Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/e4750b52-6cee-3950-85f4-7dda0c1fbe26.roa
File: e4750b52-6cee-3950-85f4-7dda0c1fbe26.roa (raw, json)
Hash identifier: d2tfZdzpAyCb3UaC/HoIR/DmyPU8vpKZA0836i4Nzgo=
Subject key identifier: 46:A4:F6:DB:37:84:26:05:77:6B:5D:3C:28:9A:A4:66:C0:F3:56:66
Certificate issuer: /CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
Certificate serial: 010D0C9F43285848EF6145DBB5A2979889DCD0C0
Authority key identifier: AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/e4750b52-6cee-3950-85f4-7dda0c1fbe26.roa
Signing time: Wed 19 Feb 2025 14:00:52 +0000
ROA not before: Wed 19 Feb 2025 14:00:52 +0000
ROA not after: Tue 20 May 2025 13:00:52 +0000
asID: 20253
IP address blocks: 2606:bc40:25::/48 maxlen: 48
2606:bc40:f009::/48 maxlen: 48
2606:bc40:f00a::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ef:61:45:db:b5:a2:97:98:89:dc:d0:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
Validity
Not Before: Feb 19 14:00:52 2025 GMT
Not After : May 20 13:00:52 2025 GMT
Subject: CN=6d74ef3c-3b66-4a1a-a712-6d4d53d7f89b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b5:0a:3f:a4:2c:92:f4:d3:40:df:19:84:4e:
a9:ff:31:2e:0b:08:8b:33:49:f9:36:0a:40:ae:54:
77:f6:3c:4e:71:6d:41:54:8f:10:4a:8f:8a:0c:42:
a8:dc:f8:a6:7a:f7:b0:e9:22:39:cf:a9:7b:ac:a8:
a4:e9:54:1a:6b:ae:1d:14:23:bd:c8:8a:32:8e:64:
fa:35:49:ba:f1:ec:ea:fa:7e:d8:72:02:f9:8e:7b:
70:06:5d:28:80:4d:81:a7:b4:90:7d:bf:53:af:63:
43:e3:2a:18:fe:f9:68:f4:ef:5c:3c:85:a6:97:12:
32:5b:6c:a8:ab:d3:11:09:ac:fb:d0:6f:9e:34:12:
c7:21:27:ae:e9:49:50:09:38:45:fe:c6:18:e4:05:
8c:1c:24:f7:4d:44:c7:4c:e5:4b:2d:ca:98:16:93:
25:a2:a9:87:71:10:ab:ba:bd:c2:c0:6a:cc:40:57:
07:e7:d9:a8:47:c3:29:12:ca:07:95:5a:9e:cc:9d:
12:5d:6f:e6:29:1e:9d:9b:8c:d4:a3:8f:0c:a3:1e:
23:b4:80:fc:4b:a1:2b:b3:d7:00:9f:82:50:04:29:
01:13:61:a2:86:36:57:09:d9:b9:c2:d1:a2:4b:33:
47:93:10:62:d3:bf:d9:c3:fd:e4:17:f1:f0:87:c6:
c9:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:A4:F6:DB:37:84:26:05:77:6B:5D:3C:28:9A:A4:66:C0:F3:56:66
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/e4750b52-6cee-3950-85f4-7dda0c1fbe26.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl
X509v3 Authority Key Identifier:
keyid:AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
sbgp-ipAddrBlock: critical
IPv6:
2606:bc40:25::/48
2606:bc40:f009::-2606:bc40:f00a:ffff:ffff:ffff:ffff:ffff
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
74:5e:13:00:29:d1:73:bf:57:dd:a9:b8:ed:ba:39:7f:54:de:
17:0f:16:bb:a1:f6:0f:92:36:f4:3e:fd:e2:6e:bd:11:cb:0c:
e6:09:a8:b6:d7:1d:55:39:5d:38:e6:9d:15:2f:da:d4:9e:89:
b6:0a:24:b5:c3:79:af:a5:28:b0:e0:44:8f:a3:84:07:e7:cc:
53:fb:0f:13:1d:e9:97:3e:0b:87:5e:a7:e8:2e:0d:8a:63:76:
d7:c1:d6:cb:f4:71:3a:c6:7c:98:76:d4:0c:88:5c:d3:bb:4f:
73:e5:d1:0d:59:34:ad:0c:b8:24:ba:16:a4:80:76:8b:49:d1:
e0:50:ca:15:3a:31:e1:df:91:de:4b:e6:b1:9b:38:09:c2:f7:
1c:45:0c:75:93:09:61:38:1d:8a:b7:50:1a:12:dd:30:1a:a9:
ad:0b:8a:bf:75:aa:08:81:b3:9c:1f:93:4d:f4:0a:8c:12:da:
24:26:89:db:73:ea:e2:40:fa:c5:91:1b:fc:1a:b2:d4:80:2b:
66:5c:99:19:d7:2a:35:ab:b5:7f:6c:54:23:b9:ff:e0:17:3b:
1f:31:16:c0:02:54:bb:49:6d:09:6c:eb:49:50:ed:ce:9a:c9:
90:a3:27:f1:7f:ae:18:26:fc:c3:f5:ea:8e:36:24:07:a9:cb:
77:22:1d:88
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Apr 7 10:32:51 2025 by rpki-client