Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/6c01ff9b-1c59-3288-8956-b402ec0bd417.roa
File: 6c01ff9b-1c59-3288-8956-b402ec0bd417.roa (raw, json)
Hash identifier: W8npfBQPZzbv9Fdn9iaFTMBiiBBYZqLrWtuvf9SwtVs=
Subject key identifier: AA:09:38:35:CC:D0:67:43:DA:00:92:B1:D2:35:4A:2F:6B:20:16:25
Certificate issuer: /CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
Certificate serial: 010D0C9F432858480EA518425A1404B200D18480
Authority key identifier: AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/6c01ff9b-1c59-3288-8956-b402ec0bd417.roa
Signing time: Sun 01 Dec 2024 02:00:39 +0000
ROA not before: Sun 01 Dec 2024 02:00:39 +0000
ROA not after: Sat 01 Mar 2025 02:00:39 +0000
asID: 20253
IP address blocks: 2606:bc40:f02::/48 maxlen: 48
2606:bc40:f03::/48 maxlen: 48
2606:bc40:f04::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:0e:a5:18:42:5a:14:04:b2:00:d1:84:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
Validity
Not Before: Dec 1 02:00:39 2024 GMT
Not After : Mar 1 02:00:39 2025 GMT
Subject: CN=e866afdb-e560-4f68-a6f3-0a237520bd0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:58:10:35:ca:6e:e5:47:40:e8:da:70:a6:d4:
fe:fd:1a:42:f9:93:17:fa:70:70:9e:11:0b:b6:b6:
e6:84:4e:22:77:a0:d8:5b:5e:2d:f7:9d:e2:57:ad:
14:e6:24:81:d5:08:4f:5e:52:b5:db:25:48:8d:c2:
a0:b0:04:53:89:f5:fd:d2:29:cb:59:af:df:b5:d8:
d1:3c:6b:a4:44:74:05:22:b3:b3:10:ca:c2:b0:e3:
1e:20:69:a2:da:5b:84:19:92:aa:19:fa:51:71:25:
ba:9f:d9:5d:99:68:94:90:af:b6:eb:dc:1b:2f:b9:
74:eb:60:6c:12:42:6c:80:97:e4:a7:17:be:fd:68:
18:8a:90:5e:21:8f:b9:12:ee:e2:6a:c2:6a:a4:5d:
50:3a:8e:40:1a:70:dc:2a:a6:36:27:dd:23:1c:2b:
02:2c:67:72:17:50:aa:f0:b7:ac:49:e4:5d:33:e5:
2c:d8:44:34:b9:08:64:4d:ed:ee:55:80:ff:3e:59:
35:26:26:4a:ef:a0:0b:f6:0c:f2:b8:5d:d9:17:f3:
85:d0:1f:f4:5c:ac:5c:3e:79:67:75:04:58:4e:6c:
bf:7e:6c:30:7b:5e:d9:8a:48:01:d1:59:7c:a8:a0:
d1:c3:6d:81:be:7c:61:fb:15:1d:6d:17:03:d0:1a:
c8:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:09:38:35:CC:D0:67:43:DA:00:92:B1:D2:35:4A:2F:6B:20:16:25
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/6c01ff9b-1c59-3288-8956-b402ec0bd417.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl
X509v3 Authority Key Identifier:
keyid:AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
sbgp-ipAddrBlock: critical
IPv6:
2606:bc40:f02::-2606:bc40:f04:ffff:ffff:ffff:ffff:ffff
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1e:f4:60:6a:3c:ee:3c:c1:ad:10:16:a2:9c:09:ef:c4:61:23:
4e:a4:17:57:db:0d:3d:ff:45:8c:8b:0e:c7:be:ce:a0:53:46:
37:ac:1f:1c:8c:8f:14:87:16:09:18:c1:b4:d0:0e:28:02:f1:
c8:8a:38:05:60:4c:5e:f8:37:28:18:d2:ab:01:0b:05:bc:80:
72:22:85:ab:a9:8f:43:c0:eb:f9:29:02:ee:91:32:e6:62:75:
e6:f6:72:6e:02:0d:2b:9f:c0:67:c0:cd:bd:51:dd:ba:16:32:
45:89:1b:65:ad:4f:69:4a:ac:0a:40:80:32:77:27:46:6d:9a:
31:f7:4a:e2:4e:23:55:f9:10:7f:c5:d2:43:fb:4a:bb:2f:ad:
b5:bb:65:23:32:01:05:dc:72:dc:ba:3e:2a:fd:e9:c6:c9:e3:
69:f8:33:10:1e:d0:8e:56:67:db:18:cd:b5:cf:9f:53:c6:57:
e2:ef:e0:6b:c3:03:a9:b6:a2:f2:7f:88:a4:e5:39:cf:85:1c:
7b:ba:c0:c0:f8:9e:13:a0:3d:f4:da:ea:10:3f:f3:7d:3e:cc:
4d:b5:09:1f:e3:bf:65:47:ac:b3:13:1d:9b:b0:24:48:4b:b3:
aa:0b:f0:a6:42:59:4e:f1:fa:59:aa:b6:37:9e:1e:b4:95:8b:
b5:6a:e9:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:30:36 2025 by rpki-client