Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/da61f786-99c2-4468-90f7-0b35abd168e5/bc669675-4f09-3100-852b-f89b8e4fa0ee.roa
File: bc669675-4f09-3100-852b-f89b8e4fa0ee.roa (raw, json)
Hash identifier: 6lq6bL+5FcQGPIi5cqpZcgsi1XOSoxuvPVNelg7LD1E=
Subject key identifier: 25:B7:5E:B1:1B:B0:2C:CC:36:28:94:71:7C:AD:F6:01:E8:00:76:6A
Certificate issuer: /CN=da61f786-99c2-4468-90f7-0b35abd168e5
Certificate serial: 010D0C9F432858487325AD6FE8FD457C2C390800
Authority key identifier: 9B:B2:56:DD:8E:8C:E4:13:02:1F:AC:BA:4D:EB:C0:52:A2:E5:05:59
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/da61f786-99c2-4468-90f7-0b35abd168e5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/da61f786-99c2-4468-90f7-0b35abd168e5/bc669675-4f09-3100-852b-f89b8e4fa0ee.roa
Signing time: Mon 06 Jan 2025 02:00:40 +0000
ROA not before: Mon 06 Jan 2025 02:00:40 +0000
ROA not after: Sun 06 Apr 2025 01:00:40 +0000
asID: 54650
IP address blocks: 2604:bb40::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:73:25:ad:6f:e8:fd:45:7c:2c:39:08:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da61f786-99c2-4468-90f7-0b35abd168e5
Validity
Not Before: Jan 6 02:00:40 2025 GMT
Not After : Apr 6 01:00:40 2025 GMT
Subject: CN=1053722b-535a-4eb9-a632-e52f1a75904b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:0f:9a:50:1f:10:6c:7c:b2:5f:d7:c6:1c:a4:
60:50:6c:03:16:46:c6:aa:09:65:76:29:2a:6d:8e:
03:9d:57:36:62:31:bd:25:2d:7b:03:95:14:08:f9:
69:0a:6b:a7:a3:fb:ed:e6:ab:f9:85:0d:c2:2b:6a:
da:59:b0:a5:09:25:77:0c:98:61:33:60:be:3c:16:
62:5b:db:84:88:e5:a8:19:02:fe:05:22:e5:ae:05:
71:f8:fb:80:42:70:21:c2:59:ad:9b:c9:5a:11:5a:
5a:4e:5d:83:35:13:db:f4:96:44:05:bf:04:25:f2:
13:b2:70:8e:68:4b:1b:6b:bb:24:8c:ff:92:de:a0:
93:3b:8f:38:02:5b:13:87:f0:f5:ef:cd:f4:d8:97:
c7:4b:60:ee:81:aa:71:3a:19:0e:74:73:58:97:72:
9b:8f:33:12:89:71:16:66:37:8d:21:99:2a:d8:59:
7d:61:bf:13:55:7d:4f:bf:36:dd:56:f9:b5:a3:30:
1f:75:5b:3e:81:6c:04:ff:91:bf:55:d1:51:30:c6:
7c:35:e1:9c:9f:eb:d7:8b:7a:c8:c2:27:16:a3:85:
bd:56:c3:17:0c:64:a3:5c:16:a1:73:a1:29:1e:43:
2a:b4:b4:f6:26:27:95:1f:10:ba:88:51:6b:34:e9:
14:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:B7:5E:B1:1B:B0:2C:CC:36:28:94:71:7C:AD:F6:01:E8:00:76:6A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/da61f786-99c2-4468-90f7-0b35abd168e5/bc669675-4f09-3100-852b-f89b8e4fa0ee.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/da61f786-99c2-4468-90f7-0b35abd168e5/da61f786-99c2-4468-90f7-0b35abd168e5.crl
X509v3 Authority Key Identifier:
keyid:9B:B2:56:DD:8E:8C:E4:13:02:1F:AC:BA:4D:EB:C0:52:A2:E5:05:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/da61f786-99c2-4468-90f7-0b35abd168e5.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:bb40::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
82:36:c0:9d:e4:11:68:d1:37:15:98:c3:a4:f3:bc:e7:5e:25:
c2:88:30:5a:3e:5e:df:fc:51:37:99:79:00:05:d4:24:64:18:
8a:4a:b4:2e:5c:f1:ec:83:52:f2:f1:33:f3:82:67:95:48:95:
57:52:e7:2b:f2:79:ca:0c:da:61:7b:7e:7b:4f:18:94:d5:17:
d9:8f:4b:5f:68:36:0d:12:b6:80:5f:cc:8c:0e:f5:8c:b4:de:
12:0b:56:01:8f:a5:57:e6:62:2c:31:23:4a:59:e2:b5:10:8b:
5a:a6:03:bd:6b:02:02:ab:79:14:2b:06:2f:7c:10:9b:5b:ea:
92:b0:c3:f9:4a:22:91:59:2b:ab:8e:aa:b3:17:9f:09:68:4e:
47:20:bc:15:bf:5c:f2:42:10:67:9f:70:14:e3:d4:5c:e4:a9:
d3:03:8b:ef:73:15:0c:80:92:ac:8f:92:d9:17:3d:86:48:ac:
be:4c:2e:9e:57:77:21:c6:dc:a8:c3:67:14:7c:4a:02:99:31:
f0:cf:e8:8b:c3:cb:35:10:0d:d2:63:40:13:1d:17:18:57:17:
c9:c8:10:95:58:50:8e:0b:e2:8a:ee:b6:69:ac:1c:35:3a:dc:
68:c9:ba:c2:fb:90:21:0a:b7:e6:d6:04:01:9e:65:7d:15:04:
72:35:02:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:21:54 2025 by rpki-client