Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5a81176f-1235-3ddc-8614-cfc1d0e9fdc4.roa
File: 5a81176f-1235-3ddc-8614-cfc1d0e9fdc4.roa (raw, json)
Hash identifier: jsyndHvo0pfzH2yfkHJEIdIqqhmBh7RsZsx/P4H9V2g=
Subject key identifier: 29:2D:B4:B4:B5:0E:2D:68:9E:7B:D7:DF:64:C1:A7:4D:C4:9B:A4:BC
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848A136324FE9BEEADE7E248FC0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5a81176f-1235-3ddc-8614-cfc1d0e9fdc4.roa
Signing time: Wed 22 Jan 2025 14:00:52 +0000
ROA not before: Wed 22 Jan 2025 14:00:52 +0000
ROA not after: Tue 22 Apr 2025 13:00:52 +0000
asID: 20940
IP address blocks: 2600:1419:6600::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a1:36:32:4f:e9:be:ea:de:7e:24:8f:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 22 14:00:52 2025 GMT
Not After : Apr 22 13:00:52 2025 GMT
Subject: CN=e060e85c-dae6-4729-8789-20124332838d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:44:0e:b0:7d:fc:f4:a1:81:3f:7d:20:a5:58:
09:4b:66:6b:43:79:ec:2a:3f:cb:64:f4:31:1d:00:
cf:ce:27:4f:0a:5f:06:16:8c:e0:38:be:3f:af:8f:
3f:90:62:d1:99:de:b0:76:ac:3b:56:af:59:2d:6f:
8b:a7:69:1c:87:42:32:32:c0:54:b8:20:35:57:0d:
06:55:b1:6a:87:c8:69:df:80:6d:1b:93:ca:52:f6:
50:59:0d:b4:ec:8b:83:76:51:89:af:77:fc:bf:d6:
7c:cc:fa:16:06:83:95:d9:0c:00:53:af:13:91:5d:
a9:17:5b:7e:41:ee:52:9c:7f:0e:04:ef:5a:55:d1:
78:ab:94:b2:32:bc:e1:96:6b:c6:d4:01:47:af:58:
7e:db:9a:7f:c4:ae:af:51:8d:8f:5b:19:20:65:bf:
b5:3f:e9:62:85:31:cd:fe:22:ab:39:33:eb:c6:52:
e3:b0:63:ea:09:5c:8b:6b:ce:50:96:9a:27:69:73:
a1:45:33:a9:7c:2c:ed:d1:0e:d4:4a:40:ae:c3:1e:
08:93:8c:60:de:79:8f:6e:1b:2c:28:e9:1f:f1:c1:
86:c1:84:61:48:31:27:fa:97:30:12:aa:ed:1d:d1:
bf:98:5b:2a:b4:b4:06:98:d4:59:43:9c:d2:50:91:
76:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:2D:B4:B4:B5:0E:2D:68:9E:7B:D7:DF:64:C1:A7:4D:C4:9B:A4:BC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5a81176f-1235-3ddc-8614-cfc1d0e9fdc4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:1419:6600::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:d7:b7:f8:60:13:78:da:90:5c:01:c3:a7:8a:c2:b8:e6:6e:
ab:df:ac:cd:18:76:37:28:50:53:0e:79:07:31:a5:7a:8a:f1:
42:de:93:df:d5:f0:0a:5c:b4:ee:05:62:45:ec:af:51:00:a4:
8c:15:77:29:6c:fe:c8:e7:99:3e:55:c8:9c:06:74:42:cc:2b:
79:97:65:98:ba:a0:e4:a0:e1:a0:d3:f2:5f:bb:b9:c8:a7:a2:
e6:0f:7c:dd:86:1e:91:e2:94:f7:46:4f:5e:24:03:41:4f:56:
9c:c0:6f:95:c0:2d:11:c7:b5:50:5d:1d:ff:54:81:3d:ef:84:
05:50:50:7d:e4:61:be:e5:3b:9c:14:b9:6c:05:39:a1:56:fa:
4c:1c:88:28:8a:0f:06:53:ae:f5:1d:0a:de:25:f9:38:e9:a7:
13:28:47:88:c5:68:1c:0a:9d:bd:b7:6b:6a:46:02:0f:85:45:
dd:59:a0:fa:bc:84:4a:f2:bb:04:3a:c0:d1:cd:08:c0:2e:a6:
17:90:fe:e9:2c:d1:25:b6:b7:22:0d:6b:60:6f:74:7c:d3:15:
71:2b:52:67:85:7a:a4:cc:47:a8:d1:87:35:a0:3f:62:df:6b:
ad:0f:6c:64:33:2e:57:19:c8:bb:f2:fe:55:b3:d5:2d:e2:da:
d9:4e:56:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:57:13 2025 by rpki-client