Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b5ecdf00-75ad-3ac7-8fe0-1f988083b3b7.roa
File: b5ecdf00-75ad-3ac7-8fe0-1f988083b3b7.roa (raw, json)
Hash identifier: G7McvcSGY2PZEcVMKAPmZP0HHKMTwAn078mX8Qyq93k=
Subject key identifier: DD:EA:7D:D6:E8:6C:55:D1:6A:1D:E7:AF:EC:E3:9E:A5:99:64:08:38
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848960B5DA6FFAC7FD09EBA6E00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b5ecdf00-75ad-3ac7-8fe0-1f988083b3b7.roa
Signing time: Sat 18 Jan 2025 14:00:52 +0000
ROA not before: Sat 18 Jan 2025 14:00:52 +0000
ROA not after: Fri 18 Apr 2025 13:00:52 +0000
asID: 20940
IP address blocks: 2600:140f:5::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:96:0b:5d:a6:ff:ac:7f:d0:9e:ba:6e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 18 14:00:52 2025 GMT
Not After : Apr 18 13:00:52 2025 GMT
Subject: CN=4a794a41-751f-4bb2-9ccb-13e0671fa8c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:96:1a:c5:20:1c:5e:dc:8c:f7:8e:77:96:a7:
3a:2a:21:98:18:cf:1c:32:61:1f:78:9c:02:65:ac:
ac:32:d2:37:e5:67:f1:55:57:b4:63:df:4b:19:9e:
7c:98:c7:2d:51:6b:c1:6e:2e:db:d0:be:08:6e:15:
7e:79:3f:52:dd:01:1b:09:14:8a:eb:4d:cf:46:c4:
11:d6:c4:fe:f7:7b:21:7c:a0:94:63:7b:7c:53:e0:
88:41:b7:3a:b8:5a:a1:af:7b:0b:9f:7d:9e:9d:99:
04:35:d0:39:58:d9:97:01:b5:68:23:6c:68:ad:d7:
f7:bc:e4:ba:5c:1d:5f:9d:93:90:e0:d8:c3:b1:e9:
f3:71:ff:11:4a:f3:0b:70:7a:dc:bc:6f:17:a5:84:
5e:1f:86:84:9f:47:d3:0c:b6:79:68:db:61:91:af:
7b:cf:23:44:01:13:b6:c8:a5:b9:c7:a3:86:e9:af:
4c:de:86:8e:ec:a7:f0:9f:af:b9:e6:95:5a:3a:4c:
53:98:38:ad:89:44:57:d3:ab:73:7d:3e:5f:59:76:
b0:75:de:36:45:2c:46:36:3e:90:28:6c:18:c0:ab:
92:55:6a:40:7b:15:57:f0:36:18:51:f9:d6:ef:17:
1f:fe:a7:64:ec:75:58:40:11:97:f8:e8:4e:3c:43:
c8:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:EA:7D:D6:E8:6C:55:D1:6A:1D:E7:AF:EC:E3:9E:A5:99:64:08:38
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b5ecdf00-75ad-3ac7-8fe0-1f988083b3b7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:140f:5::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
86:9f:23:6c:53:0f:25:cf:09:b7:88:54:36:04:99:6f:0b:b4:
cf:fe:09:d2:84:f0:f0:e7:c9:8f:27:fc:99:df:1f:9c:b1:39:
d0:82:f5:f4:db:b1:06:5f:96:2e:43:42:fb:1d:03:a8:1a:38:
47:31:77:b2:83:6b:14:fc:26:5e:a3:03:e1:2c:fb:c5:d7:ee:
11:1e:3c:5c:b6:ec:31:85:ca:38:0f:9e:98:3d:48:ed:fc:d6:
57:53:55:2b:8a:de:83:d5:5a:46:a5:a5:c5:1e:4a:91:44:42:
a8:c8:dc:45:6f:51:31:66:cb:5b:b6:91:96:05:15:5d:5b:68:
4c:0b:8d:4c:01:28:7f:b8:3f:8f:44:11:37:04:bb:42:29:cc:
b0:be:dc:16:a7:8e:37:c7:80:4e:9d:7b:f4:e4:f6:4f:2b:4c:
d9:bf:61:32:ae:a6:7e:d4:5e:c1:c8:ec:98:86:88:e9:61:18:
a5:86:4a:c9:a7:d4:81:96:a0:aa:a7:5e:6d:f4:90:69:cb:13:
46:13:d1:68:b7:2b:2a:b8:88:a6:b7:4c:65:23:f9:8c:46:97:
a8:60:b5:2e:90:50:6b:dc:4f:3f:44:c5:f6:28:b2:c7:77:02:
ff:e1:c0:3f:58:9c:03:84:ee:37:56:b9:48:eb:74:40:a1:14:
e4:bc:1e:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:57:44 2025 by rpki-client