Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/642a84f4-9e19-32bc-aa05-85491a4b490c.roa
File: 642a84f4-9e19-32bc-aa05-85491a4b490c.roa (raw, json)
Hash identifier: eRONh5XNjiGTCOreq2YznFYrYMGcoFUY1RHTx69nQ2g=
Subject key identifier: 06:60:D3:BB:29:D2:43:BD:F6:94:B5:53:D6:A1:D2:37:4C:A8:6A:B3
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848FD56A317B163321817AF5140
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/642a84f4-9e19-32bc-aa05-85491a4b490c.roa
Signing time: Mon 24 Feb 2025 14:00:52 +0000
ROA not before: Mon 24 Feb 2025 14:00:52 +0000
ROA not after: Sun 25 May 2025 13:00:52 +0000
asID: 12222
IP address blocks: 2001:4878:324::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:fd:56:a3:17:b1:63:32:18:17:af:51:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Feb 24 14:00:52 2025 GMT
Not After : May 25 13:00:52 2025 GMT
Subject: CN=cc260e2b-8b77-4d96-a69b-b57f1fc8b0e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:64:7d:43:1d:01:0e:a1:4d:05:a4:65:89:08:
ee:21:a8:31:4b:27:b3:fa:d1:b0:40:a7:c0:d9:56:
b7:3c:58:65:e7:44:47:4a:ad:57:6e:cf:d5:58:de:
b0:17:08:74:92:18:8b:30:84:77:41:5b:19:22:20:
13:8b:ae:07:85:27:4d:f6:aa:21:02:83:a5:23:dc:
f1:34:f5:27:96:47:31:5c:4a:d8:c9:4e:f4:51:8a:
d0:62:a4:91:50:96:8b:37:b8:27:26:7e:e1:1d:dc:
de:c2:21:bc:20:32:16:28:ce:45:c8:e8:e8:fd:76:
77:00:b7:75:a3:a4:83:53:35:d6:79:b2:c2:31:93:
55:79:86:34:34:32:f1:cc:3d:e6:a2:06:26:91:bf:
22:6d:a3:98:5b:d5:0a:4b:b1:d5:d5:84:05:21:32:
a1:36:44:82:da:78:26:98:d2:f5:1e:3e:4f:bc:b5:
00:1b:e9:48:8a:19:47:83:2d:75:5f:2f:3c:04:3a:
50:1a:78:ec:fd:ca:ba:b3:e0:07:04:7d:4e:27:94:
c4:65:b8:a8:d7:5b:84:cb:e0:e8:43:37:a6:47:74:
07:b3:58:ce:39:99:b6:ba:e6:85:2b:4d:62:6f:2c:
34:7a:a3:91:ce:b2:95:0d:e4:bf:a8:34:ef:49:3b:
3a:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:60:D3:BB:29:D2:43:BD:F6:94:B5:53:D6:A1:D2:37:4C:A8:6A:B3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/642a84f4-9e19-32bc-aa05-85491a4b490c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:4878:324::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3c:da:08:42:e4:d2:ce:7d:e8:25:ed:00:8f:76:8c:ed:43:ff:
03:99:0c:ef:44:eb:c5:83:f4:4a:02:ed:b8:c9:f5:55:9a:6a:
dd:37:d8:7d:11:87:03:8d:56:d0:0a:1c:c6:4f:24:19:29:ab:
6e:e9:0c:4a:8b:ec:14:9f:af:f9:a8:30:13:cd:d2:88:d6:34:
bb:7c:9f:17:77:c6:41:e2:69:19:72:09:45:f5:a8:30:b2:76:
37:89:27:9c:d7:e4:b5:ad:6b:99:17:fe:3a:a6:c7:fb:0f:31:
81:b0:71:c9:1b:13:93:a4:75:41:06:ee:34:2b:e1:e2:21:29:
94:db:01:0b:5c:88:cd:ab:57:47:bc:6c:a6:4d:47:3f:22:5b:
3b:11:45:68:c0:7f:54:ff:fa:e0:fb:8e:1e:00:9e:e7:60:dc:
0d:3b:55:f8:ac:86:f4:44:a0:b5:da:a1:e0:2e:56:c6:b8:c4:
72:98:ef:b1:f4:e5:39:8a:a5:41:c5:a9:4b:80:5e:c6:11:91:
41:0b:95:62:92:5f:3b:dc:bd:89:10:5a:c0:78:17:1f:9e:e6:
1e:87:7e:34:b7:b0:4c:f6:f7:5e:c7:a2:1e:bf:e7:be:4d:c1:
9d:64:fe:83:b0:ab:99:c4:97:82:e9:c5:c0:34:02:9e:a1:63:
cb:f8:08:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:58:34 2025 by rpki-client