Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4a4e7e46-def0-3878-a646-3b772e5c426f.roa
File: 4a4e7e46-def0-3878-a646-3b772e5c426f.roa (raw, json)
Hash identifier: jxNseO0MsHoRNx/t7XteraqjBjvTtg2E2cCtqdRXMlc=
Subject key identifier: AC:C1:E4:31:E3:90:B2:A9:CC:13:1E:6E:F7:F5:47:6F:2C:56:BC:70
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848AC60D7FA8A6658F11B1AE400
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4a4e7e46-def0-3878-a646-3b772e5c426f.roa
Signing time: Sun 26 Jan 2025 14:00:52 +0000
ROA not before: Sun 26 Jan 2025 14:00:52 +0000
ROA not after: Sat 26 Apr 2025 13:00:52 +0000
asID: 35994
IP address blocks: 2600:1407:b000::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ac:60:d7:fa:8a:66:58:f1:1b:1a:e4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 26 14:00:52 2025 GMT
Not After : Apr 26 13:00:52 2025 GMT
Subject: CN=96de08a7-4795-465c-8235-09b1951f0cf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:8b:ce:a3:91:79:ba:6b:50:ce:87:83:1b:62:
82:2e:24:26:ab:d8:b1:90:ad:bc:bf:2c:2a:3f:9d:
ea:63:d4:99:d7:af:49:83:b7:9d:a5:08:a6:6d:45:
49:93:0e:ef:1b:c8:e1:38:0c:6c:06:83:13:00:2e:
d1:de:8e:0f:78:66:9c:57:73:5a:36:ba:85:d7:5a:
d9:78:ea:ad:10:89:55:9e:b6:73:39:bc:1d:d2:7e:
50:d2:4b:cf:e3:ce:b0:fc:17:02:50:c5:2b:65:aa:
60:e2:fb:1b:a5:50:66:5c:27:36:62:27:4d:22:01:
92:18:72:47:27:db:f2:cb:59:1d:86:f0:6a:7d:9b:
79:c8:3d:09:55:53:a2:28:71:84:c9:fa:fd:b9:93:
83:41:ad:f2:a1:c7:d9:9f:82:2c:ed:99:5a:a6:41:
26:a6:9c:fb:42:00:35:61:57:34:03:8b:1c:ce:a8:
9f:54:03:94:67:8c:10:6d:cc:70:90:c3:85:75:6e:
55:4d:25:93:b1:2f:91:de:bf:c5:89:af:fd:07:23:
b5:c6:95:b7:b1:86:95:1c:0c:bf:27:b9:4d:89:48:
20:50:cf:96:99:7d:28:db:fa:1c:ec:04:12:1c:db:
36:07:a2:9d:22:be:dd:4f:e4:07:ee:a3:8f:24:79:
31:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:C1:E4:31:E3:90:B2:A9:CC:13:1E:6E:F7:F5:47:6F:2C:56:BC:70
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4a4e7e46-def0-3878-a646-3b772e5c426f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:1407:b000::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
10:7e:68:e2:a2:42:99:e6:d1:7e:c4:02:46:0c:fb:cb:57:07:
d5:09:33:ce:73:55:da:da:8d:36:e5:e5:47:4e:d0:20:18:e4:
02:80:17:92:8f:4c:c7:61:c2:48:40:c8:1c:41:00:70:36:70:
8f:d9:00:1a:27:f1:68:8a:a8:d0:f8:cd:08:2d:42:66:d3:81:
6a:2f:8b:f2:e4:7a:ea:0f:4d:41:4c:c6:96:11:6c:44:f5:70:
f7:54:14:a7:49:d4:a8:04:eb:2b:23:9f:a0:dd:be:46:76:3c:
ce:c1:0b:36:fe:c9:de:e3:b5:b0:17:c6:24:6d:5a:44:3d:3c:
1a:45:b7:8d:db:a3:ac:0b:83:71:8f:b6:e6:a6:90:65:31:94:
13:a8:34:f6:15:0b:68:27:b4:bd:63:44:3b:1f:94:da:98:f5:
7e:e2:f5:69:38:fd:fd:d5:24:db:d4:68:85:c5:c9:a4:9f:6f:
c7:e1:bb:61:0b:f8:10:3a:18:8f:38:f9:c4:c3:c4:3d:95:ec:
cb:cd:7d:5e:b8:24:86:13:ab:31:75:3e:14:9f:16:71:00:18:
6b:16:36:6a:a4:c4:b9:f6:34:19:cc:c6:06:9a:17:96:6f:1a:
0b:87:dc:45:39:e1:f9:44:21:87:8a:10:33:a3:65:f2:af:1b:
22:4a:09:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:59:32 2025 by rpki-client