Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/c957fa72-c25a-323a-87f3-4bb922dcc5b4.roa
File: c957fa72-c25a-323a-87f3-4bb922dcc5b4.roa (raw, json)
Hash identifier: M+6pwwJH3BBCpiRgjGyiw+7My6so1oMKKHVl0lWmk+g=
Subject key identifier: D5:C7:02:34:FB:A1:BD:B9:B5:31:52:C9:E7:AB:28:BE:88:D0:8F:C6
Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial: 010D0C9F432858485F9B090DA7292C10D7F0C200
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/c957fa72-c25a-323a-87f3-4bb922dcc5b4.roa
Signing time: Mon 30 Dec 2024 02:00:39 +0000
ROA not before: Mon 30 Dec 2024 02:00:39 +0000
ROA not after: Sun 30 Mar 2025 01:00:39 +0000
asID: 54113
IP address blocks: 2607:8940:5070::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:5f:9b:09:0d:a7:29:2c:10:d7:f0:c2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Validity
Not Before: Dec 30 02:00:39 2024 GMT
Not After : Mar 30 01:00:39 2025 GMT
Subject: CN=c89b9c08-41fd-4bec-ac90-b738aa8634f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:14:4e:45:92:b1:87:cf:63:7a:ca:10:73:5f:
01:40:35:58:c7:83:ca:6d:e5:6d:0e:10:c7:ec:54:
67:69:36:2c:82:89:e3:cc:5e:37:72:52:b7:c3:10:
b5:30:2b:10:6b:52:de:4d:78:ce:33:a1:00:b8:1d:
7f:a2:a3:ab:51:70:ce:57:1b:d2:59:9c:21:de:19:
9d:3c:be:8b:3f:8b:43:56:b6:6e:cc:b4:b4:93:26:
9c:c2:44:d8:2d:28:09:6f:3c:18:ae:6c:0d:98:bc:
6b:f0:ad:36:d0:53:2f:c9:6b:30:89:86:62:83:4b:
3e:1e:6f:9f:54:86:39:fc:90:43:b2:5e:ae:ab:e1:
9e:f4:ec:6b:a3:e9:ac:b1:01:13:22:50:71:a6:eb:
c2:4e:94:39:44:24:4f:ab:38:7e:fa:f2:28:61:3d:
5f:af:fc:3f:2f:f8:74:22:e5:23:9c:30:7d:a3:f5:
f2:9f:ff:86:96:c2:65:70:d5:f8:e7:79:b1:d7:1f:
53:1e:84:8e:43:f4:9c:49:81:ec:53:fb:da:a9:3e:
b4:86:33:ca:cd:18:03:4b:af:5c:62:ba:bf:54:17:
03:c5:9d:03:64:35:35:13:60:3f:f4:b8:3a:8e:c3:
07:33:23:93:9a:6b:4b:ff:68:78:e0:df:3a:b7:c0:
b2:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:C7:02:34:FB:A1:BD:B9:B5:31:52:C9:E7:AB:28:BE:88:D0:8F:C6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/c957fa72-c25a-323a-87f3-4bb922dcc5b4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
X509v3 Authority Key Identifier:
keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:8940:5070::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
57:42:47:d3:0e:c6:69:b1:e6:42:6b:0e:c6:fe:e7:d7:f2:47:
21:c2:97:0c:91:96:26:17:e2:fa:71:cd:a1:d5:06:63:b4:2f:
cf:ca:89:e4:9b:8c:00:97:bc:f1:3a:c0:be:ab:d1:e4:ac:0e:
43:bd:40:42:d8:4c:bb:45:50:bc:6f:38:64:a5:11:70:67:24:
6c:76:50:fd:97:fc:78:32:e0:5e:70:25:bc:30:9a:a0:32:aa:
73:6f:74:13:15:4f:de:65:81:f4:5d:a0:23:a8:39:91:c2:ef:
4e:15:36:11:c7:4d:83:fd:79:c1:0a:ae:39:78:be:1b:d1:26:
b7:55:e8:06:53:b8:e2:56:cf:b4:3c:8a:11:27:b5:ac:be:59:
22:e3:8d:d7:a2:2e:1e:4a:9f:45:88:aa:c0:9f:0a:61:13:9d:
b9:e3:30:2d:0a:b5:40:fc:a1:25:ec:3f:18:68:d2:36:16:af:
2a:1a:53:76:ad:32:2a:dd:ee:a1:e2:76:bb:54:5a:a2:74:9d:
ef:4d:36:a3:39:12:8a:0c:75:23:ef:59:c9:d8:48:89:1c:4f:
41:00:f6:82:fe:21:d8:94:c2:59:4b:52:f8:b1:47:2a:18:71:
bd:be:8d:7a:85:d4:bc:da:fd:f7:02:33:e7:17:09:bd:a2:dd:
4c:d9:2e:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 18:05:05 2025 by rpki-client