Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/8029ca08-8f5e-39bb-983d-9cde1d0c2b1a.roa
File: 8029ca08-8f5e-39bb-983d-9cde1d0c2b1a.roa (raw, json)
Hash identifier: wKDYtySYd5TNgvas/unmCHm02ltnr9pB3QV1bv1AYI8=
Subject key identifier: E3:EC:15:0A:5D:8F:C2:83:58:54:94:78:D6:1E:C9:80:04:4B:E4:59
Certificate issuer: /CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
Certificate serial: 010D0C9F432858480EA517DCF36595BDC48CB880
Authority key identifier: AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/8029ca08-8f5e-39bb-983d-9cde1d0c2b1a.roa
Signing time: Sun 01 Dec 2024 02:00:39 +0000
ROA not before: Sun 01 Dec 2024 02:00:39 +0000
ROA not after: Sat 01 Mar 2025 02:00:39 +0000
asID: 20253
IP address blocks: 2606:bc40:17::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:0e:a5:17:dc:f3:65:95:bd:c4:8c:b8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
Validity
Not Before: Dec 1 02:00:39 2024 GMT
Not After : Mar 1 02:00:39 2025 GMT
Subject: CN=e2fdabb9-8db3-462e-acd4-8986a4a21bd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:cb:cd:ac:96:1f:0d:22:b0:4d:00:72:0f:45:
65:5c:d3:2e:bb:cf:f2:5d:bf:3b:c4:ac:80:d9:ed:
4c:1e:e8:d0:9e:c2:55:10:63:6e:3b:43:7f:cc:a9:
60:84:c9:95:78:61:9f:75:e5:29:0d:35:b0:dd:d0:
ff:78:0b:c9:16:24:3f:09:27:ba:08:4e:c6:55:33:
8b:65:9f:7d:f2:5a:5e:bf:3e:d0:c3:40:2a:f0:d4:
a8:94:db:a2:68:5e:c6:1c:8f:91:21:05:d8:ad:a3:
f5:a5:95:99:c7:05:f9:f1:a6:07:e1:6a:28:e5:c8:
c5:b3:3d:18:2c:89:5f:d7:cf:15:e4:30:0e:15:4e:
86:50:4b:bd:85:31:f7:f9:77:a6:87:12:72:7e:a1:
c2:76:1b:6a:d2:17:c9:d6:d0:91:3b:49:73:56:8d:
3a:31:6a:62:9f:e5:4b:8f:58:d3:31:19:50:dc:04:
40:a3:de:13:11:3e:2d:31:c6:04:2e:41:e4:77:08:
0f:a5:42:58:d6:af:c2:50:b6:99:5b:3e:c2:42:db:
87:94:15:a9:21:75:a7:69:8d:38:f9:07:56:3e:8d:
ac:f7:4e:8a:d0:ff:20:7b:09:8e:f8:ab:b7:b1:5a:
f3:7c:4b:b1:02:05:94:ce:25:8c:e7:8a:3e:14:f4:
cd:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:EC:15:0A:5D:8F:C2:83:58:54:94:78:D6:1E:C9:80:04:4B:E4:59
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/8029ca08-8f5e-39bb-983d-9cde1d0c2b1a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl
X509v3 Authority Key Identifier:
keyid:AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
sbgp-ipAddrBlock: critical
IPv6:
2606:bc40:17::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6e:f9:3e:45:a8:64:e7:25:29:42:38:b6:5e:df:24:dc:93:5a:
00:87:b4:73:74:e2:bc:36:b7:88:d3:1e:6c:8d:d1:8e:3d:b2:
a3:5f:d4:95:47:97:76:c9:e5:90:50:fb:9d:21:99:58:ae:de:
95:ab:7e:6c:bf:e9:7a:47:83:7c:d4:df:97:5f:af:42:6a:3e:
3e:bb:4f:98:cf:f3:de:e7:be:94:01:3c:c2:5d:c2:65:2c:52:
fc:4b:90:aa:26:bd:d6:19:f9:fd:d4:58:a3:e5:95:b2:9b:10:
74:db:e8:fc:89:7d:ea:de:72:24:95:e2:84:8b:ca:ae:07:c4:
29:5a:c2:de:2f:d6:7f:ba:13:a3:a3:6a:a5:5a:8d:e7:56:66:
e9:30:35:b9:22:26:07:d6:3d:ae:f1:a5:b4:9d:65:41:f5:00:
d0:79:50:15:7c:3a:82:5d:93:60:96:b4:d5:f5:4f:98:5e:4f:
d7:d5:d0:a8:99:df:21:31:83:a5:14:7d:e5:a9:3a:f7:b8:6a:
ae:80:66:1b:52:7e:9e:93:6f:1f:dc:96:8c:ba:ca:f8:6d:eb:
43:c3:64:33:84:18:c0:2e:08:0d:38:64:62:b3:bb:58:4a:e4:
54:99:f4:2d:03:9e:34:fe:65:e3:b2:3a:33:23:17:e4:10:c2:
7f:22:2a:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:47:51 2025 by rpki-client