Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d0ce65e8-81a7-368d-978d-9407cbffcc4a.roa
File: d0ce65e8-81a7-368d-978d-9407cbffcc4a.roa (raw, json)
Hash identifier: SPbFSnx7OhWFV0G5wUokzIqQgo+q7ZZvJZmlAdMZ76Y=
Subject key identifier: 31:6F:AF:29:52:2A:C1:0D:67:8B:26:13:62:17:F5:C4:9E:78:37:AD
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584900215CBE7FEDD0E9B82CEF40
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d0ce65e8-81a7-368d-978d-9407cbffcc4a.roa
Signing time: Tue 25 Feb 2025 14:00:52 +0000
ROA not before: Tue 25 Feb 2025 14:00:52 +0000
ROA not after: Mon 26 May 2025 13:00:52 +0000
asID: 12222
IP address blocks: 2001:4878:8324::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:00:21:5c:be:7f:ed:d0:e9:b8:2c:ef:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Feb 25 14:00:52 2025 GMT
Not After : May 26 13:00:52 2025 GMT
Subject: CN=dec2fddc-c149-4894-be70-c8781928bb4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:38:30:86:bc:b0:28:5e:95:ac:ce:0b:c2:9f:
d0:a1:dc:fb:73:05:2a:b6:28:11:a9:69:c2:76:1e:
db:d8:2b:b6:d9:4f:0d:13:d4:aa:a3:32:1a:06:83:
74:52:55:4a:25:63:9e:45:10:f1:6f:e0:a1:60:ac:
c0:28:8a:14:9c:42:8b:24:c6:ad:92:1d:fc:f5:dd:
6a:06:fd:50:87:31:1f:65:d0:89:98:ac:ef:39:a9:
7c:ee:eb:8d:f7:1e:df:a8:05:09:2e:4c:bc:aa:20:
1e:77:0c:0b:07:7a:29:81:05:36:b4:a5:e0:f5:24:
b8:2d:fb:e8:1e:60:5b:e3:d4:12:11:a7:a1:e4:32:
a3:56:4b:ec:71:ef:4a:92:1b:89:91:b3:e2:99:ef:
8d:55:ee:e0:7e:3b:db:f8:bc:09:1e:ee:a3:e4:c0:
71:77:7c:b8:52:25:c4:c9:58:aa:03:1a:db:42:3c:
80:17:36:3b:62:99:80:1d:f8:f4:55:d8:47:5f:84:
99:b4:ab:1c:1b:7e:e8:9a:51:18:b4:85:d0:d2:ea:
8b:10:f3:e1:11:56:20:cc:73:9e:2d:56:07:71:80:
92:64:e7:ee:13:f7:9e:a1:bd:a7:95:9f:e2:9a:ed:
0a:b7:ab:78:93:cb:ef:24:5a:ad:36:ea:89:77:48:
81:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:6F:AF:29:52:2A:C1:0D:67:8B:26:13:62:17:F5:C4:9E:78:37:AD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d0ce65e8-81a7-368d-978d-9407cbffcc4a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:4878:8324::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
45:08:de:59:ed:23:73:70:0c:11:e3:65:2a:8c:08:cc:42:9d:
67:65:2e:a3:7d:23:f6:1b:c3:fe:f3:22:b3:18:97:51:a5:9b:
35:d4:d3:02:e7:f9:35:a6:3c:c7:d0:93:53:d7:fe:f7:8e:c8:
2e:66:89:3b:2a:bf:dc:a0:9b:6f:f5:50:68:88:71:fc:73:e6:
83:7e:8d:36:59:01:b3:89:b0:64:62:06:bf:b7:ea:a4:d0:72:
25:4c:ea:a4:1b:f3:bf:03:cd:c6:a0:01:9c:fb:6b:6b:af:df:
14:2c:0e:98:70:ef:f1:73:3b:8d:73:01:fe:63:50:e3:a0:b6:
39:7c:7f:f3:97:5e:1f:ee:56:98:dc:0b:bc:76:c0:6e:91:aa:
ab:25:12:68:95:d5:dd:0a:ba:fe:99:cc:50:54:cc:f2:b6:0f:
72:7a:f1:6a:b1:6e:bf:bb:1b:18:cd:03:3f:62:d0:ad:6e:95:
a8:21:60:de:5f:9e:ad:9b:00:8c:70:d8:bd:38:7e:26:21:87:
3b:69:62:8d:ed:c8:74:f6:0e:95:0f:31:61:f3:f1:b0:72:12:
a9:07:eb:14:3d:99:0d:46:0b:6b:51:c5:9e:b6:a5:87:01:42:
e3:c9:33:64:72:50:18:7a:d4:36:83:aa:12:ac:ca:e6:0b:db:
49:c0:24:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:52:31 2025 by rpki-client