Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/97a2bcd8-9604-31c6-b0ff-73318fc26eb6.roa
File: 97a2bcd8-9604-31c6-b0ff-73318fc26eb6.roa (raw, json)
Hash identifier: 8LhnfXWbpF9Fc3gSY+zr60zZksrNT7y7sIa9RG0vSQ0=
Subject key identifier: AB:50:7F:AC:67:0B:E3:29:3C:BD:CA:1A:3A:CA:B2:1D:01:85:D4:25
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848AC60DB50E4B80A8268C4C000
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/97a2bcd8-9604-31c6-b0ff-73318fc26eb6.roa
Signing time: Sun 26 Jan 2025 14:00:52 +0000
ROA not before: Sun 26 Jan 2025 14:00:52 +0000
ROA not after: Sat 26 Apr 2025 13:00:52 +0000
asID: 35994
IP address blocks: 2600:1407:1b::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ac:60:db:50:e4:b8:0a:82:68:c4:c0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 26 14:00:52 2025 GMT
Not After : Apr 26 13:00:52 2025 GMT
Subject: CN=ebde1a6b-30f1-4a22-a643-981132206e81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:8e:78:a1:b3:2a:0f:37:7c:54:e4:b1:49:b3:
57:7c:3d:51:db:9c:65:4a:5f:24:05:d5:b5:7a:69:
ae:d2:59:a2:ab:e0:5b:0e:42:8b:4a:77:bd:80:f7:
1f:67:bc:6f:bc:73:4a:21:4b:ed:20:58:b4:13:1c:
94:e2:3c:54:6b:dc:d4:8c:52:6b:ae:b5:b2:8e:97:
ac:36:46:0e:59:69:e1:66:66:49:5d:17:89:b3:0a:
64:af:98:2c:02:81:9b:4b:fa:d5:73:03:fc:51:2d:
20:fb:98:ca:10:92:0d:6a:67:92:93:6e:7c:eb:32:
ae:84:a8:b7:c3:79:87:af:a2:57:81:fa:36:83:22:
68:ac:3f:bc:c6:52:63:00:48:f0:7d:a2:ac:63:5b:
a8:6e:c8:fa:8d:21:c0:a0:8c:56:31:a9:da:ef:87:
d4:ec:e4:b3:a0:29:f9:26:ae:69:d2:ac:14:d0:91:
68:a2:fa:eb:18:5c:61:d4:2d:cb:4e:80:89:c0:bd:
7f:ac:79:2b:6a:c1:9b:37:9d:4a:32:f3:11:d1:0c:
f5:72:c8:20:87:a2:28:ab:c9:1d:6c:09:36:80:0d:
e3:ae:fb:b2:2d:eb:97:1d:43:e2:f6:98:2a:65:68:
d3:2e:5a:f9:87:d3:cc:72:96:68:a7:12:a7:6f:40:
3d:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:50:7F:AC:67:0B:E3:29:3C:BD:CA:1A:3A:CA:B2:1D:01:85:D4:25
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/97a2bcd8-9604-31c6-b0ff-73318fc26eb6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:1407:1b::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
22:d7:6e:23:3d:e7:67:3e:fd:12:9c:cd:00:2a:95:21:3e:b6:
bb:95:46:09:3e:dc:5d:2c:65:19:15:f0:5f:a3:55:75:3b:43:
3c:58:a5:d2:86:21:41:fa:a2:93:22:62:0f:18:eb:58:2f:7f:
d4:44:11:94:fa:ad:49:37:e6:8c:d0:f2:c3:35:60:86:8a:61:
29:68:9e:dc:87:5b:54:b8:b9:fe:02:b7:bd:5a:6d:4d:aa:5a:
bf:ab:1b:8f:e0:68:0a:1a:97:e7:a7:d0:45:1f:35:bd:62:5e:
9d:b0:d9:fd:6e:84:b0:53:d3:40:dd:ec:7b:a2:57:83:d2:78:
37:76:34:a6:f4:84:04:17:88:69:66:d4:cd:fe:0d:f0:02:8c:
cb:4c:16:3f:ed:5a:03:92:f9:d4:b7:b5:46:47:64:8d:f8:9a:
f6:f1:c5:b0:3e:d6:13:32:80:f7:ec:c8:39:f2:6d:8d:e2:f9:
b3:2c:dc:ab:d3:58:32:6f:2d:18:9e:a7:30:b8:cd:d7:4b:74:
54:9e:33:49:f2:f4:79:29:7b:77:45:c6:8f:6d:fb:63:66:ff:
b9:a4:80:0a:dd:bb:49:98:6d:91:83:76:16:70:5e:51:8c:ec:
8d:55:08:bf:e6:46:21:33:7e:76:76:8a:eb:e1:5d:e5:c3:58:
60:33:a3:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:10:31 2025 by rpki-client