Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/86f5cd8a-f903-4176-97a7-6671e49b1c9b/ccf70fcc-40cd-354b-95d0-5ff80f9e5f28.roa
File: ccf70fcc-40cd-354b-95d0-5ff80f9e5f28.roa (raw, json)
Hash identifier: xiKm2KYjL6Iix8Mh7KP6GAndOesoJKtZ2c6lK+da+FQ=
Subject key identifier: A9:81:B7:10:8D:91:DE:7F:18:FD:A1:57:63:87:EA:95:76:82:E2:AE
Certificate issuer: /CN=86f5cd8a-f903-4176-97a7-6671e49b1c9b
Certificate serial: 010D0C9F43285849300C76E943B6B8B93E56CCC0
Authority key identifier: 6A:34:CB:D9:75:F2:4B:CA:DB:EF:DD:49:40:52:7B:83:C9:CA:E5:41
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/86f5cd8a-f903-4176-97a7-6671e49b1c9b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/86f5cd8a-f903-4176-97a7-6671e49b1c9b/ccf70fcc-40cd-354b-95d0-5ff80f9e5f28.roa
Signing time: Fri 14 Mar 2025 17:57:44 +0000
ROA not before: Fri 14 Mar 2025 17:57:44 +0000
ROA not after: Thu 12 Jun 2025 17:57:44 +0000
asID: 398951
IP address blocks: 2602:f978::/36 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:30:0c:76:e9:43:b6:b8:b9:3e:56:cc:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86f5cd8a-f903-4176-97a7-6671e49b1c9b
Validity
Not Before: Mar 14 17:57:44 2025 GMT
Not After : Jun 12 17:57:44 2025 GMT
Subject: CN=ee97fc20-9bec-4bce-8529-e54b734176a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:27:7d:41:db:4a:e4:b6:d7:70:f4:25:42:ff:
51:d7:f9:14:72:b6:bc:eb:50:1f:83:11:cf:8e:6b:
c0:3d:da:4b:4a:42:78:89:37:6c:b4:44:20:b7:e2:
2a:d0:75:75:ff:1e:4a:07:e2:dc:ed:8c:b1:87:5c:
e4:7c:ad:38:d9:d4:2a:c8:fe:51:63:99:18:7b:09:
9a:da:03:f8:c7:15:ce:a1:07:a2:58:35:1e:d7:53:
d9:ba:ab:12:b1:fb:11:50:05:83:40:a4:b0:b5:91:
1f:ca:0b:2b:f5:e1:57:58:2d:b8:91:ba:24:67:35:
64:e8:d6:01:a9:77:68:95:e3:16:44:6a:be:58:2a:
2b:d4:c7:c8:b9:d9:9b:2d:27:86:28:1c:ba:02:9d:
24:09:8c:1a:d4:86:53:ea:3e:91:e5:11:b4:67:f1:
18:3f:af:fd:16:76:5f:4c:0a:5b:92:d1:9e:75:31:
14:a1:9f:ae:6b:28:eb:3c:36:32:a0:81:be:c6:d1:
f5:f6:d0:d5:d1:57:04:3a:1a:7d:dc:59:d8:f7:c4:
a5:4a:74:d1:d9:85:fb:99:ad:37:5c:cc:21:05:6a:
38:4e:bb:27:21:ba:48:5e:19:53:f6:c7:ec:00:1d:
25:c8:03:3b:aa:1b:1f:bf:d3:3a:64:97:03:42:79:
e0:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:81:B7:10:8D:91:DE:7F:18:FD:A1:57:63:87:EA:95:76:82:E2:AE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/86f5cd8a-f903-4176-97a7-6671e49b1c9b/ccf70fcc-40cd-354b-95d0-5ff80f9e5f28.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/86f5cd8a-f903-4176-97a7-6671e49b1c9b/86f5cd8a-f903-4176-97a7-6671e49b1c9b.crl
X509v3 Authority Key Identifier:
keyid:6A:34:CB:D9:75:F2:4B:CA:DB:EF:DD:49:40:52:7B:83:C9:CA:E5:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/86f5cd8a-f903-4176-97a7-6671e49b1c9b.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:f978::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
11:47:d9:92:fa:7a:f1:d7:cd:88:ba:d3:8b:b1:b5:57:1b:a6:
15:a2:1d:7d:4e:dc:c9:87:da:bc:72:2e:ba:ed:7b:72:a2:c8:
02:3f:0d:e1:3d:c0:5f:56:8d:11:54:ec:0c:c3:f9:cb:0a:38:
71:4e:a1:8d:04:56:35:95:aa:8f:08:31:fd:27:17:b6:67:f1:
3e:83:60:78:a1:43:b6:b9:a9:ab:c7:3d:17:20:ee:ff:8b:bb:
f7:ae:8f:57:93:00:31:c2:08:7a:5a:91:87:1f:c6:2d:e2:2a:
6d:1b:f6:26:ed:e2:f0:ca:df:6f:01:31:d4:e9:41:1d:50:45:
7e:b1:2c:06:74:89:59:1f:55:54:cc:15:8e:1f:2c:4c:a0:45:
9d:58:59:f9:64:22:c3:a2:f5:e5:b9:15:e7:33:e4:54:c1:56:
cd:be:74:f3:c5:03:26:fd:72:36:67:7a:ae:f0:ad:9d:54:53:
ee:d7:80:ac:17:80:1b:e3:20:11:f0:db:f4:aa:13:91:1b:d6:
86:55:d8:98:62:0a:4e:83:6e:d7:39:86:9f:98:f9:1c:c8:57:
5a:a2:22:24:9a:fc:85:3c:36:2e:e0:18:29:bc:70:0a:d0:6f:
c7:e4:fa:53:4a:13:be:6f:10:e6:d1:05:6e:94:18:19:c1:14:
bb:28:b0:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:48:01 2025 by rpki-client