Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/3cacdbd3-d705-3430-ba14-3e45b4062840.roa
File: 3cacdbd3-d705-3430-ba14-3e45b4062840.roa (raw, json)
Hash identifier: QsCJ5LZHCGP/ffJxIQ9ZlqlfsrEkAfWSawZtxwoI1C0=
Subject key identifier: 17:EE:10:1E:1B:B3:3E:99:3D:1E:C6:75:2E:A5:C2:B5:5B:92:45:DF
Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial: 010D0C9F432858485F9B09671B3D609EE088CE80
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/3cacdbd3-d705-3430-ba14-3e45b4062840.roa
Signing time: Mon 30 Dec 2024 02:00:39 +0000
ROA not before: Mon 30 Dec 2024 02:00:39 +0000
ROA not after: Sun 30 Mar 2025 01:00:39 +0000
asID: 54113
IP address blocks: 2607:8940:5a30::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:5f:9b:09:67:1b:3d:60:9e:e0:88:ce:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Validity
Not Before: Dec 30 02:00:39 2024 GMT
Not After : Mar 30 01:00:39 2025 GMT
Subject: CN=fd2f6892-310a-4e8c-a72d-f1ae2e8de3c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:03:e3:72:73:71:e8:a1:8e:51:fc:d6:6c:cf:
a7:e0:a7:29:5b:44:a5:3b:34:c0:9e:e0:7a:78:91:
10:7e:4d:40:5b:89:22:67:6c:1a:6c:5d:a6:b1:c9:
b2:ae:f7:96:e3:ea:b3:66:bb:bc:3f:d2:a7:96:55:
0e:7c:4e:f5:38:6f:1b:55:e4:25:c0:12:0d:39:d4:
23:b6:66:ea:9d:ba:60:73:c1:a0:b0:6e:a4:12:b4:
fe:49:93:61:20:38:27:8d:bb:f9:af:98:7a:b0:3d:
05:62:d6:0b:fd:91:e5:9b:15:0b:df:61:c5:82:c4:
b0:ba:3f:27:94:65:50:8f:ec:ec:ba:93:6e:24:e2:
4b:54:6c:fa:0d:72:17:39:9a:86:f6:e5:2a:34:88:
50:52:63:14:ce:27:72:7d:68:38:6d:a1:b9:5d:21:
8e:5d:22:3d:7b:1a:59:7f:79:a9:0f:f6:48:e4:64:
4f:01:cb:0e:c0:d0:11:8e:8e:0e:1d:7a:d3:08:84:
90:33:ff:4e:da:4c:f8:45:4b:4b:21:f2:83:11:00:
71:bb:e9:83:a1:69:54:a6:5b:f1:3a:31:e0:d6:38:
9a:40:f7:66:84:15:e3:ca:5c:6b:b9:a6:2c:ff:d5:
da:4f:36:dd:a1:16:5b:a8:67:a3:12:0f:23:63:48:
21:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:EE:10:1E:1B:B3:3E:99:3D:1E:C6:75:2E:A5:C2:B5:5B:92:45:DF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/3cacdbd3-d705-3430-ba14-3e45b4062840.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
X509v3 Authority Key Identifier:
keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:8940:5a30::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
50:61:e7:82:60:fc:c7:9c:42:5f:77:07:0e:fe:dc:2f:c4:54:
8c:fb:44:32:cd:14:51:f2:1b:ca:ef:57:7d:47:32:66:d1:85:
22:16:62:33:7f:95:62:d0:44:7a:42:ab:7e:f6:96:74:34:c0:
e5:99:cc:e3:9e:b9:96:1c:3f:33:d1:49:e7:16:59:d6:a4:77:
76:d0:1b:fc:8b:23:27:cd:af:fb:31:f9:a2:53:c8:cc:7f:66:
65:f4:76:1b:b0:46:fe:34:c1:63:75:28:18:c9:2f:aa:f4:16:
2a:65:85:cc:33:1d:26:7f:9a:7b:58:cb:9c:6c:59:b9:4a:7e:
45:14:46:6b:61:b2:ef:95:2a:48:7c:42:8f:b0:10:73:d4:d1:
7f:23:82:ce:88:92:22:38:c2:e9:fa:33:49:f8:2c:8e:20:4b:
ea:a7:0d:d0:20:de:23:4b:61:92:8e:e6:a5:02:b7:ea:d4:6e:
42:04:b8:88:2e:70:5c:2e:c4:7c:64:a6:69:5b:ec:e7:8d:23:
42:4a:69:d1:2d:ec:2a:6c:ba:58:50:43:67:bb:6d:4d:f1:32:
df:f2:20:e1:81:56:5e:39:d3:aa:14:50:1c:4a:5d:59:03:85:
b8:b0:63:65:47:09:7b:a8:73:a3:c1:08:47:af:4c:b9:69:de:
41:05:18:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:58:26 2025 by rpki-client