:6C:4A:26:60:D3:72:69:78:6E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0cd10b2b-b090-3f14-996e-19a04b88a216.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:14a0:8::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
14:22:df:ae:ea:05:3c:14:54:7e:ae:68:09:04:de:0d:c0:ec:
40:8d:07:66:3f:8d:29:ab:60:92:9e:30:2d:f0:6b:90:1c:6f:
36:db:2b:c0:0d:f5:df:e9:13:2d:30:33:9f:6c:af:79:bd:10:
81:91:61:bb:5a:9c:09:0e:49:c5:22:59:1c:ad:1a:80:2b:5b:
0b:92:6c:4d:5d:3f:d9:5f:58:0b:06:d1:e6:5a:40:aa:3f:e3:
e7:fa:a7:96:83:4c:75:42:df:5c:e0:72:83:4b:4b:a3:58:2e:
47:22:0e:6c:c1:c6:f6:fc:e9:64:e6:22:ca:5e:b9:99:84:83:
90:15:63:1f:90:d9:4e:05:dd:90:ba:ed:db:02:de:9a:c3:03:
2e:08:c3:cb:35:07:b5:15:e2:63:1c:1a:03:31:76:cc:bb:f0:
01:9b:8b:43:23:04:e6:b1:02:3c:0f:eb:95:f8:08:2c:ba:c7:
a2:c9:7b:bd:13:7a:88:76:32:17:68:e4:d5:5b:78:87:a1:da:
4f:d8:24:e2:18:48:e9:e8:19:8d:29:4c:86:6c:5e:31:66:d9:
86:9d:d1:d8:bf:1d:e5:84:72:c8:1d:2b:23:e7:bc:3a:d0:47:
f9:06:73:ae:84:42:ad:f3:90:8a:3c:06:3d:bc:2b:41:10:8a:
bb:e9:82:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:57:44 2025 by rpki-client