Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/0df869bf-cab9-329a-ba1c-1ba2d98295f0.roa
File: 0df869bf-cab9-329a-ba1c-1ba2d98295f0.roa (raw, json)
Hash identifier: A/u+lOfuSRjYn/AhW28BJmkvdLEGEAvY2+7sTUbgiUo=
Subject key identifier: BF:AD:9C:C2:D4:FF:CC:B0:F6:E6:42:F8:BB:4B:8D:41:7F:44:4B:EC
Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial: 010D0C9F43285849403969DC58B00FC895DAEBF0
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/0df869bf-cab9-329a-ba1c-1ba2d98295f0.roa
Signing time: Thu 20 Mar 2025 13:00:53 +0000
ROA not before: Thu 20 Mar 2025 13:00:53 +0000
ROA not after: Wed 18 Jun 2025 13:00:53 +0000
asID: 54113
IP address blocks: 2607:8940:5b50::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:40:39:69:dc:58:b0:0f:c8:95:da:eb:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Validity
Not Before: Mar 20 13:00:53 2025 GMT
Not After : Jun 18 13:00:53 2025 GMT
Subject: CN=96580495-2cad-4750-88f5-996a0e0d32a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d5:73:9b:76:ec:55:b0:34:f6:d3:58:fa:b6:
3e:93:53:e4:24:b6:7f:77:0b:a9:f2:f2:9f:59:00:
cb:42:43:34:10:9a:e2:1e:cf:1c:39:6e:04:b9:58:
a7:34:90:9e:cb:19:2a:e0:68:04:13:de:c2:63:bc:
83:78:55:f1:71:31:f4:08:f3:24:73:9f:5c:c2:42:
90:fd:91:c9:fe:9d:2c:f2:55:fe:a2:e8:89:a0:b4:
3a:81:64:96:f7:0b:f7:df:77:25:00:cd:4f:f1:5f:
3f:35:d6:39:d6:8a:8a:b7:77:cf:01:cc:9e:d9:5f:
e6:3b:67:7c:2f:47:13:89:2c:81:07:0e:2d:c3:82:
c9:0d:89:72:52:0e:5f:db:c8:07:f8:c9:9a:69:03:
e8:ad:10:40:9e:3c:b0:75:b1:43:42:b2:2f:fb:ce:
0d:30:a9:5d:bc:0e:10:7f:89:64:42:a2:cb:07:0a:
aa:b2:e3:d0:c5:c3:f8:d9:21:89:a6:15:94:e6:1e:
17:a6:7a:ad:3a:6c:24:ce:00:2c:0d:00:7a:f5:b2:
33:78:10:2e:45:3a:17:51:26:e6:53:43:1d:0f:10:
d1:3d:ab:69:64:80:99:fc:80:3d:ce:70:60:7e:e6:
37:13:aa:d3:c6:d6:1a:0f:a2:1b:3e:f4:d2:dd:92:
dd:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:AD:9C:C2:D4:FF:CC:B0:F6:E6:42:F8:BB:4B:8D:41:7F:44:4B:EC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/0df869bf-cab9-329a-ba1c-1ba2d98295f0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
X509v3 Authority Key Identifier:
keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:8940:5b50::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
21:6d:55:86:e1:66:47:29:5b:94:3f:d2:33:ca:62:b1:f8:11:
e0:82:65:34:58:17:75:66:32:f8:08:41:14:16:b6:31:5e:45:
63:26:b5:93:cc:be:ca:1a:4d:98:70:60:07:42:8c:43:c5:c1:
eb:33:27:ad:d8:ea:ae:8f:08:69:38:27:69:a4:f0:ce:81:e0:
d2:c0:c6:5b:5a:33:e8:3c:1a:65:a8:26:a2:f5:8f:60:a7:21:
b8:4b:74:80:0b:2f:9f:71:83:d7:77:bc:8f:2f:0c:21:57:b6:
a4:4f:f9:ea:ab:a3:66:92:45:bd:96:0d:ec:0e:e9:77:02:7d:
82:c9:8b:45:53:f9:85:3f:b5:f1:4d:a5:c6:a9:7a:f2:d2:06:
bb:38:4b:df:b0:2b:5c:ea:70:2f:64:e3:6d:7a:48:56:65:66:
90:f8:97:86:f9:df:c3:7d:99:8e:ed:5c:40:97:46:1a:57:9b:
94:46:01:43:d8:a0:f7:0a:bf:64:cb:78:90:72:92:f3:f0:ff:
3c:e8:e1:e0:bb:7c:37:58:5d:33:19:79:91:dc:4a:5c:6d:c5:
4c:ae:72:3a:3e:c9:5b:37:71:5a:32:af:e3:a6:a5:92:8f:ce:
ad:a7:b6:63:10:69:91:09:45:a8:4e:a4:40:27:df:81:88:67:
4d:9b:eb:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 02:41:51 2025 by rpki-client