Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4f55854f-54cf-3a71-8f91-226fede7eaa0.roa
File: 4f55854f-54cf-3a71-8f91-226fede7eaa0.roa (raw, json)
Hash identifier: lq8Nrv0t8ULwqkpGVm93kqvxPSsTvWzP+rvk/phbagk=
Subject key identifier: 66:BA:02:42:63:4F:05:97:F5:FB:EB:59:D9:C0:C5:5F:16:37:65:E5
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848A1362F09DACE86FE1ACCDE00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4f55854f-54cf-3a71-8f91-226fede7eaa0.roa
Signing time: Wed 22 Jan 2025 14:00:52 +0000
ROA not before: Wed 22 Jan 2025 14:00:52 +0000
ROA not after: Tue 22 Apr 2025 13:00:52 +0000
asID: 20940
IP address blocks: 2600:1408:16::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a1:36:2f:09:da:ce:86:fe:1a:cc:de:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 22 14:00:52 2025 GMT
Not After : Apr 22 13:00:52 2025 GMT
Subject: CN=ed30b4aa-5474-418e-ac50-2b3430cfc10a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:fb:1f:c4:7c:d3:e6:05:73:ac:56:9e:88:53:
7b:29:3b:65:b1:36:fc:54:a8:c1:23:0e:73:02:6f:
f8:44:e0:c2:01:f9:ae:eb:32:8b:93:44:9d:46:29:
9c:ba:d5:81:47:b4:e2:d8:91:1a:d9:1a:69:76:4d:
4b:92:fe:12:90:c3:44:46:59:b0:b5:80:6c:c9:8e:
4f:42:2a:00:78:d2:62:12:b7:b2:be:f1:dc:e3:04:
c6:7b:aa:05:f6:e6:e4:3e:fa:45:56:92:4d:7f:48:
80:62:e6:b3:e5:18:8b:e8:cc:63:5e:be:27:81:78:
5e:82:ab:63:35:54:76:ff:91:61:4e:eb:f3:9c:30:
d8:ab:be:b0:5c:d7:38:63:53:55:f1:7c:15:42:c3:
cc:b6:89:66:21:fb:4b:2e:35:8b:ac:e4:e2:f0:be:
04:c8:77:a9:05:39:fe:7e:3c:6c:77:e2:dc:13:7b:
d2:ea:55:16:cb:2d:53:dc:cd:1c:e7:81:af:1a:3b:
67:a6:f3:cd:51:8d:53:a2:18:be:4a:e5:8a:bd:38:
00:b8:8e:28:bd:da:ae:c1:31:37:41:b9:d4:25:12:
55:35:6d:bf:04:10:15:06:2d:a9:1b:03:5a:55:a1:
b2:c4:cc:43:f0:28:3c:c0:1b:cf:00:ab:0b:fc:e4:
b7:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:BA:02:42:63:4F:05:97:F5:FB:EB:59:D9:C0:C5:5F:16:37:65:E5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4f55854f-54cf-3a71-8f91-226fede7eaa0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:1408:16::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
58:c8:8e:d6:e0:39:dc:80:dc:35:a7:8a:60:e4:7d:d8:a3:2c:
07:1b:5c:75:2b:b2:82:ee:01:df:65:a8:d9:60:22:43:10:36:
93:44:54:e7:72:db:ef:5f:69:13:19:c9:05:28:fc:f3:8e:67:
a8:1e:b9:f5:4f:ea:23:cd:21:76:d0:a8:d4:0a:24:2f:92:e4:
00:bb:25:3e:ed:5a:e7:15:db:d8:d7:61:9a:5d:8c:fb:f9:b1:
68:f5:da:91:f8:91:76:15:aa:e4:ee:33:f0:1c:53:e5:90:9a:
ca:c1:16:9f:53:48:e1:42:53:45:fd:3e:df:3d:04:c3:ae:3f:
3c:9f:ae:0b:ac:a4:83:f1:07:be:7f:d8:da:b5:54:ff:08:48:
99:b9:e9:1f:f1:89:97:ab:34:45:e7:67:af:e4:ef:7d:1c:d8:
c9:5c:31:fc:f9:f5:38:57:99:b1:3d:ea:fd:a8:25:0f:7e:46:
0f:9b:af:1d:d7:89:78:c0:75:22:ce:95:99:34:26:10:d1:26:
a7:7e:f0:e3:cf:b1:00:25:e3:06:d6:73:38:ee:7e:8a:d7:5c:
53:e9:bd:70:75:37:d3:d6:7e:a3:11:59:bc:bf:25:d0:f6:22:
f3:3c:64:e1:5d:2f:72:a8:1e:24:c4:cd:68:4f:30:03:9d:31:
3f:d4:f8:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:06:45 2025 by rpki-client