Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/68a2e22a-71e8-3050-9a38-54a304d98477.roa
File: 68a2e22a-71e8-3050-9a38-54a304d98477.roa (raw, json)
Hash identifier: dLo10kdctn7DH9U5JR+Hg3WXR9rTqUgm4AUODpkHtQI=
Subject key identifier: 54:FB:AA:B4:F5:2A:5F:D9:47:56:6F:04:45:96:12:13:53:FE:5E:17
Certificate issuer: /CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
Certificate serial: 010D0C9F4328584902EC2D45A2B5B0ECF18ED980
Authority key identifier: AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/68a2e22a-71e8-3050-9a38-54a304d98477.roa
Signing time: Wed 26 Feb 2025 14:00:51 +0000
ROA not before: Wed 26 Feb 2025 14:00:51 +0000
ROA not after: Tue 27 May 2025 13:00:51 +0000
asID: 20253
IP address blocks: 2606:bc40:f00b::/48 maxlen: 48
2606:bc40:f00c::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:02:ec:2d:45:a2:b5:b0:ec:f1:8e:d9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
Validity
Not Before: Feb 26 14:00:51 2025 GMT
Not After : May 27 13:00:51 2025 GMT
Subject: CN=2ce21a85-252e-4b30-a99f-ed705e453497
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:35:a3:9d:e7:13:27:71:83:cf:e6:b4:e4:7f:
19:48:bb:10:0c:8b:56:f6:25:76:e7:23:be:4d:3f:
bb:d3:a0:ee:c9:a6:23:83:45:c6:89:00:cf:71:75:
f4:47:81:e4:06:4d:77:3c:4c:8d:34:2a:94:b4:b5:
9a:e7:2c:bc:44:e8:d8:97:5c:74:9b:03:68:e6:28:
dd:46:76:bd:29:49:0b:49:af:c1:ab:9c:c9:17:47:
fe:e3:e0:62:fc:4d:bc:f4:87:fc:78:73:4d:17:22:
87:a7:3c:8c:b0:12:d7:69:ad:13:8c:34:38:59:ba:
ae:97:09:52:21:0a:86:e9:65:79:c4:e0:4e:17:28:
9d:37:68:48:0f:0e:ea:83:96:0b:1c:e0:17:f1:eb:
14:0b:20:12:f3:a8:04:ac:57:43:8a:28:7a:a2:c6:
d1:6f:12:df:3f:e1:b6:4a:4c:17:2f:37:7b:8a:a1:
04:33:90:e9:bc:1c:a5:5c:74:a3:f8:1f:b9:3a:b8:
fa:df:17:a7:02:12:a5:dd:68:7f:40:54:d1:43:ca:
d1:22:54:98:a8:e4:6c:c4:7b:54:8d:be:fa:97:57:
3a:d0:88:97:b1:97:58:fe:1e:50:70:2f:38:3d:34:
5e:17:51:73:65:42:9f:91:9d:10:ce:ff:3f:b7:ff:
c6:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:FB:AA:B4:F5:2A:5F:D9:47:56:6F:04:45:96:12:13:53:FE:5E:17
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/68a2e22a-71e8-3050-9a38-54a304d98477.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl
X509v3 Authority Key Identifier:
keyid:AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
sbgp-ipAddrBlock: critical
IPv6:
2606:bc40:f00b::-2606:bc40:f00c:ffff:ffff:ffff:ffff:ffff
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3a:fd:65:2e:76:97:4b:77:01:e8:50:39:85:5e:fe:52:bf:90:
bc:81:55:ee:32:d9:46:6b:71:b6:6a:8c:b9:ba:48:8f:77:3e:
10:8a:6a:59:fd:33:a3:c0:dc:bc:2d:3e:0e:2a:85:8d:44:4b:
77:be:03:76:99:8a:f5:33:7f:dd:80:b7:33:e0:62:34:37:aa:
1e:b4:6f:7a:3b:b0:15:bd:f2:44:68:eb:c8:e5:06:bd:53:96:
06:91:f3:00:d6:79:2d:b9:04:dc:e1:83:84:23:5e:c2:73:4d:
fd:08:eb:25:f6:c2:4d:ce:3f:d0:cb:6f:27:e6:2d:c2:66:8b:
0e:63:e3:cd:bb:26:93:cb:f2:0a:3e:d6:42:fa:31:57:56:6d:
35:b3:49:07:a8:34:35:13:f9:3b:c3:79:78:b2:bc:7a:e1:e0:
23:9a:53:ea:a7:54:bf:45:39:f2:29:70:37:1e:8e:37:b8:ea:
0e:35:5b:a8:55:ed:93:94:a6:b4:e0:13:3f:c7:8a:12:c5:45:
fd:fc:0f:37:bc:75:c3:bf:fa:a5:c1:70:fb:01:e7:4c:c7:32:
6a:fe:9c:40:06:ad:c5:5b:1f:73:7f:98:0f:ed:3c:a8:75:b8:
ed:0d:98:3e:f6:d2:94:65:a8:1b:66:12:aa:60:2a:7c:38:48:
b8:fa:01:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 10:35:42 2025 by rpki-client