Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5ae8d069-51b9-321a-86ca-e763e30e9468.roa
File: 5ae8d069-51b9-321a-86ca-e763e30e9468.roa (raw, json)
Hash identifier: jU/ZYLupZP5wXHtX/8hUEBMX2Ft17pNAvTfMgkPrYRw=
Subject key identifier: 3A:5A:E8:AB:B2:B1:E1:44:53:86:72:23:1F:DA:63:16:25:A1:20:6F
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858488DAB5538C1CAB2B4D1AEE480
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5ae8d069-51b9-321a-86ca-e763e30e9468.roa
Signing time: Wed 15 Jan 2025 14:00:51 +0000
ROA not before: Wed 15 Jan 2025 14:00:51 +0000
ROA not after: Tue 15 Apr 2025 13:00:51 +0000
asID: 20940
IP address blocks: 2600:1409:12::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:8d:ab:55:38:c1:ca:b2:b4:d1:ae:e4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 15 14:00:51 2025 GMT
Not After : Apr 15 13:00:51 2025 GMT
Subject: CN=2b2be971-acb4-4f78-93a5-2476a4dd9ed1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:2a:ef:3f:dd:7f:77:0e:a2:fc:27:6f:9d:58:
00:f0:d0:7c:13:59:6a:bc:e8:c0:3f:d2:41:3f:39:
98:77:d7:19:30:ad:42:8a:3e:8d:6b:a7:98:57:76:
83:61:57:66:66:2f:97:e7:cc:a0:49:1e:e1:c8:77:
db:d3:06:78:8a:0f:72:f5:be:c0:86:eb:bb:bb:63:
f2:8b:a1:0d:d8:7c:9e:72:e6:cf:94:c7:76:bc:54:
a1:9b:df:33:93:f2:ce:d6:09:ce:ce:f0:4f:1e:64:
72:1f:37:92:89:05:4d:7f:68:2b:77:6a:52:9f:73:
e9:0b:ee:71:a5:a0:0d:56:29:0b:aa:88:e1:58:51:
44:bb:ff:45:ba:23:d2:04:fa:82:54:dd:11:7a:c0:
db:c2:d2:52:08:41:fb:23:f1:6c:08:b4:77:82:a3:
3c:a0:f2:67:8e:18:06:15:98:71:c3:44:cf:34:05:
99:d1:ab:33:9c:6d:99:bd:7a:f0:5c:ea:29:f0:6e:
f7:41:96:0d:35:54:26:e7:5b:0e:73:8c:11:0b:de:
0f:52:0f:08:6f:a2:c4:63:c6:ab:aa:75:46:12:c8:
9f:8c:fe:fa:c1:ef:27:1a:54:1c:b4:f6:38:83:be:
6a:73:5b:06:66:af:26:6b:7d:b2:6c:d4:ad:6d:33:
1f:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:5A:E8:AB:B2:B1:E1:44:53:86:72:23:1F:DA:63:16:25:A1:20:6F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5ae8d069-51b9-321a-86ca-e763e30e9468.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:1409:12::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
88:37:32:ba:17:f6:58:08:14:b2:94:7e:e7:29:71:b5:34:2d:
12:55:b9:e3:81:d8:d1:ad:04:4d:ec:2f:fd:3e:74:0a:d3:cc:
1b:c2:aa:51:af:60:15:98:f9:de:02:79:30:b6:71:44:e8:38:
c2:99:98:18:87:7f:15:c7:37:88:e9:18:bd:8e:d9:d2:99:5e:
fa:40:08:e7:16:6c:6a:38:e8:b6:98:09:81:6a:56:ee:85:4a:
42:94:2a:be:3f:d6:a1:89:06:13:3a:bd:ea:be:93:61:f9:65:
27:5c:f6:e1:5a:84:fe:14:0f:b2:9e:67:38:1d:3e:25:8b:5b:
4b:a4:46:30:fd:eb:d0:b0:cd:a4:b0:1c:af:d3:ca:40:ad:26:
ff:99:6e:ab:67:51:c2:0e:b3:d8:c0:fb:e3:91:ad:64:ac:aa:
f3:e7:68:42:16:6a:7c:60:32:40:9e:d6:7c:5f:8a:e1:43:79:
a5:ff:e7:aa:9c:0f:0d:e4:d8:3b:a4:72:4e:34:ce:37:42:59:
4c:77:38:ac:c7:00:8a:ea:11:9a:82:67:b8:1a:be:73:2f:bd:
ba:d5:ab:04:de:06:b4:fa:7e:e5:23:28:be:13:06:54:27:18:
32:8b:94:4f:7b:ba:c0:1d:71:17:63:5d:e1:66:ce:70:63:45:
fc:b9:50:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:14:47 2025 by rpki-client