Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c36cf8b4-37a1-3cc5-8816-aca9914f635c.roa
File: c36cf8b4-37a1-3cc5-8816-aca9914f635c.roa (raw, json)
Hash identifier: eeru796DwnYanzNkmIjcYs9GF9QCHC4BWyXVWK2hPnk=
Subject key identifier: 53:ED:2D:33:DC:E4:06:17:18:FC:F0:48:76:D9:FC:56:90:9C:1E:29
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858487CEB3647D5A1817C3E0DA700
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c36cf8b4-37a1-3cc5-8816-aca9914f635c.roa
Signing time: Thu 09 Jan 2025 14:00:52 +0000
ROA not before: Thu 09 Jan 2025 14:00:52 +0000
ROA not after: Wed 09 Apr 2025 13:00:52 +0000
asID: 21342
IP address blocks: 2600:14c0:e::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7c:eb:36:47:d5:a1:81:7c:3e:0d:a7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 9 14:00:52 2025 GMT
Not After : Apr 9 13:00:52 2025 GMT
Subject: CN=a09d95e9-ac1d-4207-9a73-6042b7c13bea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:f2:65:3e:4f:ad:9c:65:eb:37:36:76:93:96:
4e:4c:44:fe:8d:36:8a:8a:72:59:28:a2:c7:d9:0c:
36:db:6c:06:4c:b2:26:7a:ad:57:75:48:20:a4:dd:
46:65:a0:b3:51:33:3b:64:48:59:63:46:58:01:e9:
20:13:91:c6:2d:9e:1b:3d:1f:af:78:0d:a1:26:78:
9f:41:a7:e5:79:5b:57:8f:97:eb:e2:68:8b:f6:63:
1e:2a:e7:92:ee:ff:6f:b5:29:7a:17:75:19:e9:90:
67:49:b3:57:fd:06:e0:b1:eb:aa:a8:ba:26:8f:2f:
e1:a4:6a:15:df:25:c5:f9:04:3a:06:48:b2:f2:75:
5d:53:6a:8a:8b:3b:c6:c5:37:42:8c:a8:15:bc:4a:
ce:0c:5b:36:af:fa:eb:64:76:c1:26:21:bd:79:6e:
ee:a9:56:83:42:ec:8e:d7:ab:ef:d8:fb:10:2d:1b:
23:fd:73:1d:4a:e6:72:99:e6:0e:91:4b:4e:1c:bb:
cf:e4:0f:55:e0:a0:0b:62:e7:1e:ee:e8:a8:00:f3:
a9:cf:27:b5:b8:b8:bf:60:a1:c3:ea:d7:d9:90:53:
7f:20:3c:47:ae:af:f1:74:cd:d6:97:b0:96:91:6d:
ad:8d:4d:3b:08:c4:d4:67:b3:73:9b:10:7a:6a:c7:
c4:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:ED:2D:33:DC:E4:06:17:18:FC:F0:48:76:D9:FC:56:90:9C:1E:29
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c36cf8b4-37a1-3cc5-8816-aca9914f635c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:14c0:e::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
23:43:d9:40:0e:cc:70:16:2c:a0:dc:37:38:31:b2:97:fe:ce:
d5:b8:1d:aa:87:ac:80:8b:d1:15:d7:ce:0f:f4:a2:33:e1:07:
ac:e0:bf:4a:7e:b8:12:10:cf:8e:7c:62:23:ec:7b:7e:51:b0:
89:6c:82:71:2e:67:8f:a6:c3:cf:3e:03:0e:56:6d:93:53:16:
5a:c0:01:e8:0a:32:4d:cf:1f:ec:15:04:75:12:f0:89:4f:fc:
5a:48:63:6b:50:e8:88:51:2b:d7:ee:03:ce:a0:32:cb:8e:51:
73:f3:82:c1:0c:b2:ea:c4:f8:c5:05:37:cc:f7:6e:77:51:6f:
41:52:41:36:e4:e9:8c:69:0e:0b:46:3f:42:f4:b3:40:1c:83:
3b:53:62:21:04:7d:2b:cc:1a:1a:0f:84:ac:9d:05:56:1e:b9:
f8:02:72:38:7b:1c:5b:76:9c:b8:fe:4c:7c:4d:cb:90:c4:14:
a6:2c:ea:91:20:b7:48:2a:a1:0b:2e:06:ba:3f:9e:e3:ec:2d:
8b:09:2a:0a:19:10:19:db:59:84:38:bb:3f:6d:69:42:29:f0:
fe:1b:ea:bb:ce:2d:4c:30:00:3a:77:d0:45:74:38:a1:46:40:
ab:a1:ed:36:b7:39:fc:49:a1:1a:a5:3a:69:10:ff:30:17:b2:
30:cd:bf:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:59:48 2025 by rpki-client