Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/a3ca3291-19bd-3ac0-91ce-a688a6015051.roa
File: a3ca3291-19bd-3ac0-91ce-a688a6015051.roa (raw, json)
Hash identifier: 9KcUHj67wiCkFnnDnOHX0TYrB/ucqnW4xUv8Fp+VlmM=
Subject key identifier: 5B:CA:B6:23:00:54:6E:CB:02:16:C6:94:3A:72:38:10:4B:7D:3B:23
Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial: 010D0C9F432858485F9AF462B7714E943EADC920
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/a3ca3291-19bd-3ac0-91ce-a688a6015051.roa
Signing time: Mon 30 Dec 2024 02:00:39 +0000
ROA not before: Mon 30 Dec 2024 02:00:39 +0000
ROA not after: Sun 30 Mar 2025 01:00:39 +0000
asID: 54113
IP address blocks: 2607:8940:5ea0::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:5f:9a:f4:62:b7:71:4e:94:3e:ad:c9:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Validity
Not Before: Dec 30 02:00:39 2024 GMT
Not After : Mar 30 01:00:39 2025 GMT
Subject: CN=6087f993-c99d-4746-bba4-281ec7324f1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:db:c8:df:04:e4:36:4e:b1:0a:1f:7f:5c:8c:
5e:f9:12:32:ad:fe:54:56:1e:94:d6:3c:4d:fa:75:
5d:bd:72:50:97:df:65:c8:36:59:2e:38:76:d4:de:
97:30:80:76:16:31:3b:55:ea:43:1d:8b:d1:5a:5b:
d7:b4:0a:e5:31:8a:2e:7b:e8:3d:96:f0:61:cd:47:
2d:e2:99:96:94:30:86:49:4b:d3:f9:bc:4d:c4:3d:
ba:37:33:b2:97:66:0d:d7:18:0c:54:90:12:ee:66:
64:37:65:cd:bc:88:b1:21:b7:e3:33:4a:35:93:4d:
6c:0a:31:f0:62:9c:ec:17:fc:6b:c2:89:d8:37:c5:
a2:bb:6f:19:ea:68:be:2d:93:26:e0:c3:28:12:30:
09:3c:40:94:06:a9:f5:0c:12:e7:26:46:40:5f:7c:
2f:50:33:92:e4:ef:8e:97:9e:c4:19:0b:36:fb:04:
35:ad:fd:43:05:37:6c:f1:3e:1d:76:71:50:34:72:
f3:bb:11:9d:bf:3d:fc:61:77:0e:17:80:1d:24:cf:
ea:aa:ec:43:f9:9b:90:76:86:aa:94:bb:a1:b0:91:
c2:b6:f0:47:0a:b0:3c:93:bd:42:a8:da:07:7e:27:
88:10:17:a3:63:7a:c5:08:43:9a:0f:0d:b7:f0:52:
74:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:CA:B6:23:00:54:6E:CB:02:16:C6:94:3A:72:38:10:4B:7D:3B:23
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/a3ca3291-19bd-3ac0-91ce-a688a6015051.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
X509v3 Authority Key Identifier:
keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:8940:5ea0::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5c:c3:e6:ca:24:e9:20:02:74:c4:ea:a4:d4:cf:93:4a:8e:1a:
bb:19:9f:3a:4a:5e:f6:b4:73:af:6f:55:51:e6:e0:71:f3:bc:
fa:fd:5a:62:9e:3a:2f:8c:36:03:09:e6:98:ac:b9:13:84:1c:
16:59:c2:ca:d4:31:35:80:89:a4:b7:07:e2:eb:49:e1:60:77:
fb:18:53:cd:d5:47:b7:9f:f0:f0:79:8e:03:49:2b:b9:39:31:
21:18:7b:0e:1f:72:cf:80:4b:7f:c0:f9:30:b4:f2:98:6f:5e:
d2:cc:59:06:c0:69:c4:5f:c9:37:7e:5e:8f:23:b1:a1:7c:9b:
d1:1a:9a:05:d9:76:df:63:b4:17:e9:e9:bb:5f:71:9d:de:45:
71:5c:d3:e7:0e:f7:f4:26:70:31:31:1c:c9:61:d8:0d:3b:b3:
f8:c6:51:33:77:dc:3a:db:d3:51:5c:6a:6e:2b:5e:df:51:2e:
7a:7a:f8:84:90:8a:86:7d:31:ea:62:20:a5:56:c5:42:32:fd:
e7:51:ed:ae:68:97:82:99:dd:91:7b:f5:d5:02:af:43:70:de:
2a:7f:55:ea:fb:ef:2d:cd:ce:c5:38:21:d4:dc:25:25:cd:f0:
f9:c1:aa:b4:53:38:06:7e:3e:2c:3c:e8:c8:a0:18:3a:28:c9:
2c:f6:ab:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:01:34 2025 by rpki-client