Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/dca9a2b5-e1e4-3c8e-9343-2610e120b5dd.roa
File: dca9a2b5-e1e4-3c8e-9343-2610e120b5dd.roa (raw, json)
Hash identifier: R+zDEimK4OPmtUXWKgXYaMfJP5I4GiOEpH2fhHntlcM=
Subject key identifier: 24:1C:0B:F0:1C:C9:84:06:91:97:A0:DB:0F:F2:18:57:3C:1C:F6:63
Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial: 010D0C9F43285849403962E4DE2209513ECE8100
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/dca9a2b5-e1e4-3c8e-9343-2610e120b5dd.roa
Signing time: Thu 20 Mar 2025 13:00:53 +0000
ROA not before: Thu 20 Mar 2025 13:00:53 +0000
ROA not after: Wed 18 Jun 2025 13:00:53 +0000
asID: 54113
IP address blocks: 2607:8940:4690::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:40:39:62:e4:de:22:09:51:3e:ce:81:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Validity
Not Before: Mar 20 13:00:53 2025 GMT
Not After : Jun 18 13:00:53 2025 GMT
Subject: CN=8b1a5243-19f7-45dd-a39d-1ae79c31310e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:ff:4c:b5:c1:72:32:a7:3b:4c:ee:3e:b2:f9:
fc:55:da:35:c8:e5:18:78:b6:5a:df:52:39:17:49:
07:79:aa:3a:ed:35:cf:56:80:9b:9c:0d:a8:73:16:
7e:45:e5:dc:06:6e:e6:0e:0a:d1:74:0c:c4:4d:64:
65:c1:55:15:eb:2a:f6:fe:4d:e2:39:d3:dd:e2:ed:
66:fb:c2:a9:8b:4f:77:df:37:73:7b:e1:a9:72:92:
3d:79:6f:8e:11:69:9f:1b:2d:ba:5a:3a:85:5c:e7:
c4:40:10:05:28:34:eb:a9:56:69:ff:cc:dc:12:76:
3f:53:df:c0:73:9c:d2:8e:9e:a8:1d:0b:50:9d:e2:
a1:46:46:89:71:42:82:35:32:01:83:92:ea:76:14:
8e:6f:0d:8f:20:ef:ca:1e:af:6c:9c:f0:82:1f:23:
d6:10:31:71:0d:44:f0:a2:19:b9:f6:df:76:ce:13:
54:8d:78:f9:45:63:06:20:fd:83:20:4e:86:69:1f:
7c:cb:c2:74:6e:16:22:58:e6:c8:54:91:55:81:e9:
f6:b4:a3:43:f7:be:6f:ba:2e:4f:32:76:3c:fc:c9:
f8:f1:c0:f4:b6:58:f9:a4:2a:0e:ad:e4:83:9a:db:
f4:0c:de:09:f2:80:ee:56:bf:3a:4f:f8:0c:ed:80:
01:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:1C:0B:F0:1C:C9:84:06:91:97:A0:DB:0F:F2:18:57:3C:1C:F6:63
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/dca9a2b5-e1e4-3c8e-9343-2610e120b5dd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
X509v3 Authority Key Identifier:
keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:8940:4690::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
25:c7:97:86:a9:ce:48:95:dc:02:63:09:18:fb:5b:a7:47:a4:
a8:f1:5f:82:da:ec:f3:9d:8a:aa:eb:61:50:2e:d7:fc:bf:fb:
18:43:e2:d2:41:98:d4:3c:98:ea:59:72:e9:73:5c:09:f9:0f:
80:f1:e1:7f:91:f1:c2:28:43:d2:6c:ee:f6:8b:88:4b:22:f4:
0d:74:fc:06:d9:78:40:87:da:cd:11:9f:79:97:36:26:bf:af:
3b:90:23:ba:e5:b5:6a:b5:7a:bd:4f:9f:f6:48:63:f0:7d:66:
9c:6e:19:d7:e3:17:bc:f8:9e:4d:e8:e6:fb:da:69:ad:79:49:
a6:34:c8:98:c7:2d:43:a5:38:2d:f5:f8:96:a4:c3:f4:bb:68:
96:af:cf:05:f9:59:78:5a:fc:72:95:e6:f1:fc:10:19:01:ee:
12:27:7b:09:44:e1:0d:ae:4f:3e:ca:e2:48:d5:96:3b:bb:fd:
19:29:f8:e0:94:79:46:69:38:6d:64:2e:79:95:66:6d:7c:8b:
5e:7f:1c:e6:91:6c:68:b4:22:fa:1d:fd:11:b9:c6:b1:e4:02:
89:95:ea:9a:84:fa:0b:f2:13:a8:3d:e2:6d:6c:d3:a9:46:db:
4a:b5:db:65:3b:93:bd:3d:62:4b:5a:c5:a6:19:bf:e9:ce:08:
98:aa:a8:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 02:44:30 2025 by rpki-client