Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bc831f6b-71a6-46bb-9f64-2da80ccc244c/ec82ec24-b74f-35cf-8cb3-670f71dcedb1.roa
File: ec82ec24-b74f-35cf-8cb3-670f71dcedb1.roa (raw, json)
Hash identifier: Z65ddTN2gIkLKvXHfZlY8K4EN+ZTcH5yPueHWHivQuA=
Subject key identifier: 96:BE:4C:D4:9D:7A:5A:8C:8A:85:8F:35:96:F3:35:12:5A:D1:75:8C
Certificate issuer: /CN=bc831f6b-71a6-46bb-9f64-2da80ccc244c
Certificate serial: 010D0C9F4328584930DE6223246B4836AEDDDC00
Authority key identifier: A9:50:46:A5:5A:7E:BB:0F:CE:06:22:BA:A4:AF:11:59:F2:3E:CD:24
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bc831f6b-71a6-46bb-9f64-2da80ccc244c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bc831f6b-71a6-46bb-9f64-2da80ccc244c/ec82ec24-b74f-35cf-8cb3-670f71dcedb1.roa
Signing time: Sat 15 Mar 2025 01:00:39 +0000
ROA not before: Sat 15 Mar 2025 01:00:39 +0000
ROA not after: Fri 13 Jun 2025 01:00:39 +0000
asID: 997
IP address blocks: 2600:b400::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:30:de:62:23:24:6b:48:36:ae:dd:dc:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc831f6b-71a6-46bb-9f64-2da80ccc244c
Validity
Not Before: Mar 15 01:00:39 2025 GMT
Not After : Jun 13 01:00:39 2025 GMT
Subject: CN=3f1bfac2-d4ed-48c8-813d-ee8ce0181767
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:c3:c2:02:ba:c0:fc:8a:8b:5e:5c:fa:10:5c:
f2:32:93:ab:ec:c7:69:e9:f4:f0:91:76:43:f5:d5:
e0:33:1f:b1:49:1d:cb:73:45:66:2f:b6:5c:ee:9b:
7e:f1:11:c5:d2:14:63:c0:8a:2e:ef:e7:13:76:49:
b8:93:09:3f:83:8a:85:53:9b:ba:2b:38:53:91:ad:
b5:f5:49:80:5e:2b:72:87:09:78:31:8b:05:53:ce:
cd:38:9c:be:d5:b2:7c:6a:7a:83:ce:bc:78:be:70:
36:45:e9:00:56:35:b4:25:a8:e4:33:b4:b1:c1:12:
98:28:17:50:90:27:b6:fe:00:05:6f:86:b9:71:71:
0d:9c:99:ee:76:fd:30:97:f9:bf:35:77:7b:6c:02:
42:e0:b6:a3:80:bf:b6:22:58:33:b6:c3:cf:ed:26:
26:83:95:c4:f0:87:7c:dc:a7:69:a5:62:3d:4a:50:
b6:73:34:11:69:55:e1:a0:bf:35:ff:92:f5:d0:a5:
2a:48:b9:c2:a1:3b:e5:96:b6:de:1f:79:e8:df:9d:
0d:b9:83:bf:56:34:69:fd:f1:9e:33:5a:f2:39:15:
a8:31:46:be:76:e2:73:7e:4e:21:10:87:c8:16:68:
de:0c:50:66:d1:2b:bb:35:4c:4f:f4:b2:eb:7b:6b:
9d:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:BE:4C:D4:9D:7A:5A:8C:8A:85:8F:35:96:F3:35:12:5A:D1:75:8C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bc831f6b-71a6-46bb-9f64-2da80ccc244c/ec82ec24-b74f-35cf-8cb3-670f71dcedb1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bc831f6b-71a6-46bb-9f64-2da80ccc244c/bc831f6b-71a6-46bb-9f64-2da80ccc244c.crl
X509v3 Authority Key Identifier:
keyid:A9:50:46:A5:5A:7E:BB:0F:CE:06:22:BA:A4:AF:11:59:F2:3E:CD:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bc831f6b-71a6-46bb-9f64-2da80ccc244c.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:b400::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
28:33:2a:69:66:d5:f7:83:5b:0d:cf:f5:e9:e0:4d:67:4a:80:
60:d5:44:0e:61:97:45:9d:0c:23:2c:bb:42:e6:75:7c:3b:0f:
6e:94:57:54:f1:f1:e6:18:63:f0:1b:eb:77:76:86:e5:e4:17:
85:0d:67:61:eb:2e:78:06:86:53:21:83:08:ba:be:1b:94:dd:
3a:6f:93:37:81:f6:05:f1:d9:94:e8:ff:8d:90:b3:e1:e5:2b:
38:fc:ec:2b:36:af:70:00:58:a4:4a:c6:9a:02:e8:6c:b8:03:
6a:a5:c5:88:ba:63:90:6d:18:fd:4d:dd:ba:03:c2:8c:6e:75:
54:d6:da:72:36:1f:ab:72:6d:5c:16:af:8a:99:28:23:d1:bb:
b4:24:71:bf:b7:a4:e0:4d:8c:9d:67:8c:8e:65:a2:95:e7:c3:
ad:46:a5:08:b6:78:bd:8c:2e:bd:3d:83:b2:61:c5:7b:5e:5a:
0d:b4:39:6e:88:a4:9e:38:44:12:d9:f2:a5:48:2c:53:a7:4a:
24:7b:bd:f8:6b:ad:87:ac:90:56:1e:02:25:5b:c6:cc:f0:1d:
69:ea:b1:26:26:b5:3a:04:9b:cc:6a:40:f4:0e:25:36:f3:6d:
0f:ba:07:b8:be:03:38:aa:6c:fb:3c:01:68:55:c0:10:73:2c:
86:c5:1c:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:37:27 2025 by rpki-client