Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/dfe7e74b-e11b-3e5c-9d51-9d3c71471aa6.roa
File: dfe7e74b-e11b-3e5c-9d51-9d3c71471aa6.roa (raw, json)
Hash identifier: na88C0V/NzjUpVbkIPGh9k5h74JmMI5v+HP+/LnPewc=
Subject key identifier: 70:E1:4D:C8:B3:67:24:C3:C8:49:D7:6F:14:74:66:AA:C7:B9:16:FE
Certificate issuer: /CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
Certificate serial: 010D0C9F43285848828092E109C3898771897280
Authority key identifier: AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/dfe7e74b-e11b-3e5c-9d51-9d3c71471aa6.roa
Signing time: Sat 11 Jan 2025 14:00:52 +0000
ROA not before: Sat 11 Jan 2025 14:00:52 +0000
ROA not after: Fri 11 Apr 2025 13:00:52 +0000
asID: 20253
IP address blocks: 2606:bc40:f17::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:82:80:92:e1:09:c3:89:87:71:89:72:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
Validity
Not Before: Jan 11 14:00:52 2025 GMT
Not After : Apr 11 13:00:52 2025 GMT
Subject: CN=ceab33bf-b0ba-4e29-a43f-ac7f2f4119bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:37:cd:80:96:dc:8c:9a:51:36:1c:60:bc:6b:
88:15:c4:68:d3:82:a2:0f:38:b2:e5:41:7d:9c:cc:
06:48:d3:cc:91:ad:04:51:78:79:18:89:c5:a2:ff:
0b:46:61:9b:58:fb:d0:84:65:a4:43:b1:83:e8:af:
03:07:9f:7b:3d:b9:ae:c0:6c:1a:d0:1a:ee:9a:ee:
5b:42:88:01:dd:c9:0a:1b:5e:23:83:00:81:cd:9c:
24:c2:16:f1:78:b6:cb:1e:4a:1f:8f:d0:17:2f:82:
e4:56:37:01:40:e5:dd:7b:93:9f:f0:6d:fc:53:25:
bc:d9:56:bf:6a:89:a0:56:ae:f6:f9:a2:ab:0a:9a:
7e:45:1b:b8:e9:a0:a3:b6:ab:51:88:49:eb:4f:6d:
75:ec:04:ff:45:db:15:d6:37:f9:cd:59:a2:0c:55:
14:df:ef:59:18:6b:09:16:41:01:99:a3:64:18:5a:
1b:4b:9f:04:45:a8:51:7b:8c:64:ce:85:f9:b6:5d:
9f:91:21:57:b2:bf:2a:10:de:98:98:33:40:46:9a:
26:92:26:10:e6:47:bc:90:66:76:d3:6c:05:e9:0a:
31:59:f0:82:59:ec:ea:04:c0:64:77:d3:cc:9c:78:
c0:94:2e:58:8f:84:56:d8:3d:96:bb:70:f7:92:54:
c3:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:E1:4D:C8:B3:67:24:C3:C8:49:D7:6F:14:74:66:AA:C7:B9:16:FE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/dfe7e74b-e11b-3e5c-9d51-9d3c71471aa6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl
X509v3 Authority Key Identifier:
keyid:AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
sbgp-ipAddrBlock: critical
IPv6:
2606:bc40:f17::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6c:dc:f1:a6:46:b2:9a:63:99:7f:7c:49:fb:38:1d:03:77:2a:
2c:bc:b1:12:e2:1a:c0:9a:66:48:0a:c7:f4:c3:2d:eb:d9:85:
6b:2a:a0:0a:da:c2:cb:9c:28:27:e6:58:9f:59:52:12:cf:5c:
ff:aa:81:d0:15:ce:a4:5d:97:da:e5:b0:80:8d:9a:b2:82:5c:
3e:bd:ef:29:fe:80:8d:ed:06:4f:cb:fa:1f:e4:e6:9b:9c:3d:
42:e5:4d:18:79:91:0e:6b:a6:42:f6:15:64:2a:6e:c2:5c:4d:
32:b4:14:80:a5:71:e6:90:7a:b9:aa:0d:8b:6d:9c:98:6a:0d:
47:63:da:d6:be:cf:35:96:bd:b3:d2:fe:47:46:21:49:43:39:
60:0c:df:03:ad:9f:79:f4:1d:0e:2d:02:6d:d0:4b:01:c0:49:
6e:c4:6d:4a:27:79:12:96:81:8f:89:51:c6:43:ee:d1:d9:be:
ca:54:52:ee:f4:37:62:1a:e3:d7:f0:04:6b:69:67:e4:17:46:
e1:ed:3e:b8:40:83:1a:5e:38:5c:71:2d:aa:3e:86:55:2f:49:
c3:52:f6:7b:c8:93:b9:d0:c2:d3:2e:dc:5c:f1:b9:66:97:d2:
73:44:3f:c8:3e:54:b2:be:f9:f2:8a:60:ea:1a:c4:25:75:68:
86:71:85:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:23:11 2025 by rpki-client