Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bf5fb8d8-7463-3ce5-9c7c-386fdaa0a56b.roa
File: bf5fb8d8-7463-3ce5-9c7c-386fdaa0a56b.roa (raw, json)
Hash identifier: T6lhLkDThVF374CdHlQIhqhYfHvJ7lK1skqGyE4sQqM=
Subject key identifier: 78:67:25:DA:28:FA:98:1F:64:2E:8D:3F:B5:F2:5B:C3:F3:63:8A:C2
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848A13628BAE9D243DD045E7F00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bf5fb8d8-7463-3ce5-9c7c-386fdaa0a56b.roa
Signing time: Wed 22 Jan 2025 14:00:52 +0000
ROA not before: Wed 22 Jan 2025 14:00:52 +0000
ROA not after: Tue 22 Apr 2025 13:00:52 +0000
asID: 20940
IP address blocks: 2600:141b:4800::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a1:36:28:ba:e9:d2:43:dd:04:5e:7f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 22 14:00:52 2025 GMT
Not After : Apr 22 13:00:52 2025 GMT
Subject: CN=ac311ddb-3c75-472c-b9c7-812aad5d7786
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:e2:88:27:7f:14:d5:d4:5c:78:c4:55:2b:bc:
14:0e:83:13:8e:6d:c2:d1:4b:66:33:3e:9e:ba:c6:
71:70:bb:6b:f8:25:4d:55:65:93:4a:12:a7:bf:c5:
a6:66:d8:cf:c5:e3:14:a9:9d:ca:40:37:9e:64:a4:
1c:d6:d2:42:25:88:6b:21:69:d1:3b:7e:4d:b8:0f:
0d:bb:34:0b:a7:8a:54:d1:24:2e:45:5a:80:23:dd:
58:e4:4e:59:ab:b0:ad:a6:05:1a:03:14:91:f0:e2:
f7:c1:8a:b3:8b:5f:82:47:bc:76:6a:16:f6:b4:14:
48:bb:1b:5b:39:bd:a9:4c:23:47:79:40:57:ba:12:
e2:b1:a6:f4:39:c5:07:d7:ab:3c:df:cc:b4:42:b5:
76:4d:91:87:47:0f:21:8e:42:25:82:3f:f5:2e:f4:
ce:76:1d:5e:c0:70:1a:05:23:7a:c0:77:d9:a0:87:
72:68:f9:00:80:6a:40:d6:b5:e4:08:09:ee:2c:45:
2d:28:1f:c4:45:fe:a9:5c:85:08:94:20:f0:4b:2e:
67:3f:c1:c0:79:1e:44:16:48:60:6e:d3:f1:53:fa:
20:4c:ea:88:17:f8:78:d5:b9:23:56:87:d5:1e:a1:
d0:54:b7:9e:04:5b:17:e8:d1:53:d2:ca:5f:52:7f:
ff:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:67:25:DA:28:FA:98:1F:64:2E:8D:3F:B5:F2:5B:C3:F3:63:8A:C2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bf5fb8d8-7463-3ce5-9c7c-386fdaa0a56b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:141b:4800::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
87:d4:d2:f4:67:66:83:07:c8:fc:b9:a8:88:31:96:dc:c2:35:
d5:03:b2:e7:31:69:f6:5f:e2:da:ac:3b:e1:ca:a6:b1:5f:8f:
22:d0:c7:e5:23:df:ff:a7:51:80:7e:a9:fa:4e:52:47:fd:9e:
c8:2f:59:ff:64:79:df:37:90:d2:00:5f:78:6a:00:99:41:18:
f5:44:58:c9:1f:34:1b:37:0c:3f:47:71:15:6f:ed:95:09:4b:
ac:d8:cc:73:a4:9c:7f:32:17:ad:88:b0:0b:81:83:69:4f:f5:
7d:b6:d2:5c:86:66:ec:ca:83:ed:00:b1:25:1d:e5:15:ee:83:
d1:68:0a:a2:e4:a1:57:0f:9b:42:2d:da:03:ea:c7:7b:d4:5d:
e8:4a:83:65:21:fa:18:48:b8:1b:c0:6a:53:09:b0:db:1d:87:
5f:aa:4a:cd:ce:ee:ba:b8:e8:ee:e9:8b:2e:c6:5c:e6:6a:ae:
9a:df:da:a6:e3:8b:10:d9:0d:9f:1e:61:3c:0f:ad:22:85:27:
2d:d7:41:d5:74:51:23:8d:1f:0f:e9:15:7f:68:b0:8a:84:8e:
e2:b3:93:bf:57:e9:b4:c7:24:b1:6f:19:bf:74:5d:7a:78:2e:
ce:4e:96:cc:ab:50:a6:44:9c:1d:e5:c8:d5:6d:95:cb:c9:19:
86:c5:bc:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:56:24 2025 by rpki-client