Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/1daa594f-be4f-3d3f-b76f-67e7d07b7fd9.roa
File: 1daa594f-be4f-3d3f-b76f-67e7d07b7fd9.roa (raw, json)
Hash identifier: UaARRr5nN9SCZ24EhO4RqEZ/7lDJadRv0F+GRtY1AYg=
Subject key identifier: B3:A9:41:F0:B6:7B:B4:38:CD:62:A8:66:01:28:70:07:EF:70:E8:81
Certificate issuer: /CN=78369c58-f0b4-454b-ad08-df84f1fd007c
Certificate serial: 010D0C9F432858483F8027A459851741C858BBA0
Authority key identifier: DF:0B:9E:09:06:31:D7:C1:70:E2:1A:88:6D:29:01:A2:54:75:39:65
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/1daa594f-be4f-3d3f-b76f-67e7d07b7fd9.roa
Signing time: Wed 18 Dec 2024 14:00:52 +0000
ROA not before: Wed 18 Dec 2024 14:00:52 +0000
ROA not after: Tue 18 Mar 2025 13:00:52 +0000
asID: 26506
IP address blocks: 2607:f4e8:ac::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:3f:80:27:a4:59:85:17:41:c8:58:bb:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78369c58-f0b4-454b-ad08-df84f1fd007c
Validity
Not Before: Dec 18 14:00:52 2024 GMT
Not After : Mar 18 13:00:52 2025 GMT
Subject: CN=c3a091ea-6d46-4ae9-a8aa-3a213fbe13a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:8c:1a:32:cb:ca:6d:30:fd:bc:be:50:0d:df:
4f:16:97:5b:67:8a:a4:1f:76:a2:50:72:64:0c:10:
b9:7d:bd:31:c4:35:d6:84:42:21:3f:46:b6:35:91:
4f:e2:1c:21:b2:3f:48:d6:3b:14:29:46:c3:e5:62:
2a:27:8b:e8:e7:4c:03:06:e7:5e:c2:a7:1d:64:7e:
c8:72:f1:c3:c2:5f:c8:fc:3d:15:9b:72:9f:37:91:
fe:ad:67:0b:44:9f:ac:42:76:26:c8:be:8a:b5:5b:
fc:f9:f5:8e:5e:2c:f9:27:cb:ba:f8:79:c2:bf:12:
f4:e3:30:ad:5f:2e:bb:a5:4e:57:25:c9:e8:ef:d9:
b1:17:89:b4:34:67:0f:57:44:98:7b:62:35:00:aa:
6a:43:18:03:43:e5:f3:74:49:7d:4c:15:14:85:64:
0d:4e:7d:54:3e:ef:c3:c6:1d:66:c8:16:ba:23:6e:
d7:1e:58:54:87:ac:3f:21:49:f7:07:40:66:0b:39:
c7:22:8e:36:cd:ff:6f:d9:02:bb:f9:ab:e0:b0:05:
55:01:99:7b:d4:d2:89:d9:e6:65:b8:af:4a:15:88:
b5:f1:91:aa:b2:e2:56:17:b6:3f:32:74:e0:8f:0f:
66:88:b1:e2:10:21:0b:84:93:6e:da:df:7b:3f:81:
4e:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:A9:41:F0:B6:7B:B4:38:CD:62:A8:66:01:28:70:07:EF:70:E8:81
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/1daa594f-be4f-3d3f-b76f-67e7d07b7fd9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/78369c58-f0b4-454b-ad08-df84f1fd007c.crl
X509v3 Authority Key Identifier:
keyid:DF:0B:9E:09:06:31:D7:C1:70:E2:1A:88:6D:29:01:A2:54:75:39:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:f4e8:ac::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
59:be:b8:c4:fa:e5:fb:16:2a:28:0d:ef:7d:e9:b6:94:ab:9b:
e3:d5:12:ee:b6:1a:13:98:73:a6:af:5c:3d:c6:fa:a9:e0:4e:
71:19:fd:5f:a7:04:40:bf:d7:e5:37:5c:56:9f:b3:96:35:1f:
4b:30:1a:ff:b7:d4:b1:30:5e:e2:45:79:a2:95:bf:5c:bc:c5:
12:ee:b5:96:e9:15:d5:5d:2c:a4:5d:32:ef:fa:ed:c7:4a:67:
71:14:f3:18:5e:4b:e5:ee:98:24:06:87:b5:c4:c2:da:e0:3c:
ff:41:a1:3c:06:c1:b9:5c:ef:8b:41:16:f4:2a:0b:06:d2:95:
87:2a:40:32:14:a3:7b:70:d9:4a:09:8f:00:e4:73:ac:40:a7:
43:f3:4a:7c:45:74:e2:93:3c:7f:ec:74:af:63:17:37:e8:62:
1c:c4:dd:d3:a2:c4:4e:67:e9:e7:4b:d0:89:57:0c:1f:60:b0:
2b:4a:a5:6d:24:fd:57:52:b4:bd:72:74:f5:6a:d9:3e:9a:97:
81:84:0f:f3:6a:2e:3c:43:f9:6d:99:eb:a0:f1:00:d7:d7:65:
7c:68:b5:5a:bb:7b:29:3d:2f:cb:b1:b1:d4:5e:b8:92:73:d3:
89:c0:c6:5c:f2:8d:11:15:4b:26:14:e1:fb:55:b7:96:41:9d:
9c:4a:9e:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:44:02 2025 by rpki-client