Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ea4eaf2a-ba9b-351e-8242-df903b0c2126.roa
File: ea4eaf2a-ba9b-351e-8242-df903b0c2126.roa (raw, json)
Hash identifier: 42OzNz0+vBiXqnF5a67cA+cIh9YktfECQ5c6EpRyA9c=
Subject key identifier: 15:1D:78:45:12:0E:40:4A:AD:E8:BF:58:17:E9:30:E8:77:E5:F2:D0
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848FD56B2C819AA20DA41CFCBA0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ea4eaf2a-ba9b-351e-8242-df903b0c2126.roa
Signing time: Mon 24 Feb 2025 14:00:52 +0000
ROA not before: Mon 24 Feb 2025 14:00:52 +0000
ROA not after: Sun 25 May 2025 13:00:52 +0000
asID: 12222
IP address blocks: 2001:4878:4217::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:fd:56:b2:c8:19:aa:20:da:41:cf:cb:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Feb 24 14:00:52 2025 GMT
Not After : May 25 13:00:52 2025 GMT
Subject: CN=11235f57-c8ae-4f35-a476-fa34b46d3cb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e6:78:9e:e7:86:ed:2e:e1:4e:d4:1c:ae:c4:
2c:44:9e:98:e5:05:74:55:28:e5:7a:0b:98:9f:54:
8e:fd:76:e3:80:dd:91:53:7d:a7:3d:6c:bc:3c:bf:
bf:d8:1f:91:7e:a3:df:e7:d3:f7:67:d5:59:98:11:
a9:ed:c2:ea:7d:fe:d6:18:c6:31:ee:80:d9:b9:25:
89:2e:74:78:bd:3e:ed:6d:04:d1:5a:5a:bc:90:f8:
14:00:85:44:a7:5a:f3:df:c2:10:fc:e1:4e:9c:be:
32:36:3a:11:7b:cd:c2:3c:c4:c7:80:71:f0:ee:c7:
b5:7b:1a:05:d2:0f:a6:61:36:f2:27:2a:a4:96:4a:
4a:87:ea:92:fa:28:34:9d:9c:7f:29:f5:b5:40:28:
c4:06:b5:79:94:6c:26:1c:03:65:ca:7d:7c:be:ec:
10:ad:7e:de:a5:2a:bb:3c:3f:86:14:c1:ce:64:80:
ab:ce:1e:25:bd:c4:01:2f:8d:2e:fa:e6:a2:d7:96:
1d:5d:fb:54:64:17:da:54:ff:ff:35:ac:84:4b:2b:
3a:85:70:94:23:4c:29:b0:01:57:03:a7:c7:31:36:
63:7c:ea:7d:9e:44:61:8a:7f:b6:91:5c:f2:fd:6d:
34:6b:45:aa:39:29:5e:0d:11:7f:22:99:d4:2c:bc:
7c:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:1D:78:45:12:0E:40:4A:AD:E8:BF:58:17:E9:30:E8:77:E5:F2:D0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ea4eaf2a-ba9b-351e-8242-df903b0c2126.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:4878:4217::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
78:b0:f3:a2:6d:c3:fe:21:fa:08:c6:01:10:33:32:5d:aa:71:
5f:91:07:95:17:cb:a4:60:ad:0c:f7:0b:10:3f:8b:0a:e3:e7:
e3:cf:c0:33:80:92:f5:fe:87:ad:9d:b2:c0:59:c6:bd:2e:ec:
61:f4:32:3a:50:3d:62:4d:9e:21:08:f2:f4:b2:b4:09:03:b5:
79:3e:de:10:7a:d6:2c:59:be:8d:7f:5f:47:2e:2b:95:4c:42:
20:c3:cb:54:ac:f0:5d:f4:8f:ab:e9:c5:fe:7b:2e:69:8f:83:
ca:d5:e5:fe:d0:15:e0:4d:50:71:00:70:8c:09:e7:35:79:4a:
7a:e3:7a:bd:46:18:ba:41:f2:27:ea:1d:4d:01:9d:35:91:c6:
26:b4:08:83:ae:87:1b:f4:fc:42:8e:54:5c:94:91:0e:85:50:
e4:d7:ce:79:d0:fa:45:72:0f:ab:58:3b:3a:a2:46:19:43:6a:
7e:7b:5b:85:f0:47:12:c4:1f:3e:51:7e:a8:19:32:06:7d:c6:
8e:7e:77:02:b5:7d:20:29:e4:09:6d:72:a2:c9:e4:1f:94:5e:
73:8e:46:55:84:09:4a:a8:d3:fb:eb:d7:b3:07:05:24:e0:18:
4e:26:67:31:4f:0e:40:c2:b5:96:1e:84:98:dd:00:3b:5e:2f:
2c:74:3c:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:10:55 2025 by rpki-client