Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/785be0d6-b6b2-3d03-8aa7-73c6efab9060.roa
File: 785be0d6-b6b2-3d03-8aa7-73c6efab9060.roa (raw, json)
Hash identifier: LfbKpZcOLXZtrhxRvVkzC+uaJY9dDEz97cPBRpxAlFw=
Subject key identifier: E3:94:96:DC:58:E7:F3:47:F9:E6:41:60:16:98:A1:21:A4:6C:36:65
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848FD56B29C38E43D71F9791480
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/785be0d6-b6b2-3d03-8aa7-73c6efab9060.roa
Signing time: Mon 24 Feb 2025 14:00:52 +0000
ROA not before: Mon 24 Feb 2025 14:00:52 +0000
ROA not after: Sun 25 May 2025 13:00:52 +0000
asID: 12222
IP address blocks: 2001:4878:4164::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:fd:56:b2:9c:38:e4:3d:71:f9:79:14:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Feb 24 14:00:52 2025 GMT
Not After : May 25 13:00:52 2025 GMT
Subject: CN=980e560e-dbef-4971-9f16-778517f28f5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:01:b7:85:ac:1e:b5:21:9a:49:12:da:39:cf:
e4:a6:e8:7b:aa:9e:76:07:2d:41:cb:60:67:97:75:
82:1f:24:a8:d4:9a:73:76:8b:2d:1d:73:aa:39:e7:
6d:f2:e9:a1:18:e8:43:4b:cd:df:11:aa:ce:bc:b6:
e8:d7:58:b7:85:00:2f:a1:de:0b:2f:dd:d3:df:40:
ff:28:8c:fa:0a:78:fc:89:54:e8:01:11:f2:b1:c2:
a8:03:ad:0a:f4:71:39:ef:d2:76:6a:87:92:1e:4a:
c5:c5:78:26:7e:ef:73:63:93:4a:58:b4:17:94:96:
a7:c2:41:c1:94:b0:02:12:ae:0f:ee:d5:2e:ea:cd:
a7:27:38:75:8d:5f:f7:11:bb:03:dd:6d:04:a0:11:
1f:75:eb:ce:fd:e6:19:ec:37:00:dc:7d:ee:5d:2b:
11:b6:ea:2d:aa:c6:68:0e:7b:1a:09:49:be:f7:8c:
6d:48:ee:d3:4f:b5:31:72:ce:00:7c:5b:68:1b:24:
4b:b4:bc:71:f8:c6:a5:05:d2:3c:56:32:00:83:5b:
22:13:8b:9c:3a:af:37:a6:fb:1a:f0:b0:ee:ff:08:
4d:8a:b5:1b:2a:1f:d9:10:68:27:11:7e:3f:ff:76:
a1:37:84:8c:db:40:67:86:e0:97:74:29:74:06:31:
2e:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:94:96:DC:58:E7:F3:47:F9:E6:41:60:16:98:A1:21:A4:6C:36:65
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/785be0d6-b6b2-3d03-8aa7-73c6efab9060.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:4878:4164::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
18:21:2d:44:fc:9b:30:9c:f3:2e:f5:d4:27:7f:5f:20:ab:34:
c6:3e:66:ab:63:17:e3:06:40:b9:0f:69:42:8c:1d:a0:4a:2b:
e9:0c:46:f1:c5:7f:0f:ee:5f:12:31:28:dc:29:4c:d5:b2:ed:
20:22:32:47:b1:d0:c0:ef:16:fa:10:09:5a:b9:36:3d:77:3e:
17:8b:ef:c4:da:58:5b:8b:98:4a:3d:15:14:86:04:17:1d:ba:
a8:92:27:74:66:ff:9c:e1:3b:a3:ae:9c:71:11:6f:27:dc:d7:
fc:19:d3:2b:46:3c:6c:f6:ca:b7:de:69:c8:b4:7e:5e:72:5f:
ef:ca:ae:8c:85:cc:5a:c6:23:68:e9:75:1d:54:f1:0b:d3:1b:
27:9f:30:65:db:c2:8d:07:64:20:61:6e:c1:2d:25:25:e5:1f:
ed:bc:25:b4:8b:7a:2b:4f:8b:ef:20:b7:10:d4:8e:34:41:0a:
70:e6:35:e0:de:61:4e:29:e9:1a:12:7d:6d:c3:fb:d6:ba:04:
26:aa:a1:85:1b:33:1d:66:9b:38:ed:15:ed:1e:14:43:39:b7:
3c:e9:16:29:81:12:07:19:a3:b1:c9:eb:66:7b:3a:d4:ad:29:
3f:b5:e2:54:bf:c7:6d:92:60:dd:96:0c:04:7a:5a:aa:c0:cb:
48:51:53:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:57:05 2025 by rpki-client