Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/e4a4b9ab-8fd2-3c38-a249-7f9e035e8bf6.roa
File: e4a4b9ab-8fd2-3c38-a249-7f9e035e8bf6.roa (raw, json)
Hash identifier: VJa4mC9J8MF1T5EcsPNm4PFHSxiDXcgomdCG+Y8jN7M=
Subject key identifier: 03:BB:CB:F2:9D:82:BD:C8:B1:E1:1A:E9:01:E8:34:1C:DA:EA:2E:80
Certificate issuer: /CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
Certificate serial: 010D0C9F43285848CC7B9F2E39D7BD025767E180
Authority key identifier: AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/e4a4b9ab-8fd2-3c38-a249-7f9e035e8bf6.roa
Signing time: Fri 07 Feb 2025 02:00:39 +0000
ROA not before: Fri 07 Feb 2025 02:00:39 +0000
ROA not after: Thu 08 May 2025 01:00:39 +0000
asID: 20253
IP address blocks: 2606:bc40:f200::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:cc:7b:9f:2e:39:d7:bd:02:57:67:e1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
Validity
Not Before: Feb 7 02:00:39 2025 GMT
Not After : May 8 01:00:39 2025 GMT
Subject: CN=c009928b-0646-46b2-8b6b-49bf9e6b21ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:b6:ea:73:f8:18:7c:e3:41:6a:96:b9:a6:8c:
5b:60:d3:3a:1d:f5:20:5c:f0:40:8e:5a:71:60:d0:
38:f8:3e:52:a8:fb:7f:7d:3a:db:bf:83:8f:13:8f:
94:69:36:5d:18:ff:3e:ba:56:18:e6:4e:e0:9f:47:
c0:b4:fd:56:78:5d:db:30:0f:fd:6a:9c:4c:a1:b9:
17:65:3b:71:78:9f:f8:6b:b4:3d:f5:19:e8:50:f7:
67:12:1a:1f:d7:69:c0:0d:05:b9:8a:58:d2:23:00:
6a:70:04:1c:57:16:2b:c5:0a:c7:e7:44:f6:c3:38:
51:d7:45:1d:50:e7:4e:77:3c:3f:59:53:a7:31:04:
ed:e9:4d:36:e2:bf:33:52:e4:52:37:d8:bf:16:d9:
f4:75:20:f3:9a:8a:d5:05:f0:e8:7b:09:e4:b3:1f:
c5:73:33:8a:db:53:c8:88:91:e4:d2:45:88:4d:00:
72:d5:c0:bc:d6:ab:a1:53:5f:c5:be:73:6b:13:1a:
40:04:1c:d3:b3:79:ab:50:14:f3:04:7b:34:53:59:
73:2b:6e:10:af:a5:51:32:f1:9c:11:46:f8:1b:44:
96:63:de:ad:e6:cb:d1:29:f1:42:c3:6e:02:4f:1b:
30:45:f3:46:aa:84:6f:a5:12:22:25:ea:4a:1b:0f:
ed:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:BB:CB:F2:9D:82:BD:C8:B1:E1:1A:E9:01:E8:34:1C:DA:EA:2E:80
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/e4a4b9ab-8fd2-3c38-a249-7f9e035e8bf6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl
X509v3 Authority Key Identifier:
keyid:AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
sbgp-ipAddrBlock: critical
IPv6:
2606:bc40:f200::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b6:83:ce:2f:1d:01:78:a2:4e:4b:76:ba:f5:97:0c:9d:6b:73:
9e:95:cc:75:2b:ab:df:e4:d8:e3:3e:38:ea:5d:ed:c9:5b:a6:
4a:b4:6a:98:16:56:1b:24:b7:fa:af:ac:4d:34:42:fd:4b:71:
8a:40:ff:08:24:97:89:47:7a:e7:c5:a8:e3:d2:17:6a:66:fb:
25:c6:0d:a6:17:7c:78:a8:b1:69:f0:c0:31:11:b1:b2:50:a3:
8a:8e:bb:be:9f:2d:29:86:8f:b6:22:60:1c:eb:c9:bf:69:77:
85:da:3f:86:93:c4:6e:c3:24:f9:e6:d7:db:50:84:8a:1f:23:
b3:95:fb:74:c3:af:7b:9f:dc:d1:39:cc:f6:de:ba:ab:3f:22:
a2:9a:de:4e:4c:8d:c8:ef:b5:a5:a1:c5:e0:45:10:c0:5e:29:
3b:3f:59:7c:a1:3a:e1:e7:7d:ca:13:c9:50:01:68:98:37:2b:
66:84:19:3f:25:98:84:72:12:f4:3a:58:e6:d7:90:13:35:fe:
fa:90:d5:ca:59:0b:01:5d:16:88:a5:c4:f3:8c:9d:0e:f9:dd:
93:e0:ac:0f:81:55:c8:ae:72:f2:30:d3:ca:46:22:fb:8f:53:
df:69:3f:ed:4f:52:5b:ee:41:99:15:b5:ab:59:23:47:77:06:
50:11:14:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 10:29:14 2025 by rpki-client