Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3b9fe6af-4127-3909-bb31-619bfe6bb5db.roa
File: 3b9fe6af-4127-3909-bb31-619bfe6bb5db.roa (raw, json)
Hash identifier: aFr9pnTCnnwxi0hTcdqwZVyrn9Q+n14n/IQ//XXsuvg=
Subject key identifier: 5E:CC:14:34:7C:6E:E4:21:A9:7D:22:D9:85:19:0D:3B:56:A2:A3:0C
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584900215C7D6CDF904436496930
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3b9fe6af-4127-3909-bb31-619bfe6bb5db.roa
Signing time: Tue 25 Feb 2025 14:00:52 +0000
ROA not before: Tue 25 Feb 2025 14:00:52 +0000
ROA not after: Mon 26 May 2025 13:00:52 +0000
asID: 12222
IP address blocks: 2001:4878:8259::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:00:21:5c:7d:6c:df:90:44:36:49:69:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Feb 25 14:00:52 2025 GMT
Not After : May 26 13:00:52 2025 GMT
Subject: CN=e1964a41-0302-4bac-8360-0d3b6951de94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a7:5e:8a:13:be:e9:71:6c:45:3c:d9:4c:2b:
29:52:1d:86:fb:1e:eb:40:99:e0:04:48:03:28:a8:
1d:2f:c9:53:7b:f7:27:5d:24:e7:78:40:1e:d0:0c:
60:82:bc:3d:41:73:57:60:f9:8a:b0:38:38:24:80:
f9:6c:02:72:b0:89:fa:b0:57:92:47:f6:e9:eb:9a:
60:b0:33:7b:61:89:16:08:52:4a:42:1b:16:ef:dc:
16:87:3e:f3:1f:2c:cd:f6:bc:05:2c:b3:3a:26:6c:
9a:b6:47:e8:ec:9c:1a:66:b1:a3:46:3b:41:5e:e4:
a2:6d:ed:f3:82:3d:e1:16:67:f6:93:cd:9a:00:64:
4d:4d:18:43:60:0c:6c:cf:43:de:a1:cc:08:8a:c0:
5c:1b:b9:5b:15:86:8b:a3:0c:f5:ed:51:73:73:9f:
2c:29:9c:35:84:09:d7:f0:f3:d8:2d:99:9f:22:25:
bd:9e:3b:a2:fc:37:6e:4b:53:b8:1c:69:fd:0c:4e:
f8:14:30:dd:b2:6b:c8:d1:4c:9a:23:d0:e6:75:e0:
5c:05:69:f6:f5:b2:49:87:b3:73:36:bb:81:1e:a1:
e7:d7:a2:32:f6:ca:89:8d:d4:c2:1e:62:7b:b5:c5:
05:ee:6a:0b:23:c6:15:9c:f6:cd:52:7a:6e:3b:c7:
1b:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:CC:14:34:7C:6E:E4:21:A9:7D:22:D9:85:19:0D:3B:56:A2:A3:0C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3b9fe6af-4127-3909-bb31-619bfe6bb5db.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:4878:8259::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8d:fb:cf:fe:3b:d8:6f:96:cc:c3:eb:95:35:5a:52:c4:88:83:
e1:b2:24:3d:12:9f:8b:f4:e7:86:32:36:3e:29:0a:be:40:6f:
1d:75:6d:43:b1:48:84:17:86:fb:0b:19:b9:94:2b:e9:de:d9:
f1:86:24:b9:f2:d8:56:4a:71:90:96:90:74:43:ee:ec:23:4e:
d5:c3:77:a7:07:8e:0e:3a:07:3c:ce:2c:70:08:3a:7d:cf:3e:
3c:0d:27:8f:9a:04:ef:18:30:79:f1:b2:a9:a2:08:01:03:a1:
5b:ef:86:a3:5b:16:ff:dc:a1:03:f8:48:91:39:5c:6f:8b:31:
5f:28:2d:e4:c8:68:5b:86:e5:0c:84:fb:bc:c6:f7:e0:b1:60:
ef:8d:db:ac:8a:88:d3:dc:ae:0e:f4:57:47:7c:ea:7e:df:4f:
42:2d:1c:e3:84:ca:04:cf:ed:c8:da:b2:2f:72:74:04:4d:64:
96:63:5f:bd:ee:49:c8:f8:6c:01:31:79:e5:36:e2:df:4e:f4:
44:c2:b5:1f:8b:15:8e:74:79:df:f9:b9:9b:95:81:b6:81:8e:
6f:8d:04:0d:39:e2:e1:50:9e:9f:eb:b9:ee:fa:57:91:aa:6e:
ed:09:7a:06:5f:90:b4:5d:94:0c:8a:70:b0:bb:dc:a5:94:7c:
33:20:86:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 09:24:20 2025 by rpki-client