Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/e9803b89-a895-3610-aa40-3a46a9950264.roa
File: e9803b89-a895-3610-aa40-3a46a9950264.roa (raw, json)
Hash identifier: xJX4TF5+seRCtmHhmkf2JRCzWAL1v3huZnnz7OWw0T4=
Subject key identifier: 45:8D:AB:86:0A:B0:B2:72:56:57:DC:A3:A4:9C:CA:91:D3:5E:0A:D0
Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial: 010D0C9F432858485F9AE8D2DA6AE52F66299280
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/e9803b89-a895-3610-aa40-3a46a9950264.roa
Signing time: Mon 30 Dec 2024 02:00:39 +0000
ROA not before: Mon 30 Dec 2024 02:00:39 +0000
ROA not after: Sun 30 Mar 2025 01:00:39 +0000
asID: 54113
IP address blocks: 2607:8940:5ad0::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:5f:9a:e8:d2:da:6a:e5:2f:66:29:92:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Validity
Not Before: Dec 30 02:00:39 2024 GMT
Not After : Mar 30 01:00:39 2025 GMT
Subject: CN=4fe2a726-cbec-4c16-9a83-b8823f09a126
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:06:9f:d0:11:23:ff:9d:72:93:4a:60:90:97:
c3:15:d8:55:32:16:ac:44:1e:c5:fd:c7:15:41:f5:
2e:b9:fb:0b:43:d5:b3:4a:b8:6f:4c:34:bb:a5:b8:
9a:67:47:3a:15:db:35:72:bd:70:6c:63:7a:d8:6d:
2f:f7:9a:56:e2:5b:98:0b:80:24:ab:cc:ac:9b:23:
c4:fa:2c:8f:e4:d3:c5:89:ba:21:67:ad:76:41:99:
3d:ba:3c:2d:24:27:5d:4a:08:78:9c:db:bb:29:b0:
94:7e:d2:72:be:4e:91:1c:54:c4:ae:e5:2f:19:8d:
9e:90:5f:4c:35:f4:e3:b9:0b:85:35:a2:23:be:7a:
36:a2:53:03:9d:a5:82:e5:5b:40:f2:f8:35:6c:8a:
fa:d1:6e:b5:18:6d:d8:ed:fb:ad:ce:d4:90:b7:b9:
cf:f5:fe:f8:af:57:85:1a:ce:14:77:64:ff:b3:b7:
e0:57:57:a5:12:db:5d:b2:91:ca:2c:f1:12:bd:0a:
9e:36:4d:31:06:29:72:9a:1e:a4:ba:a8:35:97:45:
50:55:50:bf:fe:8e:69:09:d8:6f:2d:1d:29:5f:d1:
eb:4e:07:3d:01:6e:fe:26:0c:bf:24:91:96:a0:c0:
9c:68:45:66:26:38:6b:a2:e3:cf:5e:e4:6c:c6:2d:
9c:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:8D:AB:86:0A:B0:B2:72:56:57:DC:A3:A4:9C:CA:91:D3:5E:0A:D0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/e9803b89-a895-3610-aa40-3a46a9950264.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
X509v3 Authority Key Identifier:
keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:8940:5ad0::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
63:8f:55:f7:eb:8a:94:7c:f5:63:9d:7d:57:73:07:11:eb:e1:
80:5d:51:b1:de:90:1d:9d:c0:6b:c1:73:50:62:63:f2:ae:84:
35:84:09:4d:53:03:60:16:ff:b6:87:41:db:8e:f4:29:8d:f5:
4c:fb:ef:c3:2f:a7:9a:7e:ed:4d:d8:ca:89:b1:d7:22:cd:bb:
47:a5:bc:73:60:34:fd:18:d2:22:9d:fe:cd:a8:f2:61:ec:ad:
b2:09:60:57:53:fe:28:d0:f2:9f:af:2f:1b:50:9b:b5:10:de:
66:1b:88:71:a0:e3:b2:db:ae:3b:60:2c:24:ab:d1:66:a2:a5:
2f:7a:a5:fe:fc:f6:26:e0:ca:a2:ad:18:aa:6b:64:7f:c5:13:
51:c7:2b:1e:b1:83:be:79:64:8b:b6:2a:89:d2:a0:52:e9:f7:
ff:4f:56:85:05:04:90:27:76:0e:e2:4b:0c:b6:77:eb:0a:5a:
df:13:b8:a7:b6:af:08:ac:0f:6d:d7:ae:a7:ba:44:ff:f0:64:
f6:08:96:aa:36:12:cb:e8:f5:78:2e:b1:19:93:35:6c:58:f6:
94:d0:6e:b2:aa:cc:0d:36:f0:8a:13:97:19:a1:2e:9e:8f:48:
5f:ad:cd:99:5c:ed:77:5c:fe:d1:1f:c9:57:c0:ad:b5:43:2b:
c7:82:98:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:01:53 2025 by rpki-client