Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5c9bc043-7e8e-3100-88b2-c64b87f40f57.roa
File: 5c9bc043-7e8e-3100-88b2-c64b87f40f57.roa (raw, json)
Hash identifier: TwxRxpzZHbWEWW+Bya8HB5iPezV2T6U1JPxgKC04SLA=
Subject key identifier: 22:09:65:A4:C2:2B:63:4D:58:F1:4C:B4:2D:5A:58:B8:4E:E4:1D:44
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584898D611EF93AE4C28E2421240
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5c9bc043-7e8e-3100-88b2-c64b87f40f57.roa
Signing time: Sun 19 Jan 2025 14:00:52 +0000
ROA not before: Sun 19 Jan 2025 14:00:52 +0000
ROA not after: Sat 19 Apr 2025 13:00:52 +0000
asID: 20940
IP address blocks: 2600:1417:f::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:98:d6:11:ef:93:ae:4c:28:e2:42:12:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 19 14:00:52 2025 GMT
Not After : Apr 19 13:00:52 2025 GMT
Subject: CN=008feba8-c4b5-4c37-8678-0eceab2e544c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:8a:12:bb:dd:cd:5b:97:b2:36:20:a5:13:fa:
7f:d2:b4:55:a4:ce:56:e7:f3:a3:79:bb:d1:93:d8:
e3:7c:d9:ea:3a:d2:ca:4d:ef:8d:58:0d:26:26:22:
ef:0a:22:b2:95:dd:d2:5b:53:1a:96:f8:35:69:b5:
70:d9:af:cd:9e:2d:a4:c1:74:5a:0a:66:82:8b:5b:
67:15:67:75:e1:6d:eb:56:f0:96:81:8e:88:44:44:
0c:04:ca:f5:d0:c1:20:86:3a:50:52:ba:e0:d8:c1:
32:9f:10:8a:76:c0:86:aa:c1:26:c6:4e:c8:4e:5b:
c9:d7:97:f3:ad:e7:ce:33:96:35:dc:8c:45:b8:23:
df:7c:89:8b:3a:55:79:60:65:0c:be:95:92:72:24:
ee:b8:4d:69:da:de:80:11:50:e5:39:e9:12:c1:1e:
5b:7d:a3:a0:6a:24:02:06:86:2b:8f:93:24:89:a3:
23:be:31:8a:14:7b:07:7f:7a:b0:0b:c9:61:56:e5:
ce:06:00:f1:3d:c8:02:4d:a8:f0:25:79:25:74:cf:
fc:65:2a:5c:67:c0:ee:f9:0f:db:6a:eb:1a:b8:ba:
93:3a:02:e4:e3:55:3d:cf:b1:13:0e:52:ac:8f:53:
2c:13:1d:ce:8d:cc:26:f5:61:c3:3d:d1:16:8f:e9:
36:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:09:65:A4:C2:2B:63:4D:58:F1:4C:B4:2D:5A:58:B8:4E:E4:1D:44
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5c9bc043-7e8e-3100-88b2-c64b87f40f57.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:1417:f::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
90:c9:03:9c:dd:80:94:9c:d5:c8:79:43:97:5a:71:4b:3e:86:
ce:b8:e6:5a:b3:34:ba:29:ee:1f:3c:c4:24:a0:87:21:fe:c0:
a7:ba:75:d1:00:4d:6d:31:6e:6b:70:72:b4:25:1e:5a:61:ae:
4f:70:37:44:27:d9:0b:00:d9:6e:c1:c2:49:f4:90:0b:69:8e:
54:86:7e:06:a0:09:8f:9b:22:65:c0:c1:1a:7e:1d:9e:f1:40:
17:39:72:84:2a:45:6e:30:f2:f6:53:34:59:77:fc:49:27:14:
c4:45:df:87:38:53:45:41:3d:55:ed:da:88:12:0e:92:d1:52:
5a:54:73:87:45:f7:bb:bc:90:34:6f:da:2f:ac:07:39:8b:99:
43:b6:cd:00:85:df:73:f4:ff:e5:24:19:6e:d4:66:8f:4c:70:
c3:ff:e7:8a:05:23:23:5c:ba:40:7a:94:02:35:86:0f:a2:8b:
8e:29:c2:95:9d:ad:c1:16:a9:04:7b:b5:a1:e6:0c:b8:0a:22:
d7:00:7a:f5:1b:31:47:f3:29:aa:91:d0:ef:29:92:41:bb:62:
28:df:71:7e:86:b6:d2:a0:1b:9b:64:27:21:e1:ea:20:0f:dd:
e3:3a:6b:81:44:4b:f0:82:0b:83:87:5e:d0:79:06:76:45:da:
8b:61:c9:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:58:39 2025 by rpki-client