Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82/27872a34-19cb-38ff-9f2b-60c884e32b1a.roa
File: 27872a34-19cb-38ff-9f2b-60c884e32b1a.roa (raw, json)
Hash identifier: sPIc2X8qWaHeGOXsE+ywMI/4G/ivRFGdjgruE0k7UY8=
Subject key identifier: D9:5C:AA:92:3F:A2:B0:98:5A:F7:33:A3:B4:4E:C2:AA:E6:6D:55:79
Certificate issuer: /CN=f81bacd8-f7d9-47d7-aa24-5391049f9c82
Certificate serial: 010D0C9F4328584839EAC61F4DACD10B6D2B6118
Authority key identifier: EC:FD:C8:EB:B2:36:F3:BB:96:DA:C4:64:EB:92:D9:A9:A9:F7:13:3D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82/27872a34-19cb-38ff-9f2b-60c884e32b1a.roa
Signing time: Mon 16 Dec 2024 14:00:51 +0000
ROA not before: Mon 16 Dec 2024 14:00:51 +0000
ROA not after: Sun 16 Mar 2025 13:00:51 +0000
asID: 400544
IP address blocks: 2607:76c0:5::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:39:ea:c6:1f:4d:ac:d1:0b:6d:2b:61:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f81bacd8-f7d9-47d7-aa24-5391049f9c82
Validity
Not Before: Dec 16 14:00:51 2024 GMT
Not After : Mar 16 13:00:51 2025 GMT
Subject: CN=033c4763-3bf8-41d9-b126-b1830579f473
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:ae:d4:94:1f:a7:36:fd:f8:f3:56:30:cb:f4:
0d:ff:1d:94:13:1d:1e:56:82:43:de:21:aa:c5:52:
7f:e0:b3:d1:50:7a:c9:64:f8:79:45:67:f2:05:2b:
26:47:2d:2e:f4:4a:1c:76:96:11:6a:2a:39:e1:fb:
08:70:62:ac:3e:6e:a6:71:8d:9b:4b:e9:f7:ee:4e:
78:22:d4:f2:42:c7:d3:a7:28:2c:b0:0d:68:92:a4:
43:c6:80:92:5a:10:ea:6b:30:69:5e:52:87:eb:48:
98:5a:30:f6:41:90:53:84:fb:98:d3:91:b6:d5:e2:
e9:96:55:a1:3c:da:39:eb:c8:f3:db:a1:8d:92:38:
e7:dc:4a:8a:04:47:1a:74:24:4c:fc:32:ef:64:97:
9c:24:bc:89:a5:53:03:ab:13:ef:c4:80:33:68:bb:
37:81:8e:c6:b2:bd:1e:03:fe:74:1e:ed:3d:0e:1f:
e2:12:80:3f:99:37:d0:59:50:c1:5a:9c:b1:98:c3:
b5:75:8b:5f:29:7d:49:34:04:b9:37:e8:89:c3:43:
d0:b3:5d:f0:58:9e:d2:c8:96:82:fd:80:45:76:df:
65:8a:f0:55:43:f9:4a:b9:77:9d:5a:9c:65:44:df:
50:f3:13:1c:68:91:56:d6:94:8d:63:8e:d3:0e:5f:
58:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:5C:AA:92:3F:A2:B0:98:5A:F7:33:A3:B4:4E:C2:AA:E6:6D:55:79
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82/27872a34-19cb-38ff-9f2b-60c884e32b1a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82/f81bacd8-f7d9-47d7-aa24-5391049f9c82.crl
X509v3 Authority Key Identifier:
keyid:EC:FD:C8:EB:B2:36:F3:BB:96:DA:C4:64:EB:92:D9:A9:A9:F7:13:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:76c0:5::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
cc:af:9e:c6:b1:26:31:ea:8e:fe:cf:b6:31:3e:67:bd:65:93:
3b:60:7d:c5:ac:1b:5e:6f:41:97:63:f6:b1:82:aa:2a:fd:da:
59:58:a1:ea:e7:42:9b:a0:de:9e:6d:c4:ae:34:04:bb:03:0a:
5f:cf:a5:ae:e3:a8:e2:86:12:3f:ab:6b:05:e9:ef:93:41:5b:
5f:03:99:46:7b:f0:b9:77:31:92:d0:5e:fb:75:d5:9d:9f:a1:
c7:6a:24:93:85:a3:00:bb:88:6f:b9:3a:54:6e:f3:ef:32:4c:
c8:e6:74:9b:6d:14:26:d3:4c:7f:d8:05:92:04:72:59:41:2a:
49:c4:da:86:ce:76:e4:af:e4:3e:f0:05:eb:6c:1b:3c:6a:04:
11:6d:b4:30:ef:02:7c:a8:bc:a4:8b:d9:3d:88:b2:63:eb:38:
27:79:3e:3c:6a:fd:0c:c4:ff:44:9a:1b:04:16:95:da:aa:37:
41:c1:4d:3b:ff:b8:3c:00:b6:35:f9:5d:10:27:58:c2:29:69:
86:da:60:09:a5:96:62:7f:c2:ff:ea:28:61:ad:b2:bd:c2:7d:
94:28:ce:4f:6e:eb:c0:38:18:fa:ee:35:03:ee:ec:2c:aa:e4:
ea:50:9d:a2:08:03:5f:57:64:3b:b3:6d:2d:c4:7b:1f:be:ad:
e6:ef:25:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 17:52:13 2025 by rpki-client