Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/c2afe04d-8d73-3bef-b5c4-217ac12e7b79.roa
File: c2afe04d-8d73-3bef-b5c4-217ac12e7b79.roa (raw, json)
Hash identifier: q1cwSItgVupqka8dcdjnD6LGEZn3ZPqchuyqoBqfK5s=
Subject key identifier: 97:F6:EA:2E:CA:30:B9:D7:E3:3A:6A:1D:6A:F6:E3:BA:B7:C2:CF:69
Certificate issuer: /CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
Certificate serial: 010D0C9F43285848F4F6A1DDA68A607DDDBA8640
Authority key identifier: AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/c2afe04d-8d73-3bef-b5c4-217ac12e7b79.roa
Signing time: Fri 21 Feb 2025 14:00:50 +0000
ROA not before: Fri 21 Feb 2025 14:00:50 +0000
ROA not after: Thu 22 May 2025 13:00:50 +0000
asID: 20253
IP address blocks: 2606:bc40:f100::/48 maxlen: 48
2606:bc40:f101::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f4:f6:a1:dd:a6:8a:60:7d:dd:ba:86:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
Validity
Not Before: Feb 21 14:00:50 2025 GMT
Not After : May 22 13:00:50 2025 GMT
Subject: CN=af92ae22-0e95-4c4b-911f-fd011c2d6b25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:90:4f:78:c9:55:42:d2:fd:20:f9:0b:8a:fb:
fa:b5:1d:80:6e:4c:fe:a8:02:9f:b5:09:01:1c:57:
f5:3c:e7:ac:7c:46:d4:19:bc:dc:c7:a5:54:8f:10:
17:8a:44:94:af:65:e3:fa:bf:f6:4f:5d:04:95:49:
02:ae:cd:18:0c:61:9e:a6:dc:93:c8:0f:0d:80:4b:
0f:bb:53:22:40:df:70:05:d3:37:9f:43:38:95:61:
de:c4:80:e7:f9:ff:64:c4:3d:a1:b8:fc:d4:de:69:
17:b8:37:21:30:26:30:ba:ed:98:29:21:96:3a:45:
25:f5:74:65:b0:99:27:20:2f:5d:2b:c8:9b:44:22:
cf:01:e4:86:a8:3c:f3:ea:0f:32:f5:d0:32:85:20:
13:f8:83:2e:29:c0:9b:52:7e:79:e1:cf:ed:24:ad:
ad:36:3f:60:83:3f:7a:63:80:d0:d0:37:4c:10:7e:
f1:b6:45:6e:e4:db:c9:4d:0d:bf:dd:3e:19:bc:62:
24:ea:f0:35:08:52:9c:af:46:6d:cc:75:8a:a5:3d:
ea:f4:47:fd:46:2a:91:f4:20:0b:26:cd:c7:0f:02:
21:f8:6d:42:af:23:d2:a3:3b:d9:2e:c3:48:4a:14:
b8:97:69:e1:63:9f:74:71:aa:f5:f7:5d:62:90:f3:
22:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:F6:EA:2E:CA:30:B9:D7:E3:3A:6A:1D:6A:F6:E3:BA:B7:C2:CF:69
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/c2afe04d-8d73-3bef-b5c4-217ac12e7b79.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl
X509v3 Authority Key Identifier:
keyid:AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
sbgp-ipAddrBlock: critical
IPv6:
2606:bc40:f100::/47
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
59:e5:6e:7c:1d:bb:02:6f:ae:90:e3:3f:43:42:39:66:c1:6d:
a1:00:a4:5e:e3:3e:93:4d:0e:81:71:a9:05:1e:7b:9f:a7:24:
90:e7:1e:59:be:68:8b:9a:a0:dd:40:a9:cd:1c:03:b6:46:a4:
a7:c6:57:21:7e:79:47:41:58:1b:bc:0e:c5:5c:e2:fd:4d:7e:
09:b1:0d:7a:b2:1b:cd:c3:a5:b8:9e:71:e9:7f:02:bc:08:91:
6b:88:73:0c:e2:00:f2:c0:3b:ca:b2:88:1e:6f:9a:e3:65:94:
1f:22:59:c9:d0:bb:4d:20:b4:1c:7e:84:fb:7b:75:dc:60:29:
9c:dd:85:fc:64:2c:15:c7:f2:91:43:8d:de:0b:ce:39:2c:10:
38:3c:ad:ef:21:03:21:8c:5b:6e:da:9d:84:41:47:be:05:4d:
4e:9e:c0:0f:0e:0b:33:cd:33:c0:f4:00:e4:2d:83:c2:63:10:
bd:a2:d0:f4:dc:ac:17:c8:e7:4b:53:6d:3c:47:61:1b:b3:dc:
62:3b:2d:cc:da:b4:b2:92:c4:f9:99:9e:90:9f:68:33:28:f8:
dc:6e:e2:ce:14:ce:6f:47:95:f5:71:a7:67:94:28:d9:cf:d9:
bb:b3:00:0c:42:5c:e8:22:09:ff:68:7b:7c:3f:30:42:cc:6b:
10:f3:70:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 10:32:33 2025 by rpki-client