Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/8029ca08-8f5e-39bb-983d-9cde1d0c2b1a.roa
File: 8029ca08-8f5e-39bb-983d-9cde1d0c2b1a.roa (raw, json)
Hash identifier: 4v34XrdiDhLgbKhY2EY17prbHsLqr9BA2xPnd0yc2aI=
Subject key identifier: B4:08:90:6A:B5:92:21:1D:28:E3:43:53:C6:FA:F5:4F:EE:1C:64:BF
Certificate issuer: /CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
Certificate serial: 010D0C9F43285848EF61448032E452B6EC9C4118
Authority key identifier: AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/8029ca08-8f5e-39bb-983d-9cde1d0c2b1a.roa
Signing time: Wed 19 Feb 2025 14:00:52 +0000
ROA not before: Wed 19 Feb 2025 14:00:52 +0000
ROA not after: Tue 20 May 2025 13:00:52 +0000
asID: 20253
IP address blocks: 2606:bc40:17::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ef:61:44:80:32:e4:52:b6:ec:9c:41:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
Validity
Not Before: Feb 19 14:00:52 2025 GMT
Not After : May 20 13:00:52 2025 GMT
Subject: CN=3a69f35b-d931-4a85-8066-25bba181583b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:57:e7:7d:c6:ee:e5:bf:4d:5f:ff:1f:71:7b:
d3:3d:4c:9c:76:6f:61:0a:dc:22:36:b4:10:2d:0f:
74:44:34:86:d6:20:2b:de:ce:cf:74:f0:cd:38:34:
8f:69:a9:3f:b4:87:64:06:62:66:ad:ba:ad:e5:9f:
55:7a:0b:b7:37:18:ef:bc:e8:9a:dc:4d:d1:b3:14:
04:c7:81:01:b0:de:36:68:a0:8c:8b:db:e4:db:7f:
3f:29:ad:dc:54:ee:3a:59:29:74:28:35:04:b0:78:
7a:7f:b0:11:1b:a9:75:2a:06:dc:bd:a0:ca:3f:12:
ec:10:4e:7e:81:33:d3:12:ca:0e:49:95:58:4e:65:
20:fb:ef:03:00:72:67:ee:10:d7:dc:11:3b:81:bf:
94:07:8c:3f:c6:5b:e4:58:22:54:76:d9:09:25:ec:
b4:fd:dd:7e:f0:ec:c2:a3:c3:20:68:c8:55:0b:58:
5f:84:05:37:2c:e1:0b:1d:c7:95:f4:8d:ab:7e:e7:
66:ae:fa:48:fc:e0:e5:67:61:b1:51:9f:5f:66:1f:
db:90:3c:69:15:9e:7c:8d:7a:e6:e9:5e:cb:55:7f:
bf:62:63:4f:1a:47:13:a4:d5:0c:43:9a:38:a1:71:
31:c2:af:83:7b:eb:48:2b:45:ec:fa:d5:58:33:2b:
87:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:08:90:6A:B5:92:21:1D:28:E3:43:53:C6:FA:F5:4F:EE:1C:64:BF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/8029ca08-8f5e-39bb-983d-9cde1d0c2b1a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl
X509v3 Authority Key Identifier:
keyid:AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
sbgp-ipAddrBlock: critical
IPv6:
2606:bc40:17::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1f:b2:bd:6c:ff:9b:94:14:b9:51:96:20:2f:0d:cd:7d:81:78:
e6:5e:2b:a2:bb:20:06:6a:2d:f8:20:82:87:39:2f:33:4e:b4:
7b:6f:76:82:8d:47:56:97:7f:33:c8:8a:a6:42:3f:b9:c6:3f:
86:00:77:19:6b:b2:48:de:e7:24:12:44:4f:06:70:ff:6e:83:
e5:eb:53:90:2a:2a:c3:58:20:7a:ed:a4:8a:90:39:11:3d:68:
f5:ef:6d:c2:77:c3:41:a8:0b:a8:c0:a9:23:39:ce:9b:6b:4d:
45:d1:40:f5:57:9d:48:31:bf:34:dc:4a:1b:f2:18:a1:d2:38:
63:bb:b5:9f:b2:a1:ad:d1:fc:bd:b9:b2:94:d8:86:e2:f0:39:
01:47:c3:7e:20:ab:ff:92:c7:25:78:bd:b5:8d:bb:8d:3a:e7:
c8:b6:85:9a:73:4a:dd:fe:f1:db:c2:df:c4:4f:42:09:4b:ac:
01:a0:a4:ee:f6:a4:29:3b:e8:b5:38:4e:4f:73:0b:f5:6c:26:
cd:01:f1:2d:a6:40:2f:88:f7:bb:b4:9b:6a:1f:60:f2:d1:d8:
50:c9:19:08:ef:56:34:f7:6e:d3:d6:d6:bb:eb:18:05:c1:fd:
1d:e2:41:ee:b1:70:73:56:83:f6:7b:01:b3:07:14:2d:d3:9f:
51:fe:51:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 10:28:31 2025 by rpki-client