Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/831828bc-46aa-4c27-b6f2-832286d94619/d8557b7c-4306-3801-820b-48404ff77a17.roa
File: d8557b7c-4306-3801-820b-48404ff77a17.roa (raw, json)
Hash identifier: bZwZw7U/zz3PzL/PV0WHjM7D6IEZwb8CHt0ErL6yC1M=
Subject key identifier: F3:88:F0:D8:72:04:CF:FF:05:F0:6E:9A:FC:6C:23:C1:51:D1:E1:7A
Certificate issuer: /CN=831828bc-46aa-4c27-b6f2-832286d94619
Certificate serial: 010D0C9F43285848186A88F30861FD79591963F0
Authority key identifier: 9B:97:0E:16:C9:60:F7:1B:45:38:81:61:F8:96:FD:44:B9:E1:F8:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/831828bc-46aa-4c27-b6f2-832286d94619.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/831828bc-46aa-4c27-b6f2-832286d94619/d8557b7c-4306-3801-820b-48404ff77a17.roa
Signing time: Wed 04 Dec 2024 14:00:52 +0000
ROA not before: Wed 04 Dec 2024 14:00:52 +0000
ROA not after: Tue 04 Mar 2025 14:00:52 +0000
asID: 21641
IP address blocks: 2607:8bc0::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:18:6a:88:f3:08:61:fd:79:59:19:63:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=831828bc-46aa-4c27-b6f2-832286d94619
Validity
Not Before: Dec 4 14:00:52 2024 GMT
Not After : Mar 4 14:00:52 2025 GMT
Subject: CN=ba860969-5106-49eb-b6ce-abb20c959778
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:9b:99:9f:8a:68:21:10:70:4d:1a:7e:1d:f3:
d9:58:b8:6f:f5:1e:5b:fa:c9:b1:9c:f9:20:37:af:
ae:6e:58:76:77:4c:5d:f7:3f:ed:8a:64:d1:15:b7:
2a:83:53:aa:b0:fb:94:b7:33:9f:79:07:68:e6:53:
9f:ee:54:26:7a:9d:c2:82:84:0c:64:f0:f1:79:68:
05:58:49:0a:9f:92:a2:be:53:9e:9a:ca:0b:d1:64:
01:4f:e5:74:1f:ec:a1:7e:c9:25:56:6d:09:79:d3:
ef:38:ed:2a:9a:45:c4:0a:c0:ac:f7:c5:b5:1a:b1:
cf:f9:79:10:f6:12:ce:5b:4e:8b:0b:98:0e:ab:ef:
68:98:31:ac:e1:1d:b4:96:54:b4:2b:88:d7:71:56:
36:91:c7:46:71:f2:eb:a4:e3:6b:71:92:5d:dc:f2:
f3:aa:aa:39:ff:cd:e3:e7:7d:c4:36:a0:4a:d1:7a:
77:da:8f:49:71:da:db:cd:cd:77:27:50:ec:e9:3e:
b0:3e:c6:4b:88:ee:cd:43:12:2a:e8:eb:3d:e2:1e:
e3:bc:b7:58:28:3b:28:bc:da:88:78:38:a5:65:f1:
13:ad:71:70:c2:50:2a:2c:63:16:0f:58:84:f7:08:
ae:6f:15:c4:ad:1c:1a:a8:b7:6c:d8:c4:04:0e:37:
dd:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:88:F0:D8:72:04:CF:FF:05:F0:6E:9A:FC:6C:23:C1:51:D1:E1:7A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/831828bc-46aa-4c27-b6f2-832286d94619/d8557b7c-4306-3801-820b-48404ff77a17.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/831828bc-46aa-4c27-b6f2-832286d94619/831828bc-46aa-4c27-b6f2-832286d94619.crl
X509v3 Authority Key Identifier:
keyid:9B:97:0E:16:C9:60:F7:1B:45:38:81:61:F8:96:FD:44:B9:E1:F8:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/831828bc-46aa-4c27-b6f2-832286d94619.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:8bc0::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
53:1d:6b:90:76:7d:a3:04:03:cc:f5:22:62:75:91:e5:11:63:
22:6b:9c:4c:69:d9:cd:ea:2a:56:68:30:55:97:19:1e:c4:16:
6f:25:c6:2b:89:ae:e1:c4:b4:1c:27:2d:18:8a:9c:c2:36:89:
14:45:96:fa:c6:0e:e9:f9:3f:ac:fa:7d:50:26:18:f8:c5:fd:
1b:e0:10:8e:94:d2:7e:61:20:2f:54:b8:63:69:70:55:ed:0a:
0d:96:29:60:f6:3b:aa:01:25:93:e3:d6:57:56:89:57:fd:90:
a2:04:96:8b:8d:95:96:26:be:4c:1e:8e:cf:2f:17:5d:dd:0e:
5a:25:49:19:b4:68:b0:a5:bd:f3:56:19:a3:28:74:ec:43:82:
69:74:17:e1:5b:23:36:80:54:a0:57:12:40:54:1c:90:23:47:
90:af:bb:b2:84:b4:67:c4:3b:c0:80:1f:dd:52:db:96:95:12:
a9:2e:38:fc:5c:47:91:ab:e2:6f:41:38:88:a1:1d:37:5a:da:
5b:26:b9:8b:14:a6:c9:a2:58:83:f4:c9:ac:19:c8:3a:7a:1b:
28:11:27:7c:28:2a:b7:28:45:c4:7b:dd:db:d3:bc:db:92:db:
ce:fa:d6:1d:7e:50:d8:47:da:a2:8e:79:67:89:53:d4:57:59:
da:46:e8:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:45:07 2025 by rpki-client