Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82/4d824316-795d-32a9-baba-f1c71b14a2f8.roa
File: 4d824316-795d-32a9-baba-f1c71b14a2f8.roa (raw, json)
Hash identifier: LyrU58rI4k/uYxDUU/fkMG5/LfkV+QCqGhioYgLl8iQ=
Subject key identifier: 3A:41:E8:1E:53:8C:F7:FA:BF:32:4E:C2:77:D1:0E:4B:12:BC:49:43
Certificate issuer: /CN=f81bacd8-f7d9-47d7-aa24-5391049f9c82
Certificate serial: 010D0C9F4328584839EAC64917038E53164B7600
Authority key identifier: EC:FD:C8:EB:B2:36:F3:BB:96:DA:C4:64:EB:92:D9:A9:A9:F7:13:3D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82/4d824316-795d-32a9-baba-f1c71b14a2f8.roa
Signing time: Mon 16 Dec 2024 14:00:51 +0000
ROA not before: Mon 16 Dec 2024 14:00:51 +0000
ROA not after: Sun 16 Mar 2025 13:00:51 +0000
asID: 400544
IP address blocks: 2607:76c0:17::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:39:ea:c6:49:17:03:8e:53:16:4b:76:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f81bacd8-f7d9-47d7-aa24-5391049f9c82
Validity
Not Before: Dec 16 14:00:51 2024 GMT
Not After : Mar 16 13:00:51 2025 GMT
Subject: CN=8efad229-fbdc-4b4f-becd-036455d705af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:7d:1f:4e:86:de:5d:49:a3:83:f4:ff:ce:92:
6b:5d:c0:0a:06:66:71:4a:5f:41:7b:b1:cb:db:5a:
3d:cf:fd:3a:7e:83:a7:7d:05:c7:54:ee:22:60:9e:
8f:f9:41:e1:be:2d:3c:a4:e3:21:a5:3e:8a:db:58:
e2:20:7e:1f:4c:2d:c8:ee:50:f5:79:99:cf:a8:03:
81:ff:b2:65:06:7c:bc:7b:92:d2:ea:78:f9:0a:58:
83:8a:70:94:3f:a4:7f:a5:87:f6:d9:a4:d5:ed:b6:
91:4b:4f:39:e4:05:a6:cc:37:d6:96:2b:16:92:79:
20:81:11:91:5f:0d:a8:a8:9d:76:85:84:23:17:81:
9c:c1:f9:2d:a1:82:26:fb:74:6b:59:80:a7:d2:d7:
57:10:bb:71:3d:89:cb:b7:5d:95:cf:9d:e0:75:bd:
79:c5:0e:54:06:bb:49:d9:fd:8f:de:6d:78:5c:31:
74:e9:69:c3:c7:e5:75:2c:15:d9:9d:54:10:7b:5f:
a4:a6:92:a0:47:6c:4b:98:a8:aa:3b:65:95:12:8b:
0d:b9:e1:4a:e1:49:85:4f:85:7e:a5:a8:19:54:10:
91:5b:f2:a2:09:0f:f1:d6:d8:17:0b:03:f3:cb:85:
bd:da:ae:4b:78:71:7e:a1:6c:bc:1f:c0:f5:09:d3:
56:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:41:E8:1E:53:8C:F7:FA:BF:32:4E:C2:77:D1:0E:4B:12:BC:49:43
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82/4d824316-795d-32a9-baba-f1c71b14a2f8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82/f81bacd8-f7d9-47d7-aa24-5391049f9c82.crl
X509v3 Authority Key Identifier:
keyid:EC:FD:C8:EB:B2:36:F3:BB:96:DA:C4:64:EB:92:D9:A9:A9:F7:13:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:76c0:17::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
81:a6:50:15:86:3f:11:d4:8c:63:20:4e:31:62:35:af:35:2c:
3c:b0:9b:91:03:ba:20:1f:72:65:3f:63:78:09:71:bd:b5:c6:
c1:0e:aa:91:1f:a3:4e:02:1b:79:88:78:0f:12:e6:0e:6b:c1:
ae:39:45:92:f6:7b:ef:ec:94:5c:ad:c1:86:bf:18:3e:32:0f:
e4:c8:16:10:1b:be:8c:48:c5:e9:bd:0f:09:08:6d:2f:96:c0:
be:a5:fe:97:81:3e:30:48:b2:b9:49:82:8a:5a:05:48:f1:40:
90:66:e6:b5:c6:5d:29:6f:cd:63:b0:69:52:64:a4:8c:24:0f:
cd:c2:2f:34:d1:b0:61:0e:85:8e:45:e2:1f:cd:a5:e7:b1:5f:
7f:cc:6d:a9:31:1d:0e:ff:71:66:e4:ae:ca:fb:12:64:98:d7:
36:fc:33:7c:c7:fa:e9:73:36:f3:dc:93:bd:1f:3b:f3:d9:ed:
62:13:38:78:2e:f7:b4:25:df:e9:be:a2:3d:27:ff:44:73:8f:
c5:ff:42:ce:92:34:c4:1e:a3:52:67:0e:e8:9f:b1:43:75:63:
05:ee:1b:61:d6:21:a5:d7:df:9f:a7:f4:e0:e2:7f:d9:6f:b9:
25:f8:90:63:b2:72:d1:67:6b:57:20:39:3d:73:8c:6f:22:91:
32:f1:ce:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 01:07:56 2025 by rpki-client