Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1dd57f63-4dd8-37c7-a673-4f1887b0f75e.roa
File: 1dd57f63-4dd8-37c7-a673-4f1887b0f75e.roa (raw, json)
Hash identifier: 3szbDk6NctF9NVqFy2WzxBMDvmt+VZG4MQ7WFMiJ59Q=
Subject key identifier: AC:E7:5F:09:A4:54:06:8C:61:96:17:1C:3C:10:6A:2D:81:79:BB:06
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848A13625E480324399953C6580
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1dd57f63-4dd8-37c7-a673-4f1887b0f75e.roa
Signing time: Wed 22 Jan 2025 14:00:52 +0000
ROA not before: Wed 22 Jan 2025 14:00:52 +0000
ROA not after: Tue 22 Apr 2025 13:00:52 +0000
asID: 20940
IP address blocks: 2600:140b:2200::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a1:36:25:e4:80:32:43:99:95:3c:65:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 22 14:00:52 2025 GMT
Not After : Apr 22 13:00:52 2025 GMT
Subject: CN=ca5b895b-850c-4248-a830-7ea20688f0be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:0d:8d:3a:25:5c:e6:e3:a7:e6:73:03:f5:8b:
37:90:f2:df:4c:13:da:f9:fa:dd:22:6c:b0:2c:44:
bc:0f:e7:6f:8c:ee:aa:91:07:1e:7d:ad:55:8f:87:
66:ca:86:b3:31:6a:64:06:7f:82:a0:be:85:9c:13:
cc:93:73:e5:b3:5c:1b:2e:f9:08:e5:89:a5:cc:20:
5b:4b:39:b4:19:16:a2:93:f2:cc:2a:be:e8:00:fa:
b8:aa:71:d4:63:1a:1e:00:38:8c:4f:d0:40:25:0e:
da:44:24:43:09:0d:67:57:a9:b4:6a:f1:ac:c8:72:
f1:51:29:4d:d7:f2:8e:6a:96:56:e5:f5:6e:42:3f:
f7:dc:91:d5:a8:ac:56:98:db:f7:c9:0c:73:84:39:
13:d7:0a:82:26:a5:35:6f:8b:0c:1e:7d:7d:65:3e:
b0:cf:56:c2:2d:03:0c:7d:1d:7b:73:ae:ac:8e:e6:
8c:32:4d:1b:40:f7:bc:67:83:62:bb:7b:20:49:ed:
38:c3:8e:fd:25:7a:1c:c4:20:3a:ff:30:68:b0:34:
c9:52:01:2a:97:2d:d5:b3:9e:ce:54:0a:6e:9b:7c:
e9:df:ab:6f:f6:e9:22:79:29:bf:ae:e1:8e:b7:8f:
1d:0f:1e:b4:01:d6:aa:ea:a0:ac:c6:a2:94:a1:21:
0f:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:E7:5F:09:A4:54:06:8C:61:96:17:1C:3C:10:6A:2D:81:79:BB:06
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1dd57f63-4dd8-37c7-a673-4f1887b0f75e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:140b:2200::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3e:98:a4:c5:56:b6:7f:15:7a:de:fc:06:e0:91:2c:56:f6:54:
8d:05:42:c6:08:dd:ed:dc:2c:3a:bb:f9:bb:cf:9b:60:ad:84:
b0:51:c1:b4:7d:9c:3e:8b:87:14:5f:1a:40:07:c2:b8:71:68:
98:22:97:6b:cb:07:c9:4f:9f:08:77:7e:1f:2e:a2:77:9e:fe:
c3:dc:57:de:93:e7:94:06:43:f0:ba:2e:e9:b0:a8:b6:0a:60:
82:59:50:a1:a8:cf:41:9c:07:f7:22:4b:53:29:42:bb:2d:ec:
ae:fb:0c:d1:e6:34:cf:e6:23:6a:54:f7:e1:bf:67:79:21:89:
23:b1:d7:09:ce:4b:5a:22:4d:dd:b1:c0:4c:b4:fd:0d:fd:5b:
b9:50:e4:3d:39:7d:c6:00:4a:0b:c1:90:e3:7e:a9:dd:3c:03:
d5:7a:7b:3c:5a:74:fc:ba:2a:8d:e7:cd:08:e5:ce:86:25:00:
67:4b:8a:83:2f:76:46:91:ae:8f:13:55:bd:ed:33:8e:47:40:
86:10:eb:66:46:97:5a:54:02:5f:70:8e:4a:15:f8:76:52:6c:
a5:ba:66:87:5b:97:43:73:70:31:6d:04:86:13:e7:30:80:00:
fc:18:b1:eb:46:58:22:30:1d:38:5e:db:42:bf:5c:dd:d0:34:
17:1b:61:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:58:49 2025 by rpki-client