Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/0f57e9f4-dc00-3474-8c24-bc47d73d4f26.roa
File: 0f57e9f4-dc00-3474-8c24-bc47d73d4f26.roa (raw, json)
Hash identifier: 09mZG487jRcNTGhVRURK0q2rZGxPCGfyBk8RXLe8p68=
Subject key identifier: 4E:DE:A2:29:55:5E:D6:D2:68:9E:D6:B6:41:ED:D4:11:69:50:56:1E
Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial: 010D0C9F43285849403970DF4070A859A9FEC420
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/0f57e9f4-dc00-3474-8c24-bc47d73d4f26.roa
Signing time: Thu 20 Mar 2025 13:00:53 +0000
ROA not before: Thu 20 Mar 2025 13:00:53 +0000
ROA not after: Wed 18 Jun 2025 13:00:53 +0000
asID: 54113
IP address blocks: 2607:8940:5d40::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:40:39:70:df:40:70:a8:59:a9:fe:c4:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Validity
Not Before: Mar 20 13:00:53 2025 GMT
Not After : Jun 18 13:00:53 2025 GMT
Subject: CN=677b60c4-d810-4a8f-9c0c-d936c21e7239
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:f5:5d:e7:1d:32:4e:a7:2b:dd:61:33:af:f6:
c9:b8:5b:ab:f6:56:b8:c6:eb:37:8a:6b:fa:9d:c7:
56:14:f3:3d:80:c3:2e:39:11:e2:2e:4a:d7:5d:68:
5a:7f:b5:3d:46:2e:e4:79:7f:6e:de:2a:67:39:56:
31:7e:1d:a6:fc:9e:ee:d6:63:a2:f3:35:83:6c:ec:
46:71:fe:a1:99:43:18:e3:ce:89:10:aa:60:fd:56:
ff:8d:29:16:43:dd:f6:59:cd:8c:2f:58:d3:3d:4c:
06:96:91:f9:4d:a1:8c:1e:98:72:cd:61:dd:50:17:
de:48:27:4c:d6:41:60:08:b2:53:1b:8a:e8:08:aa:
6c:d8:85:97:b9:50:fe:57:07:b6:01:4a:b7:2c:12:
9e:b2:2b:27:2e:9d:b3:32:af:32:5c:34:bb:f8:f4:
aa:30:3a:61:e4:39:02:67:77:d3:e1:6b:e8:1f:c2:
0a:a5:77:8a:92:d0:0f:9e:cb:ba:1a:14:d2:ee:c0:
de:f5:2d:45:f4:2e:7e:fb:0d:35:ae:cf:4b:55:39:
3e:e7:b9:fa:c7:f7:07:64:be:3e:31:de:02:19:54:
4d:8d:14:22:de:de:e1:08:41:79:1b:9c:c4:db:17:
bc:e1:88:25:82:dc:4f:e1:4a:c9:4f:48:ae:51:85:
a1:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:DE:A2:29:55:5E:D6:D2:68:9E:D6:B6:41:ED:D4:11:69:50:56:1E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/0f57e9f4-dc00-3474-8c24-bc47d73d4f26.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
X509v3 Authority Key Identifier:
keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:8940:5d40::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
75:6c:db:0f:61:fd:7c:8c:45:5d:ba:ec:e2:c6:78:cf:71:2b:
f3:dc:d9:08:21:84:0e:9a:82:33:5c:32:89:a5:1d:41:65:8f:
45:55:46:94:5e:14:fb:11:6c:a7:b8:52:91:9b:f4:40:cb:8b:
47:98:e6:c1:8a:21:24:66:4a:15:0e:22:9d:a3:04:8f:39:9f:
b3:bb:8e:5d:27:9a:f7:61:b0:03:2b:92:74:1c:d3:7f:57:90:
b0:27:b6:45:a1:1a:57:ba:99:7e:95:f0:f1:10:c8:c4:93:f1:
f0:be:32:dc:fa:fb:dc:2b:ca:0e:68:9e:ed:e5:a9:b7:37:4e:
0f:e0:ce:af:b2:a2:27:76:33:36:bc:8e:f6:15:8c:78:d1:65:
ba:0a:1d:ca:da:1c:79:b0:f0:85:fa:64:6c:ec:d0:43:77:0d:
f7:ec:52:eb:ff:c2:49:4b:7b:9b:fe:a8:41:fc:31:96:bb:24:
a2:aa:0e:41:2d:56:be:94:db:de:75:ad:71:5d:ac:fb:09:ba:
ea:fe:57:a5:ba:d6:91:a8:31:c3:a9:4d:93:f8:78:8a:f1:f9:
7e:1e:04:b0:81:90:a3:f0:d5:4e:a7:1a:32:4a:79:82:b2:ed:
0f:59:41:d4:e2:fd:f6:da:36:20:22:3f:bc:2a:c3:ac:af:18:
58:16:d1:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 02:44:29 2025 by rpki-client