Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ae55b5de-dd92-467b-8e52-a8892152f63e/773711fe-d16a-3264-8aa5-6b74483fd17e.roa
File: 773711fe-d16a-3264-8aa5-6b74483fd17e.roa (raw, json)
Hash identifier: opzTntSjU9QBvhxSXHzJBNw+Eo2903zgtar2TX0rWrQ=
Subject key identifier: 95:8C:20:93:61:DE:DB:3B:82:1F:2D:78:A8:E5:2D:39:DA:DD:34:97
Certificate issuer: /CN=ae55b5de-dd92-467b-8e52-a8892152f63e
Certificate serial: 010D0C9F43285849350E978F5A346631B07E8100
Authority key identifier: 3C:CB:7F:A8:B3:A3:29:3E:B0:7E:2F:BF:D0:6B:75:3C:D0:85:9C:53
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ae55b5de-dd92-467b-8e52-a8892152f63e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ae55b5de-dd92-467b-8e52-a8892152f63e/773711fe-d16a-3264-8aa5-6b74483fd17e.roa
Signing time: Sun 16 Mar 2025 13:00:52 +0000
ROA not before: Sun 16 Mar 2025 13:00:52 +0000
ROA not after: Sat 14 Jun 2025 13:00:52 +0000
asID: 1097
IP address blocks: 2607:77c0::/32 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:35:0e:97:8f:5a:34:66:31:b0:7e:81:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae55b5de-dd92-467b-8e52-a8892152f63e
Validity
Not Before: Mar 16 13:00:52 2025 GMT
Not After : Jun 14 13:00:52 2025 GMT
Subject: CN=59ec9a7e-5148-4a02-80d0-a1a875267cd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:3d:7a:16:7c:8c:0c:76:8b:2e:e5:a7:2e:9f:
64:ee:78:89:02:b2:bc:51:83:28:2c:52:0a:88:43:
e6:2f:4e:7b:ce:f5:f1:5f:f1:05:e2:ad:d9:f4:e7:
d6:9d:f6:02:43:d4:f5:f4:e5:45:ce:7d:c2:40:98:
8f:be:3d:ee:ed:80:43:82:8f:53:13:ed:b5:2c:e6:
c0:27:bc:0d:0d:4d:4e:b4:b8:26:88:45:26:d5:19:
5f:00:1c:58:f0:be:c9:3a:8e:05:3a:32:1b:86:62:
eb:17:94:a6:29:2d:0c:00:79:19:dd:e0:b5:0d:10:
2c:f4:68:2f:1c:30:14:30:70:41:48:c0:62:a8:09:
e7:ea:19:58:2a:c6:8d:1f:c7:f8:73:e3:e2:c7:1d:
d2:13:54:4b:2e:fd:26:80:30:31:14:be:cb:58:f5:
fe:50:22:3f:d3:4d:36:5b:90:17:09:f8:79:8d:48:
30:7b:23:e1:cf:b6:52:c1:f3:f0:be:b6:01:0f:1a:
be:24:62:63:0d:1c:0d:d6:5c:06:34:1c:bc:63:49:
f0:46:b0:e7:d4:18:82:a2:33:59:0a:49:ea:9e:92:
40:e5:26:18:23:c2:59:72:b8:b8:70:64:46:e0:b5:
59:15:66:52:82:dc:76:99:2b:f3:4a:bc:86:c5:ec:
48:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:8C:20:93:61:DE:DB:3B:82:1F:2D:78:A8:E5:2D:39:DA:DD:34:97
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ae55b5de-dd92-467b-8e52-a8892152f63e/773711fe-d16a-3264-8aa5-6b74483fd17e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ae55b5de-dd92-467b-8e52-a8892152f63e/ae55b5de-dd92-467b-8e52-a8892152f63e.crl
X509v3 Authority Key Identifier:
keyid:3C:CB:7F:A8:B3:A3:29:3E:B0:7E:2F:BF:D0:6B:75:3C:D0:85:9C:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ae55b5de-dd92-467b-8e52-a8892152f63e.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:77c0::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
49:21:b8:7e:3f:ae:f9:28:b3:75:d1:ad:38:9d:26:e4:e3:f0:
b5:c5:51:40:c8:0e:9b:f5:ff:d5:69:ce:38:bf:b9:46:48:06:
7c:fa:95:27:ff:7e:d6:16:a9:85:20:09:bc:0c:96:5d:40:04:
b2:1b:8c:a0:69:a1:10:55:73:44:7d:12:fd:a1:2f:09:d1:b3:
e4:d2:fe:30:db:0f:3b:0f:45:9e:b1:2e:28:48:ed:66:4e:96:
aa:28:cb:78:45:5f:23:bd:5f:7a:71:45:93:18:4a:9d:49:0a:
06:ca:61:b1:64:da:f9:5e:f3:66:89:4e:da:39:41:3a:d3:62:
73:be:3c:ab:66:72:5e:17:ea:4c:49:d5:70:68:59:c6:60:f7:
a8:a6:64:fc:01:e8:11:d3:e4:48:b5:34:71:b8:b5:a2:d9:86:
ca:15:6a:b7:43:de:b6:f4:43:9d:fe:cb:aa:5a:48:1d:eb:4c:
cf:04:69:5b:e8:8d:ac:88:0c:1a:a5:16:1b:b2:99:37:76:86:
77:84:f4:71:a2:cc:ca:f4:8c:b0:be:ec:c2:30:9f:b8:f5:c9:
24:41:c9:3a:e3:55:e6:b2:35:d0:a0:5c:51:ad:10:39:24:84:
b7:5b:43:76:f3:59:77:76:27:21:8e:54:22:c8:9c:9c:3d:ff:
7b:d2:c3:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 00:19:49 2025 by rpki-client