Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/da61f786-99c2-4468-90f7-0b35abd168e5/bc669675-4f09-3100-852b-f89b8e4fa0ee.roa
File: bc669675-4f09-3100-852b-f89b8e4fa0ee.roa (raw, json)
Hash identifier: zFEOHCjO2LzHL9jTYD1YibQUrrC3iWz/tEhrT1VtqDs=
Subject key identifier: 3D:24:FB:BB:77:0E:63:8D:02:E9:7A:1B:3E:26:70:95:B5:B3:2D:E1
Certificate issuer: /CN=da61f786-99c2-4468-90f7-0b35abd168e5
Certificate serial: 010D0C9F4328584953C40A8E49FBCEDD6AF71380
Authority key identifier: 9B:B2:56:DD:8E:8C:E4:13:02:1F:AC:BA:4D:EB:C0:52:A2:E5:05:59
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/da61f786-99c2-4468-90f7-0b35abd168e5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/da61f786-99c2-4468-90f7-0b35abd168e5/bc669675-4f09-3100-852b-f89b8e4fa0ee.roa
Signing time: Thu 27 Mar 2025 13:00:52 +0000
ROA not before: Thu 27 Mar 2025 13:00:52 +0000
ROA not after: Wed 25 Jun 2025 13:00:52 +0000
asID: 54650
IP address blocks: 2604:bb40::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:53:c4:0a:8e:49:fb:ce:dd:6a:f7:13:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da61f786-99c2-4468-90f7-0b35abd168e5
Validity
Not Before: Mar 27 13:00:52 2025 GMT
Not After : Jun 25 13:00:52 2025 GMT
Subject: CN=ff4211c6-0aea-419c-87bf-1da28ee9f197
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:f6:6b:a3:30:df:8e:5b:81:7d:75:07:8b:05:
b6:fd:bc:27:ba:e0:ba:e6:29:09:1b:94:1e:30:f6:
55:3f:11:cd:61:85:38:00:98:c6:69:57:ef:7d:be:
a0:8f:62:12:93:9a:72:61:01:9a:38:9c:98:3a:1c:
27:b6:21:1d:cb:1d:f0:41:a7:f1:21:d3:59:1c:8a:
a6:8d:9c:a5:e6:93:0e:5a:36:60:5b:52:cc:83:ea:
36:6d:2d:e0:8f:6f:79:2c:7e:13:bd:dd:f3:68:1c:
9a:f2:01:49:d8:7e:17:cf:cd:56:b4:3b:d1:1b:bd:
24:3b:77:b1:aa:c0:a7:d5:4e:58:f0:99:df:73:f0:
eb:5c:63:86:71:97:61:dd:32:62:17:97:67:fd:26:
95:70:32:6b:c4:aa:87:d1:bc:65:fe:32:d1:52:47:
b6:cd:02:59:98:6b:a0:a4:bb:af:0c:2b:a8:80:cc:
2b:28:d5:4e:8d:5b:ef:63:ea:ea:92:eb:4b:82:12:
02:c9:ee:c8:70:b7:19:8e:0d:96:7f:8d:85:6e:fa:
4f:37:8c:85:2b:47:1b:62:44:1b:7d:33:42:eb:6e:
1b:8c:f8:05:83:5b:ae:4a:30:e5:61:f8:11:35:5d:
25:05:46:5c:d0:b2:29:06:08:df:6f:7b:83:d8:ad:
b2:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:24:FB:BB:77:0E:63:8D:02:E9:7A:1B:3E:26:70:95:B5:B3:2D:E1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/da61f786-99c2-4468-90f7-0b35abd168e5/bc669675-4f09-3100-852b-f89b8e4fa0ee.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/da61f786-99c2-4468-90f7-0b35abd168e5/da61f786-99c2-4468-90f7-0b35abd168e5.crl
X509v3 Authority Key Identifier:
keyid:9B:B2:56:DD:8E:8C:E4:13:02:1F:AC:BA:4D:EB:C0:52:A2:E5:05:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/da61f786-99c2-4468-90f7-0b35abd168e5.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:bb40::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2f:bd:cb:1a:57:34:4f:90:8e:52:46:38:85:02:35:d3:96:b3:
c7:e6:37:93:7b:27:6e:f0:0c:60:89:10:02:da:d4:b6:4c:6d:
39:4d:79:70:12:3d:d7:2a:7b:6b:d8:de:8c:8a:7e:30:50:01:
49:9c:35:70:92:fe:19:80:61:27:48:32:75:a6:97:67:ca:c9:
71:68:f6:d5:75:66:30:a4:51:8c:bc:bd:8f:54:92:81:8c:7f:
f4:eb:61:7e:48:25:71:2a:3b:e5:a5:ef:fa:2c:3a:2a:ac:97:
9f:82:74:de:cd:c0:f2:6d:4f:83:7f:53:39:7c:a5:c9:55:ac:
5e:e7:b4:fb:07:4d:30:a4:bc:bf:c8:53:da:e2:53:8b:f3:73:
74:93:24:b8:a3:32:b8:98:78:86:8f:b9:2a:d8:f8:13:41:60:
83:4f:a7:b5:2b:0d:c0:58:d4:1b:9e:25:10:2f:7b:63:c1:86:
82:39:b6:f9:9b:94:a7:98:7f:0c:87:7b:fd:b6:fa:22:c0:af:
6e:78:93:93:04:cb:a2:3b:08:d0:58:53:10:f7:6a:0a:1a:d3:
d2:a4:70:4d:10:4e:8d:51:12:c5:61:8f:97:57:fb:86:8e:93:
42:24:36:e9:27:26:53:34:a2:92:a2:e7:0e:63:d9:51:ca:cc:
cb:bc:34:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 18:25:59 2025 by rpki-client