Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/61939bbc-e50f-4ced-8482-e7c4008e3583/05eb7fae-7a23-3222-9621-15bd9592d38c.roa
File: 05eb7fae-7a23-3222-9621-15bd9592d38c.roa (raw, json)
Hash identifier: BLGQG6yTNsOAvui6D6lIqe7KQOwJcChTa1u2G9EKzbA=
Subject key identifier: A8:F1:95:27:19:C6:47:95:37:5F:71:A0:1F:0F:C6:A3:8D:84:11:53
Certificate issuer: /CN=61939bbc-e50f-4ced-8482-e7c4008e3583
Certificate serial: 010D0C9F4328584858A0587212BBCBB07468D680
Authority key identifier: 3F:8D:F8:51:B6:E3:53:FA:6A:C1:CF:4A:DD:0E:91:CE:C3:DE:49:16
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/61939bbc-e50f-4ced-8482-e7c4008e3583.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/61939bbc-e50f-4ced-8482-e7c4008e3583/05eb7fae-7a23-3222-9621-15bd9592d38c.roa
Signing time: Fri 27 Dec 2024 14:00:52 +0000
ROA not before: Fri 27 Dec 2024 14:00:52 +0000
ROA not after: Thu 27 Mar 2025 13:00:52 +0000
asID: 397453
IP address blocks: 2607:3240::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:58:a0:58:72:12:bb:cb:b0:74:68:d6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61939bbc-e50f-4ced-8482-e7c4008e3583
Validity
Not Before: Dec 27 14:00:52 2024 GMT
Not After : Mar 27 13:00:52 2025 GMT
Subject: CN=9dde09b4-1877-4173-9ddc-7b49c8d17237
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c2:74:f7:46:f7:3d:89:56:ef:71:96:81:e0:
cb:ae:58:ee:26:9e:a8:5a:b0:90:76:2c:af:c0:36:
62:eb:71:96:9f:d8:24:56:9c:b2:7e:29:8b:d0:31:
93:1e:ac:98:05:89:3f:87:aa:35:b5:33:c4:35:67:
58:69:8f:d3:bd:1d:f6:bd:7d:f2:e0:c2:00:8a:e2:
98:6d:20:8a:9d:73:85:aa:d2:ef:06:2c:32:1d:df:
82:53:69:74:1d:d4:b0:4c:fd:4d:72:6f:b5:09:3f:
b7:c3:f0:91:7c:91:c7:35:27:1d:2c:60:f9:39:fe:
d5:c7:b5:aa:6c:f3:5e:12:07:71:b3:b9:e2:59:4b:
4e:79:0c:74:f9:64:46:0c:d9:34:74:b3:59:a1:08:
d0:cf:10:9a:0d:79:d5:83:03:fe:c6:25:da:1a:12:
0b:fe:1f:72:eb:1c:d1:b9:36:7c:99:c9:53:f6:26:
4b:e9:0f:0d:92:fc:bf:93:87:ac:65:9a:34:67:14:
03:36:1c:92:57:d5:a2:7d:e0:a4:84:c1:23:2b:79:
db:48:06:e1:a1:51:17:cc:c8:6c:96:ab:0b:a9:bd:
b3:d0:37:94:81:ac:3c:cc:00:d8:98:82:0c:26:0b:
97:f0:68:87:65:18:ca:1f:54:4c:c5:6b:1c:e2:21:
7c:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:F1:95:27:19:C6:47:95:37:5F:71:A0:1F:0F:C6:A3:8D:84:11:53
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/61939bbc-e50f-4ced-8482-e7c4008e3583/05eb7fae-7a23-3222-9621-15bd9592d38c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/61939bbc-e50f-4ced-8482-e7c4008e3583/61939bbc-e50f-4ced-8482-e7c4008e3583.crl
X509v3 Authority Key Identifier:
keyid:3F:8D:F8:51:B6:E3:53:FA:6A:C1:CF:4A:DD:0E:91:CE:C3:DE:49:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/61939bbc-e50f-4ced-8482-e7c4008e3583.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:3240::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3c:08:02:b4:54:24:b6:c1:ab:f6:ef:24:85:4e:74:ce:4b:4e:
d3:ed:35:2e:dd:e6:da:30:4c:6b:7c:57:ec:0e:6d:29:5b:5c:
99:ac:91:cd:ae:ad:c0:13:5d:ac:c5:62:4b:ed:5d:ad:77:e7:
02:8c:7c:25:b4:ea:34:3d:b5:26:95:11:ba:3b:08:e9:2a:5f:
16:15:df:4e:f2:3e:22:1d:fe:f1:8b:2a:33:3f:e2:b8:4d:5f:
fe:fd:87:85:2a:a6:ac:fd:bd:8d:a5:05:a4:54:45:f1:59:1f:
0c:3c:92:a3:ce:bd:e9:3a:ae:6c:b7:e2:08:0e:c8:4a:b0:e8:
95:75:27:64:e5:cf:2f:fe:2f:a7:e1:92:fe:06:af:e9:0c:a6:
f2:cf:58:e8:c0:a4:20:02:45:db:7b:b2:16:9a:b8:51:46:05:
ab:7f:f0:cd:25:90:ae:97:e2:08:dd:48:9d:05:d7:90:b5:e3:
21:2d:8d:e0:3a:7a:a5:3c:d7:24:dd:65:97:10:dc:d5:3b:45:
da:b3:ce:f9:70:51:ba:8a:fb:08:93:37:f3:07:62:a2:bb:ce:
db:1c:3d:2f:71:9e:49:3c:68:f3:a7:61:05:d3:5e:c3:73:08:
df:3e:46:bd:60:c9:7a:79:fc:fb:8a:56:aa:01:34:d7:8a:ac:
50:65:7b:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 23:49:10 2025 by rpki-client