Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff8cfb76-d3cf-4da6-bfe0-361d7750c902/4d778317-bfa9-32da-b5ef-d588603e5ac9.roa
File: 4d778317-bfa9-32da-b5ef-d588603e5ac9.roa (raw, json)
Hash identifier: +YFrd8n9apAx7uy3nInWrL4py4/I8I54yW93zQObyq0=
Subject key identifier: E1:42:EF:A1:85:B5:A0:A4:63:05:43:5E:C1:39:06:D6:58:B4:BE:BB
Certificate issuer: /CN=ff8cfb76-d3cf-4da6-bfe0-361d7750c902
Certificate serial: 010D0C9F43285848530AE58588D5189E255C5180
Authority key identifier: 71:37:FE:CB:C1:74:3F:E3:2B:47:1B:A9:5E:1E:A2:6A:27:0E:48:C0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff8cfb76-d3cf-4da6-bfe0-361d7750c902.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff8cfb76-d3cf-4da6-bfe0-361d7750c902/4d778317-bfa9-32da-b5ef-d588603e5ac9.roa
Signing time: Wed 25 Dec 2024 14:00:52 +0000
ROA not before: Wed 25 Dec 2024 14:00:52 +0000
ROA not after: Tue 25 Mar 2025 13:00:52 +0000
asID: 397026
IP address blocks: 2604:f840::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:53:0a:e5:85:88:d5:18:9e:25:5c:51:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff8cfb76-d3cf-4da6-bfe0-361d7750c902
Validity
Not Before: Dec 25 14:00:52 2024 GMT
Not After : Mar 25 13:00:52 2025 GMT
Subject: CN=6360d3a1-28ec-45a0-9e15-0f24b716bb3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:54:a9:b9:c6:83:42:11:8f:0e:47:a4:18:f1:
73:2c:bb:ac:dd:83:30:63:b5:8c:7d:bb:1e:cf:b3:
9c:ab:ff:10:6b:e7:2c:86:f9:1c:ba:c9:0f:84:17:
ea:17:af:8a:78:13:2e:8f:4d:23:bc:be:55:53:f9:
08:10:1a:fa:13:73:4b:b2:20:e2:69:be:22:ed:db:
e2:13:b2:ba:d2:a3:83:04:d8:b6:0f:06:fc:42:a6:
82:d8:ed:bb:f8:66:fe:36:df:5d:3a:24:51:f9:83:
39:6b:4d:d2:b7:c7:a6:4d:76:7a:f7:25:d3:4b:ba:
9a:1e:4a:90:fb:66:51:c9:63:08:58:4b:3b:44:d9:
8d:a8:0d:65:9e:74:31:8f:ef:37:c8:00:2f:7f:83:
fe:0b:3c:23:d4:2e:c6:31:33:60:fe:f0:a5:02:16:
fb:28:45:51:b2:7b:7f:fe:a5:bb:09:73:a7:1c:ac:
f6:3b:e7:6e:e5:f2:9a:ab:b9:33:7c:5f:1b:77:a4:
e3:36:a4:05:5e:11:2c:85:12:ea:ed:09:f7:9a:99:
3c:12:df:97:0b:af:0f:af:0c:00:fb:0a:77:e4:ff:
e8:61:f5:01:61:fb:84:eb:b5:6f:88:1c:2e:91:70:
d2:c0:79:85:ae:09:eb:61:c6:c6:d5:c4:24:82:e2:
9a:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:42:EF:A1:85:B5:A0:A4:63:05:43:5E:C1:39:06:D6:58:B4:BE:BB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff8cfb76-d3cf-4da6-bfe0-361d7750c902/4d778317-bfa9-32da-b5ef-d588603e5ac9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff8cfb76-d3cf-4da6-bfe0-361d7750c902/ff8cfb76-d3cf-4da6-bfe0-361d7750c902.crl
X509v3 Authority Key Identifier:
keyid:71:37:FE:CB:C1:74:3F:E3:2B:47:1B:A9:5E:1E:A2:6A:27:0E:48:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff8cfb76-d3cf-4da6-bfe0-361d7750c902.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:f840::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0a:4c:4d:d2:bb:c3:74:bc:0c:63:b6:d0:ab:2b:20:14:69:5e:
a5:75:82:d8:69:85:74:24:9e:f1:69:6f:4f:59:f3:b0:64:4f:
67:6b:f7:c3:a5:82:1b:99:c2:9f:04:a0:38:3a:43:ce:da:2b:
33:2d:e9:6a:55:f9:5c:04:6e:df:b1:4e:bf:f2:3f:34:c1:9a:
f3:87:34:2f:e2:a5:2b:11:0c:19:4c:c7:e0:ff:38:f5:98:a0:
94:df:ac:70:8b:b1:de:ed:d2:ff:ba:25:00:54:81:2f:74:3e:
26:73:34:73:14:13:10:98:4e:55:1a:54:2f:c5:b0:b1:0e:b1:
2f:79:50:d2:d7:e6:7f:ec:e9:dc:be:eb:b4:1b:52:ab:23:4f:
27:9c:a4:ba:2d:98:be:20:df:e3:fb:a3:cd:f7:39:2a:d4:ee:
20:eb:9d:d7:e4:23:cb:53:4c:27:fd:a9:dd:55:57:f5:77:86:
88:1f:7e:0f:be:f5:22:ff:19:83:fe:ec:5e:fc:59:d7:98:ad:
d1:5b:fc:d1:78:9a:ea:34:d0:45:3a:e1:ab:98:01:36:f6:5e:
26:0e:4c:65:0a:ba:61:fb:6c:34:1d:6e:66:cd:d1:56:e7:ba:
28:c3:64:3b:90:39:49:b5:48:b8:f1:97:1e:3d:f0:f1:f3:56:
55:80:31:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:46:28 2025 by rpki-client