Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/296c5624-78d4-3938-870e-25baa0c5d60c.roa
File: 296c5624-78d4-3938-870e-25baa0c5d60c.roa (raw, json)
Hash identifier: Rhf+aVyz8TJsRoFZfw7PJKmKoEx1krKelsp7ci1CX4g=
Subject key identifier: 13:7B:DA:A1:3F:49:8F:7B:35:65:77:83:DF:38:DB:FC:18:5F:11:58
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584902EC006A47E61F0B5AF5C800
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/296c5624-78d4-3938-870e-25baa0c5d60c.roa
Signing time: Wed 26 Feb 2025 14:00:51 +0000
ROA not before: Wed 26 Feb 2025 14:00:51 +0000
ROA not after: Tue 27 May 2025 13:00:51 +0000
asID: 12222
IP address blocks: 2001:4878:b216::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:02:ec:00:6a:47:e6:1f:0b:5a:f5:c8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Feb 26 14:00:51 2025 GMT
Not After : May 27 13:00:51 2025 GMT
Subject: CN=64f01c66-6f56-4ce4-b088-ffe97f6bd373
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:46:c9:6d:73:a0:1c:37:c0:57:99:d5:cd:5f:
f6:71:4e:ec:77:15:78:6e:f3:a7:af:cf:60:ef:31:
c2:22:1a:20:f7:cc:47:87:2b:37:7b:a3:91:48:fa:
e9:9c:a6:75:54:5e:7d:23:26:56:0a:70:63:91:8c:
cb:bb:3a:90:22:62:55:b3:a3:c0:c5:8a:5e:56:59:
7d:b5:df:a6:eb:73:7d:38:a0:41:68:5c:35:bb:4a:
96:3f:c6:de:8e:d2:48:75:23:ce:50:55:84:1b:ba:
3b:a3:55:c5:ae:7b:24:18:69:c2:62:3a:9d:22:cc:
96:59:8c:88:1b:25:ca:de:a8:ee:a2:5b:8d:8b:b0:
86:a9:01:c2:be:32:d8:d2:a5:43:ff:d5:8b:ea:46:
5d:45:fe:32:f2:fd:9e:95:d7:36:9a:41:3c:34:8a:
67:6c:6c:84:9f:62:8f:05:bf:85:19:1c:32:e6:a1:
79:ee:6a:40:d4:db:b9:50:86:e1:53:a0:cb:da:db:
98:7b:d5:99:b6:5c:65:2d:87:d3:49:34:90:67:4f:
8b:e1:12:dd:43:bd:8b:6b:ba:8e:a5:1f:2b:40:e1:
93:81:01:35:7b:4b:e9:f3:3b:38:f4:32:3a:02:f5:
3e:67:ab:d9:58:10:ef:6f:36:51:d6:14:91:11:b2:
20:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:7B:DA:A1:3F:49:8F:7B:35:65:77:83:DF:38:DB:FC:18:5F:11:58
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/296c5624-78d4-3938-870e-25baa0c5d60c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:4878:b216::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
89:55:26:9b:a4:4d:99:c1:2b:bc:d8:cf:30:51:fc:bf:a4:7c:
90:68:f8:c2:9b:36:08:c0:36:b1:81:f6:00:d3:e8:46:d4:6d:
de:12:84:87:d7:58:6a:ae:ea:1b:69:3d:5b:f1:0a:a6:cc:fa:
c6:83:45:50:98:65:33:02:9a:67:ef:b9:98:f7:70:82:f0:29:
78:8c:c9:f6:ef:9d:3d:87:c2:41:57:8a:30:96:8b:38:23:22:
a1:75:1a:1c:03:ba:79:9f:25:2d:0a:30:5e:3d:85:58:ca:93:
d2:f6:f6:f0:04:0c:26:d0:4b:ab:42:39:f5:85:6d:73:f9:f0:
4f:a6:27:8b:29:72:b2:a8:54:53:20:f0:ab:72:58:12:11:0b:
9c:0e:ac:90:9f:cc:cc:16:67:be:6d:9c:ad:bb:d6:59:aa:6e:
d7:7b:04:22:dd:25:99:1f:f9:55:61:25:e4:73:01:23:53:70:
aa:38:f9:e0:80:62:fe:f7:16:d8:b4:51:68:4e:c3:2d:66:d5:
83:5d:8c:be:f3:41:80:5d:03:70:5c:67:8c:5b:45:e2:8a:c0:
3a:e5:1b:1c:57:e0:d3:be:41:76:80:e9:53:b1:48:30:89:17:
5e:55:7f:f9:b1:c5:ef:b1:b5:8c:8d:af:be:17:9c:90:dc:3f:
8d:28:a5:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 11:33:08 2025 by rpki-client