Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d21c9202-f4bd-3a23-abd0-2f4554817874.roa
File: d21c9202-f4bd-3a23-abd0-2f4554817874.roa (raw, json)
Hash identifier: 6MU0PfcZlrr9GPF1y39itkoUA5RtB+Ew2R6Di4OIwUo=
Subject key identifier: D3:9E:7B:30:B8:76:36:FE:7A:D3:D6:F8:11:F6:44:3D:3D:47:8C:F6
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584898D6184C94B7EDA841A3F190
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d21c9202-f4bd-3a23-abd0-2f4554817874.roa
Signing time: Sun 19 Jan 2025 14:00:52 +0000
ROA not before: Sun 19 Jan 2025 14:00:52 +0000
ROA not after: Sat 19 Apr 2025 13:00:52 +0000
asID: 20940
IP address blocks: 2600:141b:13::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:98:d6:18:4c:94:b7:ed:a8:41:a3:f1:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 19 14:00:52 2025 GMT
Not After : Apr 19 13:00:52 2025 GMT
Subject: CN=aef578ed-ed9f-4d3d-b64d-4a20b1810283
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:36:19:33:de:07:e2:22:57:6d:67:09:1f:4a:
ff:d8:74:3c:a8:31:fd:8a:9d:09:35:ec:07:39:b2:
cf:0d:89:e5:3b:68:bd:1d:31:72:4f:31:8b:e1:53:
d7:dc:c1:52:2d:df:af:20:d1:87:f5:26:c5:be:ca:
c4:a9:7b:a2:e2:c9:99:e8:12:57:23:6f:62:ff:46:
30:0a:48:ed:fa:82:f0:f7:2b:a4:08:12:53:9b:33:
47:e0:b6:7e:37:0f:19:e6:57:58:e8:b8:44:bf:ec:
17:a7:ed:99:18:37:3c:1e:11:b9:9e:cf:2a:6d:5d:
51:9e:d4:81:bb:96:2a:78:44:be:8f:75:79:db:70:
3b:6e:c2:c5:90:47:de:0e:2e:04:f2:82:74:de:ea:
e7:fa:af:39:31:fb:ef:82:4e:41:ad:ae:5c:aa:2b:
e9:41:6d:66:aa:2e:d8:7e:1d:ed:10:b4:52:a3:ae:
f6:95:4c:0f:4f:42:94:e8:87:55:a3:40:e9:20:96:
95:51:27:8c:e8:e5:b8:fb:d5:95:2d:81:d1:4c:25:
f2:3f:34:31:fa:9a:ed:da:96:b2:9a:6f:63:37:83:
96:cc:51:9d:30:fc:4d:06:69:8c:22:40:5c:78:0c:
40:e5:10:c4:22:87:25:3e:7f:4f:84:48:7f:94:4c:
d6:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:9E:7B:30:B8:76:36:FE:7A:D3:D6:F8:11:F6:44:3D:3D:47:8C:F6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d21c9202-f4bd-3a23-abd0-2f4554817874.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:141b:13::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
07:02:ad:b9:7a:e4:60:3f:ce:58:9c:40:b8:68:77:f2:e0:5e:
dc:09:44:03:07:40:f2:e7:b9:32:49:c7:05:d3:17:4e:57:5a:
65:6d:a6:30:f5:79:86:b6:2c:78:e1:1b:6f:84:29:48:3c:d5:
9d:14:13:88:41:e2:94:02:59:5f:09:bb:c4:ce:40:24:d6:9a:
3c:1d:7d:e5:42:77:96:9a:b3:66:3b:35:99:2a:0b:94:07:38:
ce:ab:3e:d8:24:d7:29:ef:80:7d:8d:90:d2:e2:27:7e:db:c1:
c3:f5:aa:5a:07:5b:f5:b4:47:3a:f3:16:8d:42:6d:a6:84:a6:
83:ee:30:94:32:58:8d:9a:a9:34:db:e2:2b:1c:87:61:c1:b5:
93:4e:cb:f1:fd:f0:31:b3:e5:33:dd:fe:c8:e6:50:da:26:4b:
78:4e:b7:2a:36:09:ff:38:75:67:0b:14:b6:e6:6e:7b:64:f0:
17:1a:9c:8a:6e:1e:dc:35:54:5e:8f:19:a8:f6:d1:5a:7a:89:
2a:d4:50:46:e0:a5:cc:6b:b8:99:96:1e:4f:3e:c2:41:34:7b:
3c:59:ba:6f:0a:a9:bb:64:af:15:fd:9b:0e:f6:0b:af:7c:36:
a5:b0:65:ef:19:93:86:9b:8b:4b:38:0b:72:29:7a:9f:8b:eb:
55:3b:d6:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:23:17 2025 by rpki-client