Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82/18d10fc1-0e5f-3f86-8e13-3cadda7fde55.roa
File: 18d10fc1-0e5f-3f86-8e13-3cadda7fde55.roa (raw, json)
Hash identifier: PBwwC6ua5OFVQbHmj9NWVpi6xOruFGfjKzO5FwLZMP8=
Subject key identifier: B2:D5:31:A5:95:F1:3F:0B:07:78:B8:EB:D0:FC:90:46:99:CE:16:D9
Certificate issuer: /CN=f81bacd8-f7d9-47d7-aa24-5391049f9c82
Certificate serial: 010D0C9F43285849194183F58C3CE2B9F6780C00
Authority key identifier: EC:FD:C8:EB:B2:36:F3:BB:96:DA:C4:64:EB:92:D9:A9:A9:F7:13:3D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82/18d10fc1-0e5f-3f86-8e13-3cadda7fde55.roa
Signing time: Thu 06 Mar 2025 14:00:52 +0000
ROA not before: Thu 06 Mar 2025 14:00:52 +0000
ROA not after: Wed 04 Jun 2025 13:00:52 +0000
asID: 400544
IP address blocks: 2607:76c0:23::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:19:41:83:f5:8c:3c:e2:b9:f6:78:0c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f81bacd8-f7d9-47d7-aa24-5391049f9c82
Validity
Not Before: Mar 6 14:00:52 2025 GMT
Not After : Jun 4 13:00:52 2025 GMT
Subject: CN=fe73b0f6-7b42-4ab1-86ee-ee8a4422250a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:e7:b2:5f:a6:e9:70:a3:c6:b8:66:a2:9a:34:
cb:a1:9f:f6:4b:f0:10:ce:b4:d8:74:29:32:fb:78:
e9:90:fb:34:28:e8:32:df:91:4f:cb:c2:e2:be:93:
1e:81:28:f7:92:d8:2c:4d:90:0f:81:bd:e9:14:1e:
b2:6b:c7:60:42:32:9c:d3:14:d8:f2:1d:8f:86:01:
29:d0:ec:c1:4b:f3:22:ec:b6:ce:dc:a1:cb:c5:25:
c3:25:f7:27:3c:63:06:0c:6e:ab:10:49:14:13:3b:
b2:de:20:b5:c5:66:bc:bc:80:0f:b6:51:39:a8:4c:
41:db:58:a4:13:e3:36:87:36:43:2b:e5:12:4a:e9:
8d:71:f5:8b:45:d0:6b:01:4f:04:d8:58:20:10:f7:
31:92:a6:74:fa:ef:8b:87:75:77:df:09:7a:03:34:
22:4b:39:25:51:85:3f:b1:56:69:74:85:4c:98:2c:
53:80:95:78:10:45:78:57:f7:82:29:e1:28:4e:73:
f4:57:07:7b:7d:9e:08:71:6c:d4:49:9f:c1:7d:45:
07:6e:8c:25:a9:fd:d4:dd:54:2d:2d:73:23:42:aa:
e6:ee:d4:0e:4b:1b:53:e3:56:17:a1:54:20:8a:9d:
ee:2c:69:c1:3c:35:2e:0c:7e:a9:15:5d:71:66:bf:
f7:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:D5:31:A5:95:F1:3F:0B:07:78:B8:EB:D0:FC:90:46:99:CE:16:D9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82/18d10fc1-0e5f-3f86-8e13-3cadda7fde55.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82/f81bacd8-f7d9-47d7-aa24-5391049f9c82.crl
X509v3 Authority Key Identifier:
keyid:EC:FD:C8:EB:B2:36:F3:BB:96:DA:C4:64:EB:92:D9:A9:A9:F7:13:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:76c0:23::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
60:b3:bb:69:f6:72:15:86:38:36:cb:7c:c0:23:d2:25:34:78:
63:d8:9b:5b:7d:71:b5:a8:df:27:14:b7:c3:3f:70:6e:6e:40:
f2:87:89:0a:53:b0:41:0b:f7:9d:b5:71:e0:06:68:47:66:06:
5c:3e:4a:d3:9b:f1:c4:13:57:11:a4:cd:be:d8:e8:3a:2c:aa:
99:58:76:ec:c6:fa:f4:8c:80:31:bf:dd:44:59:8b:d1:5b:1e:
e3:c5:6c:7c:01:45:60:23:50:0a:02:73:7e:02:6e:5b:ca:4f:
bf:8c:f4:ad:8e:b7:89:cb:e1:d2:70:db:ab:52:95:cb:c8:bc:
ca:19:8d:12:47:46:1d:df:ef:bc:cd:c6:84:0b:4c:21:cf:97:
3d:61:8d:4a:82:5b:7b:29:7d:86:22:aa:43:4f:a6:2d:01:3a:
ee:8b:6b:16:fb:97:a6:6f:16:99:73:74:a1:4b:f4:bf:aa:93:
64:eb:aa:48:2b:d7:31:3a:72:b6:c4:ef:e9:c1:3f:7e:50:72:
b4:ba:42:95:c1:6c:4a:4b:94:b9:f1:1e:0d:46:3f:02:10:5a:
5e:24:1e:b8:6e:72:95:f6:be:70:3d:9d:9d:f0:e1:61:07:7f:
60:7c:08:90:5d:50:10:3b:8d:02:3f:76:66:4a:3b:78:41:00:
66:53:22:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 15:59:25 2025 by rpki-client