Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/009ff865-9a4b-3afa-b5a7-9cfe5d443684.roa
File: 009ff865-9a4b-3afa-b5a7-9cfe5d443684.roa (raw, json)
Hash identifier: 2K6gvkFESSkhcJ75eE6gxFn5UlmPHmx5ABbGiFnrTBQ=
Subject key identifier: 17:6E:95:04:24:14:7C:24:F6:EC:BB:6D:9F:B8:52:8B:B1:91:20:BA
Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial: 010D0C9F432858485F9AEF0850488CCFD16F5980
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/009ff865-9a4b-3afa-b5a7-9cfe5d443684.roa
Signing time: Mon 30 Dec 2024 02:00:39 +0000
ROA not before: Mon 30 Dec 2024 02:00:39 +0000
ROA not after: Sun 30 Mar 2025 01:00:39 +0000
asID: 54113
IP address blocks: 2607:8940:4240::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:5f:9a:ef:08:50:48:8c:cf:d1:6f:59:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Validity
Not Before: Dec 30 02:00:39 2024 GMT
Not After : Mar 30 01:00:39 2025 GMT
Subject: CN=658358fd-3667-431c-88a5-e79c21167b23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:7e:49:7f:4c:c9:a9:af:0c:66:46:f5:da:b8:
c0:c0:24:3f:40:da:38:7e:91:f0:bb:b0:02:f4:90:
2c:0f:93:cc:5b:67:24:96:13:1e:6e:b4:f2:d3:06:
f7:48:e1:35:e0:29:d3:07:4c:82:24:76:31:58:05:
b9:91:04:02:4a:50:3a:15:0d:b8:28:1a:37:4b:47:
2b:7e:33:4a:24:fd:de:3b:9e:f4:98:a2:33:33:b5:
0e:4d:ce:53:d4:78:ff:04:06:ab:85:a0:10:dd:9d:
ae:02:fe:2c:30:60:a3:15:3b:55:db:07:51:9a:0d:
b4:ab:9b:95:5f:83:8b:2b:c6:2a:08:49:d0:5d:8c:
23:23:8a:dc:59:10:b8:59:37:92:44:97:a7:69:09:
3c:15:7c:db:c3:4a:37:a5:c4:86:a7:ec:93:83:df:
01:aa:46:93:e8:c3:4a:ac:ee:11:22:81:49:6b:89:
09:04:4b:b9:11:9d:14:4a:b4:27:10:17:0e:b8:1c:
90:d9:ec:17:df:dc:c5:52:77:4a:87:8b:b8:0c:de:
00:b6:c7:2c:d8:c4:61:8e:b7:dd:46:03:fd:74:23:
54:40:29:1f:a3:7e:d2:ad:2d:37:3e:5f:0e:62:95:
cc:3d:90:f1:40:0a:6e:00:9d:4f:80:f6:ba:03:9b:
51:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:6E:95:04:24:14:7C:24:F6:EC:BB:6D:9F:B8:52:8B:B1:91:20:BA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/009ff865-9a4b-3afa-b5a7-9cfe5d443684.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
X509v3 Authority Key Identifier:
keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:8940:4240::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
15:d7:94:f9:cd:08:91:29:01:1c:de:d1:7f:26:79:0f:46:83:
5b:ed:ba:80:e9:4b:5b:d6:9e:39:0f:d9:c4:b0:27:a1:56:6b:
e4:a9:02:ae:bc:25:48:bf:75:03:88:5a:99:84:c5:ae:a6:c2:
6e:20:68:3b:5f:78:bc:a4:7b:c2:33:f3:a9:06:e7:6e:0c:fe:
c5:4d:bf:a3:90:c2:49:60:0a:8e:fe:99:d3:96:8e:c4:02:e1:
6c:09:f0:0e:55:1f:32:a9:c6:8f:cd:56:ee:a0:d0:24:55:d2:
13:7d:07:58:e5:fe:83:88:75:d4:8f:84:de:14:1a:94:a2:6a:
51:6a:9f:d3:43:e9:98:e3:00:9f:7e:ce:d6:bf:61:08:93:05:
f5:5e:9a:1a:53:35:be:dd:64:a8:55:67:20:ed:53:d8:8a:97:
34:cb:ec:89:f4:cd:a9:ce:3d:61:fd:1a:78:20:7c:79:36:83:
7f:98:b1:73:0f:d1:f5:86:bb:9f:50:e4:3c:ad:d9:61:98:ee:
6b:f1:53:c0:3b:1f:3e:6b:24:f9:ca:2a:3f:0a:e5:b8:15:26:
20:e3:be:aa:96:e5:94:87:95:ba:68:df:49:a1:b4:c0:45:3f:
cc:55:58:e4:d9:aa:6e:b8:f7:bc:ee:1b:c2:5f:7e:8b:1d:c5:
d0:05:6a:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 23:21:45 2025 by rpki-client