Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/f907b106-313a-3349-af6e-4565427f5b0c.roa
File: f907b106-313a-3349-af6e-4565427f5b0c.roa (raw, json)
Hash identifier: 635NlcX37XrIki0DpDcnqGPHznQlSJ+gZad/BJk6+Xc=
Subject key identifier: C4:AC:4B:7C:2A:C4:47:02:AB:7C:78:BD:B7:33:A1:1E:83:9E:C9:6A
Certificate issuer: /CN=249140ca-277e-4871-a100-451d066d1c5b
Certificate serial: 010D0C9F432858485CD031B57F33BE3898847180
Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/f907b106-313a-3349-af6e-4565427f5b0c.roa
Signing time: Sun 29 Dec 2024 02:00:39 +0000
ROA not before: Sun 29 Dec 2024 02:00:39 +0000
ROA not after: Sat 29 Mar 2025 01:00:39 +0000
asID: 21949
IP address blocks: 2607:f0c8::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:5c:d0:31:b5:7f:33:be:38:98:84:71:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b
Validity
Not Before: Dec 29 02:00:39 2024 GMT
Not After : Mar 29 01:00:39 2025 GMT
Subject: CN=dc1258d7-eb48-42f8-8618-7154f57d3e66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:0e:f7:48:61:30:d0:dc:26:4b:fb:e4:8b:e9:
a9:77:a4:09:aa:47:ad:00:f0:32:e0:cf:66:25:66:
82:6d:71:25:09:44:1d:1e:95:2c:be:f9:5f:51:b2:
cd:76:65:2e:1e:9b:95:22:b4:4c:1a:c5:8a:81:c3:
2f:c4:91:b5:fa:43:a1:59:bc:8c:6b:4b:83:09:a3:
81:f7:c5:0a:fc:c0:bf:b6:58:a6:dd:17:62:38:d4:
77:f5:8f:80:09:c7:c2:0a:5b:ee:75:88:1a:4f:bf:
cb:c7:d7:aa:ab:62:8e:46:7d:85:50:8a:4d:af:4e:
32:41:5c:a2:e5:08:b7:96:3b:0b:91:16:c2:75:26:
39:54:3b:05:3f:83:86:21:a7:54:ff:ba:a5:9d:af:
85:46:cf:5f:a7:4d:5a:f3:06:79:52:8c:43:af:62:
b9:ba:bd:45:a8:f2:ec:ee:6e:d5:35:f8:91:36:8c:
75:a9:11:55:62:b3:72:c2:a4:72:4b:88:6a:84:e7:
b7:ad:e8:c5:ea:05:25:5f:12:80:97:ff:c1:e3:de:
fd:3f:6e:b2:42:cd:61:f0:c8:bb:19:3e:9c:02:de:
00:37:bc:26:f1:6d:6f:74:4e:d2:21:d0:2e:49:84:
be:b2:be:07:0f:03:97:a7:eb:16:c7:55:7c:a1:69:
06:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:AC:4B:7C:2A:C4:47:02:AB:7C:78:BD:B7:33:A1:1E:83:9E:C9:6A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/f907b106-313a-3349-af6e-4565427f5b0c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl
X509v3 Authority Key Identifier:
keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:f0c8::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6e:16:5c:d5:be:d4:c2:ae:1d:af:fd:fc:e0:f0:54:01:8a:79:
a0:b1:68:fa:57:74:c5:8a:bc:fc:62:47:3e:90:fb:83:2b:53:
29:d6:1d:79:ac:db:88:5d:88:5e:5e:8d:e2:42:4a:98:a4:23:
ec:4f:57:90:ad:3c:7b:80:3e:0d:f4:46:a2:51:e8:08:d8:4e:
4e:f4:07:b4:e3:0f:75:f0:93:17:98:99:6e:92:d4:60:67:c0:
a0:89:c1:28:2c:2e:ef:63:78:e7:5c:39:df:ce:ab:f0:dd:41:
95:c4:7a:4d:1b:80:ed:6a:4a:80:0c:a6:bf:0f:44:e5:84:f6:
f4:af:8f:01:89:fc:ed:97:6b:88:d7:5c:bf:0b:08:65:0e:0d:
53:4b:af:58:67:6a:6d:2c:ae:fa:82:4d:b9:6d:75:c2:ea:2e:
41:cf:b6:20:0c:cd:aa:1e:82:d2:92:99:6b:69:15:e4:f3:5d:
5f:3b:34:3b:e4:72:38:07:47:4a:41:22:f7:cc:94:57:4d:c1:
02:74:22:57:c9:ff:2e:41:9d:1a:cb:8d:1a:3f:5e:94:6d:3a:
07:65:4a:d6:fa:ef:b8:f8:80:16:75:72:eb:a4:a2:6d:59:f5:
3e:26:cb:61:f9:81:ff:44:f3:fb:2f:f1:76:9c:45:91:99:01:
dc:eb:fb:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 22:57:03 2025 by rpki-client