Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/35c02588-ef9a-32cb-8f98-53e462f32b95.roa
File: 35c02588-ef9a-32cb-8f98-53e462f32b95.roa (raw, json)
Hash identifier: EktbAIq+Z+J3L7ZYy2p7lBD/a++sCsTwI/XppbUH938=
Subject key identifier: 92:DE:34:66:9B:A6:B8:A6:62:1C:FC:C5:42:64:1F:76:40:F6:20:3C
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584898D61AF461664D4118942C80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/35c02588-ef9a-32cb-8f98-53e462f32b95.roa
Signing time: Sun 19 Jan 2025 14:00:52 +0000
ROA not before: Sun 19 Jan 2025 14:00:52 +0000
ROA not after: Sat 19 Apr 2025 13:00:52 +0000
asID: 20940
IP address blocks: 2600:141c:c000::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:98:d6:1a:f4:61:66:4d:41:18:94:2c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 19 14:00:52 2025 GMT
Not After : Apr 19 13:00:52 2025 GMT
Subject: CN=a80625b0-74f9-4d23-9a8d-744a5d04846b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:19:58:e5:1c:a6:43:91:55:2c:c7:65:1b:f2:
2c:b9:6e:89:ee:38:d3:bb:53:0f:de:a6:7d:0e:2a:
92:a5:5f:4e:5e:87:15:f6:b7:08:15:df:88:63:e3:
52:0b:37:fd:bd:69:01:b5:c8:f0:38:cd:1f:c5:18:
7e:64:75:d3:c9:c5:66:2e:2f:d2:a7:28:d2:f3:aa:
8d:cc:da:e2:17:ca:1c:2a:1e:87:69:4d:16:2f:7d:
9c:e4:2a:62:2d:63:a7:f9:cd:7b:01:e3:32:83:db:
59:80:00:eb:6d:01:92:cb:f0:be:88:a1:ff:39:de:
e9:ff:39:84:f8:49:83:5a:46:10:4e:d8:19:e9:65:
ea:9b:a5:3c:22:e5:00:06:8c:68:82:70:af:ed:50:
3d:03:99:82:69:25:10:f6:5f:d1:d9:4d:5f:ac:cf:
ff:cb:61:5f:04:12:11:cc:6c:62:16:5c:46:31:1e:
fe:bc:71:2e:af:2e:92:b4:4b:19:5d:2d:88:71:1b:
6d:fd:f6:e4:ba:12:e3:88:50:06:e8:98:07:44:7b:
6f:ad:3c:db:ff:4f:b4:57:6c:41:dc:a8:a8:37:72:
93:5d:5c:ba:67:f9:3e:88:f2:b3:10:57:a9:9d:9a:
65:41:8a:1d:fc:c8:cb:b3:cb:fc:e1:4f:3e:f2:9e:
45:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:DE:34:66:9B:A6:B8:A6:62:1C:FC:C5:42:64:1F:76:40:F6:20:3C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/35c02588-ef9a-32cb-8f98-53e462f32b95.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:141c:c000::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
81:bb:e9:d4:3a:e4:6d:3e:b4:03:3e:e3:68:61:d5:ac:c8:20:
6b:8c:0e:83:0b:c1:2a:02:8d:f2:29:9c:48:d9:20:3d:67:39:
89:6f:ff:9f:5b:4e:c2:ee:4f:6a:dc:bf:15:3d:c3:ac:ea:54:
66:05:8c:cb:9b:75:bc:83:3a:1a:13:29:58:0a:14:cb:ca:5e:
a5:55:65:04:f4:04:8c:f7:d7:1c:af:3a:f5:23:3d:97:64:e9:
d7:29:6d:28:d9:3f:9c:fd:cd:e9:e9:8c:8f:da:dc:2c:96:39:
61:fa:ec:ad:62:c7:fa:ce:cf:aa:dd:f9:6e:cb:d8:42:af:35:
b9:69:d6:07:71:9c:a2:18:81:58:db:7d:77:d0:24:8e:f8:bd:
e1:b8:1f:3f:53:d2:15:f0:e0:a7:0b:96:b0:dc:c6:66:3c:86:
76:75:d4:f6:b6:bc:08:bf:c3:72:c7:60:f7:36:2a:da:d8:60:
9a:8e:d7:28:a4:6a:bf:24:49:61:ea:f0:e2:58:e9:38:0b:ca:
40:27:2c:68:da:93:9d:47:af:73:ef:5e:d6:73:f4:8c:f8:d5:
61:37:7f:b8:3d:3b:33:f8:ea:bf:ef:23:7f:ba:81:50:81:83:
57:cd:2a:02:a0:c8:1d:fc:cf:2b:ed:82:1d:ad:08:79:12:bb:
68:4c:58:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:17:27 2025 by rpki-client