Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4aa86a68-10cb-370d-8d42-0b0e1703b041.roa
File: 4aa86a68-10cb-370d-8d42-0b0e1703b041.roa (raw, json)
Hash identifier: fWLkleem/EYLZ9AAc98v9YHPG69MsNUwOuS+44nEB8Q=
Subject key identifier: 0E:A5:DB:ED:95:82:90:45:CA:82:EF:A6:B4:CD:59:8B:B0:CD:FD:7D
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848A9963694EEEDBE7ED4A05A40
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4aa86a68-10cb-370d-8d42-0b0e1703b041.roa
Signing time: Sat 25 Jan 2025 14:00:52 +0000
ROA not before: Sat 25 Jan 2025 14:00:52 +0000
ROA not after: Fri 25 Apr 2025 13:00:52 +0000
asID: 20940
IP address blocks: 2600:1488:60c2::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a9:96:36:94:ee:ed:be:7e:d4:a0:5a:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 25 14:00:52 2025 GMT
Not After : Apr 25 13:00:52 2025 GMT
Subject: CN=51c3ae08-c5ff-4609-8088-ffd5b24f30a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:9e:b4:0c:c2:cf:17:72:41:18:38:4c:97:74:
43:f8:48:ec:e3:82:82:0e:fd:e1:bd:4d:c8:6c:c9:
3f:54:c4:47:06:86:67:6d:91:47:f3:7c:a7:c1:ef:
39:62:1e:ef:9e:81:36:5a:c4:2c:1f:c7:85:97:89:
16:63:13:b7:48:d9:83:ba:34:d0:cb:97:0e:20:c2:
90:b4:1f:b7:66:cc:52:9e:fb:98:65:57:13:0a:b3:
d5:68:5b:50:9d:2b:34:78:7f:f0:10:46:05:ef:61:
24:26:e7:09:87:84:c0:8f:8f:16:15:55:53:db:f7:
7d:1d:b8:52:28:c2:83:c8:22:e4:e5:9f:cb:b7:91:
c6:a2:bc:2d:16:2a:15:30:dd:fe:63:f6:0e:65:75:
e4:8f:8f:46:79:01:62:e9:89:4a:b4:0d:2d:68:cd:
a2:cc:cd:cf:11:4f:e0:61:09:75:0c:8b:7b:09:b2:
38:51:c5:62:94:2b:f5:61:75:0e:b2:1d:c8:72:51:
41:98:a0:43:57:2b:ae:ba:19:04:74:d0:35:68:f4:
68:9d:58:fc:47:5d:e4:de:f8:d6:14:20:b6:98:e8:
af:02:3d:5a:93:e8:38:92:84:ca:45:ab:6e:98:2c:
25:8e:ff:1a:19:1e:51:47:e6:7c:93:39:8c:86:3f:
47:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:A5:DB:ED:95:82:90:45:CA:82:EF:A6:B4:CD:59:8B:B0:CD:FD:7D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4aa86a68-10cb-370d-8d42-0b0e1703b041.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:1488:60c2::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
61:ac:81:49:56:6d:bb:57:e5:14:69:20:c8:2a:7c:01:3a:7b:
18:56:37:ce:77:a5:6a:1a:5e:f7:d3:9a:5d:33:29:7f:cf:68:
75:0a:58:60:d2:56:1e:b6:4d:86:19:c9:71:2a:1a:0c:10:96:
25:d7:ed:8a:fa:7b:45:09:94:7c:09:a9:fd:5e:d7:c1:b4:52:
76:49:cc:e1:9f:14:b5:b7:b8:cd:b9:d5:e7:fc:b8:e9:eb:84:
f7:9c:b0:6c:e8:30:7d:2e:e3:be:f3:2b:04:67:19:70:6e:47:
94:79:6e:7a:11:f2:e5:03:eb:42:be:f8:14:06:b8:36:6b:44:
2a:2c:ff:e3:fe:50:8c:33:8f:7d:05:1b:aa:88:03:2f:d1:36:
d0:59:1d:5b:2c:60:65:c5:78:7e:0f:2f:77:56:ca:fa:49:ab:
f0:bd:f6:fb:4f:ff:d6:22:79:85:9d:42:e4:fe:1b:36:ad:41:
df:92:ea:42:c8:5d:f6:ba:5f:29:76:fc:d5:92:97:b1:08:7c:
d7:89:32:d1:75:bb:49:a4:cf:d8:24:e0:a2:4d:48:60:1c:bf:
64:4a:d5:42:ac:43:23:59:e7:05:76:a6:37:4f:a3:05:5f:a3:
7b:f8:55:07:1f:94:8d:9e:bb:0a:1e:7f:18:e9:45:64:ef:75:
13:3d:44:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:06:42 2025 by rpki-client