Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/a346f552-39a7-32fe-b8bd-70aede6df2d7.roa
File: a346f552-39a7-32fe-b8bd-70aede6df2d7.roa (raw, json)
Hash identifier: vkFoaccuMUgvpSAwVaSRpie+2zJSr5pEC1qrrLL4XCY=
Subject key identifier: 6E:4E:B3:5E:FF:7A:BA:53:A2:69:B2:D5:D0:B9:05:AD:43:E4:B0:45
Certificate issuer: /CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
Certificate serial: 010D0C9F432858494733E63A51F03FD14CC7CF00
Authority key identifier: AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/a346f552-39a7-32fe-b8bd-70aede6df2d7.roa
Signing time: Sun 23 Mar 2025 01:00:39 +0000
ROA not before: Sun 23 Mar 2025 01:00:39 +0000
ROA not after: Sat 21 Jun 2025 01:00:39 +0000
asID: 20253
IP address blocks: 2606:bc40:1b::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:47:33:e6:3a:51:f0:3f:d1:4c:c7:cf:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
Validity
Not Before: Mar 23 01:00:39 2025 GMT
Not After : Jun 21 01:00:39 2025 GMT
Subject: CN=a74f048d-79a8-4fa5-a7e0-8b7f9baec065
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ab:e0:46:09:8b:57:1d:2f:63:76:12:87:0d:
af:c4:4a:bc:19:1a:d3:83:3e:d9:22:11:d2:28:8d:
5c:d6:cb:a6:cc:9b:bd:a0:f6:61:51:6f:f6:16:87:
ba:99:c7:b2:58:5d:31:c3:97:0b:9b:1b:74:b4:10:
72:8f:bb:8e:63:0e:70:f4:f7:03:69:87:6a:10:3e:
a2:3a:9c:db:a7:f5:75:7e:be:de:96:53:71:59:0a:
e9:05:f2:bb:a5:78:cb:39:28:20:cd:6f:85:d0:2d:
60:5d:39:64:a2:e6:68:a6:47:55:7d:c8:3d:13:20:
29:67:1b:15:c0:58:30:4b:0f:23:9b:d1:22:83:34:
da:e2:dc:ce:5f:6e:8d:c5:9c:b6:73:c5:aa:de:cc:
af:3e:f0:22:c2:9e:cb:51:e5:4b:5b:2f:60:3c:10:
4f:89:58:65:a0:98:de:b6:72:f9:5b:40:26:dc:a6:
14:16:c4:5c:88:5a:66:13:c4:d2:02:76:31:21:50:
d9:5f:25:ee:3b:d4:72:16:83:0e:6a:e9:5d:5e:fd:
ef:e9:13:4b:00:81:0d:1e:7f:71:78:fa:59:75:7a:
46:4b:02:72:26:03:6f:20:69:01:f8:65:57:71:aa:
f7:9a:d4:76:0f:69:69:a6:79:ff:be:db:31:e3:de:
51:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:4E:B3:5E:FF:7A:BA:53:A2:69:B2:D5:D0:B9:05:AD:43:E4:B0:45
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/a346f552-39a7-32fe-b8bd-70aede6df2d7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl
X509v3 Authority Key Identifier:
keyid:AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
sbgp-ipAddrBlock: critical
IPv6:
2606:bc40:1b::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7f:00:29:e9:9b:20:aa:b5:ca:d6:38:cf:e1:02:17:25:f1:63:
ed:d7:53:83:77:76:6b:58:8b:fd:c0:30:d9:c8:98:e8:d3:2d:
7a:a7:7d:5a:c9:f0:1b:bf:de:5a:0c:a3:8c:0e:77:7e:43:97:
2e:fe:76:49:e8:86:fa:0b:c8:08:de:e9:85:3f:b1:be:ec:6a:
b6:f6:71:a3:17:21:5f:74:56:e6:c0:a9:a9:63:9b:3e:e0:c8:
21:e7:24:89:e5:17:a8:bd:ba:44:a2:57:bc:57:7c:78:61:93:
f0:95:f2:a3:87:1b:ac:da:6f:30:f4:01:df:d4:69:4f:2d:3e:
ea:95:3e:a7:1b:ae:d5:57:9f:fc:a1:02:d8:37:be:78:1e:97:
7c:89:96:4e:5f:10:2a:1d:73:cf:e4:7a:22:47:58:d7:99:2c:
4c:e0:3d:af:50:90:8a:e3:81:d3:8b:bd:7b:f2:5d:09:c7:89:
b0:6a:ec:d7:3c:07:3d:11:cc:a9:09:07:89:5d:89:22:40:70:
56:74:92:a8:66:38:ac:ca:7e:d3:d1:4b:30:78:1e:dd:63:a6:
54:39:5d:15:44:4e:4a:66:e2:c9:62:60:dc:47:35:e9:83:17:
65:5d:5e:07:80:0d:0e:cb:21:c1:23:c4:43:e3:3c:a5:a5:20:
e3:22:dc:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 10:35:44 2025 by rpki-client