Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/fbcdfa9a-5a4a-3592-9202-be0f20711738.roa
File: fbcdfa9a-5a4a-3592-9202-be0f20711738.roa (raw, json)
Hash identifier: VKE/y6n2DtjJsctIxU5GNqQSfK7ujr/D7fmwAfTdZD0=
Subject key identifier: 5F:48:37:B9:3F:9F:37:58:75:8F:43:45:A7:DD:77:F0:8E:C6:1A:CA
Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial: 010D0C9F4328584780268B9F1A4871F3F3B89C00
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/fbcdfa9a-5a4a-3592-9202-be0f20711738.roa
Signing time: Fri 11 Oct 2024 01:00:31 +0000
ROA not before: Fri 11 Oct 2024 01:00:31 +0000
ROA not after: Thu 09 Jan 2025 02:00:31 +0000
asID: 209242
IP address blocks: 2607:8940:3680::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:80:26:8b:9f:1a:48:71:f3:f3:b8:9c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Validity
Not Before: Oct 11 01:00:31 2024 GMT
Not After : Jan 9 02:00:31 2025 GMT
Subject: CN=a0a4f8d5-b1ea-433d-9dac-0ebdc2cd893b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:5f:42:89:ef:ac:b1:1d:59:14:19:28:ee:24:
e8:f0:ca:b1:d8:b4:fb:0e:64:9f:22:11:85:cb:69:
44:04:a1:e9:68:18:8c:4b:34:90:d7:fb:43:6c:77:
ec:7f:c2:71:3f:5e:65:58:72:f2:82:52:e3:c8:5e:
f5:40:5d:55:cc:93:82:3b:80:37:08:29:dc:64:f2:
31:57:8e:96:3f:c6:07:42:45:85:09:6a:40:23:4a:
91:99:be:d7:d7:3e:a2:7c:c6:12:0f:f4:c8:e2:0c:
fc:b6:5b:61:cf:fb:80:36:4e:0d:cb:61:85:67:7f:
c1:f9:07:1e:b5:96:5a:34:bf:7d:88:0e:9e:76:bc:
44:d9:a0:03:1c:21:8a:e6:b7:16:e3:a2:ec:d0:48:
c8:59:72:29:9a:aa:af:50:55:2e:17:0f:0c:d9:5e:
0d:16:b2:98:7c:15:a9:e2:3d:b6:7c:20:8a:6f:ba:
17:1d:51:ad:25:44:8f:19:77:6b:40:da:bc:13:97:
3a:a0:e3:86:f6:36:67:7c:01:d4:88:65:f0:ed:08:
15:31:d3:8b:66:5c:32:d2:4e:19:7c:d5:98:16:e4:
84:c8:d5:9d:3d:47:4f:e6:f1:98:a5:08:77:04:31:
e8:c2:e9:ff:09:31:64:6f:0f:49:4e:9a:9b:36:9b:
4f:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:48:37:B9:3F:9F:37:58:75:8F:43:45:A7:DD:77:F0:8E:C6:1A:CA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/fbcdfa9a-5a4a-3592-9202-be0f20711738.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
X509v3 Authority Key Identifier:
keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:8940:3680::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
66:2c:65:7b:d8:a5:0a:78:4e:a6:6b:20:5a:3d:63:bf:51:fb:
b9:72:e1:9a:81:16:c6:8d:7e:09:0e:a1:f0:04:af:25:18:05:
1c:2c:9c:62:e4:cc:e0:bc:f1:71:49:f1:2a:93:47:86:e2:7e:
4e:00:70:63:4a:a6:26:d8:b3:46:bf:f9:b1:d5:27:ea:d7:eb:
49:d0:9b:96:ae:f5:af:b1:31:73:26:f5:21:4b:e9:68:f1:b6:
41:e8:fa:ba:01:ed:5d:47:b5:76:04:c1:4c:11:30:49:e8:c2:
ea:8f:b8:e8:1a:fe:3d:af:3e:99:e8:86:67:8e:0f:04:62:14:
b8:f6:f6:8b:4b:c3:be:12:a1:d1:25:09:1c:72:39:7f:6a:9d:
94:a8:66:bb:fc:35:35:87:71:ea:8f:23:d2:ed:be:ac:cf:b8:
9e:81:94:1c:8a:74:14:63:38:21:0b:a1:cd:1c:4d:7a:01:d0:
21:90:cd:50:c1:58:dc:27:75:c9:d8:3a:c3:cc:54:36:de:9a:
dd:22:49:63:5f:b5:4a:35:fa:9a:c6:b0:77:ae:fb:f7:9a:8e:
db:41:48:5e:bb:c0:ab:45:c7:0b:be:19:38:e0:94:d9:fa:b9:
dc:86:03:ac:71:82:0d:52:87:17:b5:91:a5:80:aa:3b:fc:9f:
ce:71:66:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:19:59 2025 by rpki-client