Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7/48c251c3-5951-38f3-a902-58b0526791ca.roa
File: 48c251c3-5951-38f3-a902-58b0526791ca.roa (raw, json)
Hash identifier: Go43yOpLt4upwql43McMyGynS4TdMzZyrNhHkoIojNQ=
Subject key identifier: 92:42:CA:18:5C:A6:06:C5:30:C4:DE:13:79:B3:92:11:EA:0D:BF:C7
Certificate issuer: /CN=0fe7804f-f16a-4f78-9979-6a8d5099e5e7
Certificate serial: 010D0C9F432858481F6521A3973FBAC19D117740
Authority key identifier: F9:55:C0:43:84:51:2F:06:CF:3A:B4:BA:91:F2:6A:C3:4D:A4:E4:68
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7/48c251c3-5951-38f3-a902-58b0526791ca.roa
Signing time: Sat 07 Dec 2024 02:00:39 +0000
ROA not before: Sat 07 Dec 2024 02:00:39 +0000
ROA not after: Fri 07 Mar 2025 02:00:39 +0000
asID: 6315
IP address blocks: 2607:fa18::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:1f:65:21:a3:97:3f:ba:c1:9d:11:77:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fe7804f-f16a-4f78-9979-6a8d5099e5e7
Validity
Not Before: Dec 7 02:00:39 2024 GMT
Not After : Mar 7 02:00:39 2025 GMT
Subject: CN=bf1cd5c2-13d6-4cfa-bd09-dc6282619d46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:30:7c:af:f9:ff:d9:2d:b7:72:cb:df:a9:ff:
56:3b:00:e3:ce:a2:11:42:1c:3b:ae:3d:53:03:e8:
93:73:9f:d7:30:84:10:3b:ee:de:3a:78:1f:64:2f:
2d:43:3b:78:5b:40:90:95:b9:57:86:6b:10:25:91:
17:45:9f:05:02:b7:9f:7c:94:33:d0:ed:8f:c3:36:
4a:51:cf:d6:28:bc:79:e1:de:9e:63:f5:e2:c0:b2:
98:f5:c8:8f:22:1a:98:84:f7:53:68:5b:cc:41:09:
24:7d:85:97:43:37:8f:3a:07:9a:8b:dd:46:cf:eb:
48:7d:a7:95:0e:aa:f6:cd:18:18:3e:23:98:04:73:
38:c7:8b:06:ba:30:65:08:2f:e8:79:af:ea:86:71:
0c:fd:1d:fa:9c:73:66:6a:01:ac:56:d8:a1:f4:31:
ac:36:39:c1:31:bb:d1:42:ff:69:db:0b:bc:1f:b0:
00:11:55:c5:91:dc:fb:d7:c3:cf:27:d0:e1:29:bd:
d0:13:9a:71:ee:29:7d:d2:db:a5:89:9a:97:78:9d:
e8:f1:c5:fb:d9:81:72:b9:fe:0a:58:8a:7c:8f:d6:
1f:7d:cc:54:f9:07:a8:89:70:4f:c2:39:4d:24:e8:
0a:81:94:28:a7:d2:36:9d:fb:7a:52:a7:55:4e:1c:
bd:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:42:CA:18:5C:A6:06:C5:30:C4:DE:13:79:B3:92:11:EA:0D:BF:C7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7/48c251c3-5951-38f3-a902-58b0526791ca.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7/0fe7804f-f16a-4f78-9979-6a8d5099e5e7.crl
X509v3 Authority Key Identifier:
keyid:F9:55:C0:43:84:51:2F:06:CF:3A:B4:BA:91:F2:6A:C3:4D:A4:E4:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:fa18::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
88:c5:ae:50:8a:c9:56:fd:f5:64:41:a4:3d:92:a1:14:a4:c3:
68:66:3e:a6:57:21:1d:05:8b:f8:fc:cc:b8:6a:60:7e:ab:6c:
ee:a8:9e:c2:37:9c:b1:75:82:f0:12:35:92:2f:30:4c:ab:dc:
55:01:0c:94:02:d1:2e:ca:1b:c8:b8:ec:49:12:37:ca:b4:5d:
ce:63:c0:bf:37:50:61:cb:40:a1:c6:d3:40:67:98:64:41:e7:
4e:44:56:65:65:c5:11:cd:76:74:ee:d6:0c:ad:38:5c:15:14:
8e:8c:ae:9d:fe:db:0e:4d:7a:20:cb:86:7c:97:2a:6a:7b:2f:
26:a3:8e:b8:04:cc:02:f8:a0:cc:52:c2:8b:57:cf:44:01:7b:
eb:78:c7:40:02:75:44:5c:89:ae:09:4a:30:db:0b:78:f0:86:
87:7c:a7:c8:49:b3:98:95:46:8c:b4:84:a9:3c:be:04:27:7c:
94:72:87:3d:74:01:85:73:69:db:b7:4e:8a:c9:4d:6a:32:17:
63:e1:bf:45:40:50:79:d0:59:72:ea:26:e3:e2:df:94:52:77:
f3:91:27:bc:79:f2:b4:dc:ba:ab:02:77:0a:c9:cd:4e:92:ce:
0a:2f:26:5b:cc:04:69:c6:0e:7b:e1:06:0d:fb:ed:2d:5d:84:
82:0a:cc:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 05:01:51 2025 by rpki-client