Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ab812e02-1f2c-3baa-8d8a-a8031052b514.roa
File: ab812e02-1f2c-3baa-8d8a-a8031052b514.roa (raw, json)
Hash identifier: hEfHkzJYNwcg3QdHxcQc4rRfYYdoSVBGMILYexJ9qZ0=
Subject key identifier: 1B:DF:4E:59:9C:40:76:D0:D8:EB:7B:9A:46:93:5F:07:77:A0:80:5E
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848AC60DC42A060773C788FD3F0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ab812e02-1f2c-3baa-8d8a-a8031052b514.roa
Signing time: Sun 26 Jan 2025 14:00:52 +0000
ROA not before: Sun 26 Jan 2025 14:00:52 +0000
ROA not after: Sat 26 Apr 2025 13:00:52 +0000
asID: 35994
IP address blocks: 2600:1408:c800::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ac:60:dc:42:a0:60:77:3c:78:8f:d3:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 26 14:00:52 2025 GMT
Not After : Apr 26 13:00:52 2025 GMT
Subject: CN=5e5b2136-220c-40db-921b-5af2f32600eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:dc:3b:0d:90:c9:09:15:21:6c:1e:09:fd:2c:
13:56:d1:df:4b:91:4a:f0:78:a6:e1:c4:30:e1:5c:
20:72:2c:0e:c0:90:11:f2:e6:5c:1b:2f:ed:e7:8e:
93:a3:34:0f:78:84:33:aa:b0:96:10:60:5a:3d:27:
f6:13:3b:7b:86:f1:64:b0:90:98:5d:41:0a:45:44:
ae:49:dc:d7:75:27:24:30:a6:be:b6:59:40:f3:56:
d1:a8:a3:a1:67:cd:dd:fc:d8:d4:0b:43:93:84:de:
0b:57:6d:a7:08:8c:39:25:41:55:39:0a:44:22:41:
a7:72:42:cd:81:34:c6:09:b6:fe:b2:76:c5:c9:a6:
cd:76:8f:e2:7b:56:ca:1a:88:a6:4f:e5:f6:d8:00:
b0:d2:3a:57:48:39:ad:63:c8:ca:74:8a:b7:45:6c:
3f:c1:27:f7:fe:2f:ee:52:f4:85:78:c8:bf:4c:b1:
3a:5c:44:c3:db:dd:5d:05:aa:b9:62:47:64:9b:4f:
3f:ab:03:66:dd:aa:71:9e:26:a3:a4:82:66:53:84:
eb:19:99:73:80:75:77:9c:d9:f5:88:62:54:57:ec:
34:ce:35:a9:37:b5:1f:3f:85:6e:fb:f8:9f:92:c3:
d1:fb:57:5b:49:82:38:c5:3f:f5:9d:37:e0:c9:e7:
57:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:DF:4E:59:9C:40:76:D0:D8:EB:7B:9A:46:93:5F:07:77:A0:80:5E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ab812e02-1f2c-3baa-8d8a-a8031052b514.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:1408:c800::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3a:83:e1:61:98:08:55:ba:59:48:37:a2:f2:75:18:59:b0:1e:
f2:ee:f6:71:e1:15:70:be:9c:08:4c:e8:01:1c:27:5a:f9:de:
01:ab:26:aa:db:d0:f2:19:4e:08:95:b4:0f:4e:32:8e:a1:16:
f4:dc:4c:1e:9e:48:3d:17:37:8b:fa:2c:13:0b:48:a4:0b:b9:
69:cd:f8:78:f6:96:57:93:8f:e0:2f:3a:70:c9:8f:81:7f:bc:
ac:c1:f2:d2:ca:c3:a0:12:28:2c:2e:ff:cb:09:df:25:39:48:
59:13:d1:d2:58:e3:80:3d:60:a4:88:f9:42:8e:80:ce:f4:11:
fe:0a:e1:17:37:1b:de:72:ec:6e:69:5b:bc:04:85:88:8e:00:
17:8a:a8:8d:5c:73:43:d4:54:3f:6e:62:f5:be:b4:cb:b6:f0:
95:29:4d:c5:96:da:5d:01:db:4d:47:8a:4a:ae:0d:cc:fa:f1:
db:36:b6:d6:07:1e:a1:e0:1b:ee:af:28:82:15:21:e3:23:a2:
98:aa:bb:52:f9:63:7e:a6:fb:7e:e1:12:f2:e3:a6:1b:e5:58:
f9:37:ff:13:98:13:1c:e9:08:32:37:37:f5:20:8b:58:03:b9:
dc:35:a7:95:4d:fe:b2:5c:88:2c:df:eb:a1:bb:01:2c:bc:5d:
68:42:5c:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:14:48 2025 by rpki-client