Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/2c38e0db-99e3-3b87-892c-8a35898a440e.roa
File: 2c38e0db-99e3-3b87-892c-8a35898a440e.roa (raw, json)
Hash identifier: OYaVpxXv59qAuSWGKLQyu/J/n8Q/t456nAy6hszQ/PM=
Subject key identifier: D9:7E:41:51:5B:57:76:76:18:7B:A5:3D:AC:50:03:0E:E7:0C:A0:52
Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial: 010D0C9F432858485F9B0C167A41ADBC78A22D80
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/2c38e0db-99e3-3b87-892c-8a35898a440e.roa
Signing time: Mon 30 Dec 2024 02:00:39 +0000
ROA not before: Mon 30 Dec 2024 02:00:39 +0000
ROA not after: Sun 30 Mar 2025 01:00:39 +0000
asID: 54113
IP address blocks: 2607:8940:5b90::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:5f:9b:0c:16:7a:41:ad:bc:78:a2:2d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Validity
Not Before: Dec 30 02:00:39 2024 GMT
Not After : Mar 30 01:00:39 2025 GMT
Subject: CN=ca9957e5-fcdd-4054-854d-c23417a849c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:ba:6e:3b:ec:29:f3:43:d0:09:7e:43:16:a3:
37:f4:1e:2d:f3:53:a7:1b:fb:69:4f:d0:78:43:ad:
c8:b1:4c:1c:9c:69:bf:74:86:a1:10:cb:7e:a4:3a:
60:e6:1f:5e:47:dd:1f:49:79:81:57:c3:e7:31:87:
03:3e:ab:58:8e:22:82:c6:38:b0:48:92:3c:0e:c4:
28:1c:64:ef:ae:16:b1:84:9e:2b:29:5e:ea:dc:90:
33:1d:11:f5:cc:9e:e7:99:93:56:79:6c:29:e5:c9:
00:e0:16:9b:99:1b:21:f0:09:6e:6b:e7:d4:14:b3:
e4:91:af:e3:a6:4f:11:eb:57:9e:a1:d6:2e:be:92:
6a:b0:54:70:ae:dc:2f:07:b7:01:96:d2:b9:a6:0e:
09:9c:e3:cb:a1:77:ec:14:bf:0c:f2:e5:60:27:7b:
b5:94:54:b4:9b:8b:91:ff:2c:b3:28:1c:ad:d3:5e:
24:ab:27:11:39:17:12:b6:65:83:1a:52:26:31:f2:
cf:88:96:ad:54:33:f4:82:65:8a:f3:7d:14:4c:7e:
21:30:2b:36:db:9e:0a:ca:54:9a:0b:5b:c0:24:19:
5c:02:ae:1b:3e:59:df:3a:d6:c9:be:ed:46:d0:5c:
94:96:7b:93:28:86:40:d2:ff:ac:94:a5:44:0c:c4:
39:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:7E:41:51:5B:57:76:76:18:7B:A5:3D:AC:50:03:0E:E7:0C:A0:52
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/2c38e0db-99e3-3b87-892c-8a35898a440e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
X509v3 Authority Key Identifier:
keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:8940:5b90::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
36:0b:2f:9b:ab:5a:68:6a:3b:06:fc:46:3f:61:4e:64:6b:13:
94:c8:fc:cc:02:09:01:ba:bc:b8:01:6d:9f:b1:76:2d:5d:64:
30:4d:f2:cf:62:1d:8d:ad:9b:14:1f:06:a3:88:24:8b:1e:be:
e1:bd:ef:56:27:d1:c6:42:3e:5d:a8:42:ee:de:15:b8:88:10:
22:3d:2a:5b:91:39:24:46:13:44:ce:12:f6:da:2c:e3:94:19:
02:4b:be:49:b2:9f:d7:59:1d:74:7b:18:f0:4a:2f:43:69:a5:
da:b1:55:c1:cc:6d:6f:18:a1:07:13:48:87:d0:e8:80:99:b0:
89:e1:47:8d:77:54:6c:91:28:d0:20:91:fa:95:bc:d8:ae:89:
d0:55:bd:3d:f8:ad:48:72:bb:14:05:2f:43:80:1c:d6:8d:6b:
16:bf:b6:10:d8:6d:5c:ab:2d:99:b8:c3:71:2c:1d:7c:45:47:
09:d7:10:70:ad:8f:f3:9d:4e:c9:7f:59:19:c9:cb:a6:e3:3b:
e3:50:ed:2a:e6:74:4f:ce:9b:34:54:6e:04:8d:25:02:bd:93:
68:7e:0c:3f:3d:3a:ca:b9:ce:24:fc:45:1f:41:9b:5d:1d:af:
c2:5e:e1:43:7a:ac:fc:2b:5b:47:3d:10:27:01:38:13:2b:e4:
10:91:32:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 03:58:28 2025 by rpki-client