Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/e4750b52-6cee-3950-85f4-7dda0c1fbe26.roa
File: e4750b52-6cee-3950-85f4-7dda0c1fbe26.roa (raw, json)
Hash identifier: 5/0lqx+suMifEL0HL0CDEx7al9fywCfXXi6nasVFb3o=
Subject key identifier: 3C:B7:E7:75:F1:93:40:E2:E3:77:66:72:3B:29:EA:08:5C:85:4F:FA
Certificate issuer: /CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
Certificate serial: 010D0C9F432858480EA518B769675BFE40286E00
Authority key identifier: AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/e4750b52-6cee-3950-85f4-7dda0c1fbe26.roa
Signing time: Sun 01 Dec 2024 02:00:39 +0000
ROA not before: Sun 01 Dec 2024 02:00:39 +0000
ROA not after: Sat 01 Mar 2025 02:00:39 +0000
asID: 20253
IP address blocks: 2606:bc40:25::/48 maxlen: 48
2606:bc40:f009::/48 maxlen: 48
2606:bc40:f00a::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:0e:a5:18:b7:69:67:5b:fe:40:28:6e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
Validity
Not Before: Dec 1 02:00:39 2024 GMT
Not After : Mar 1 02:00:39 2025 GMT
Subject: CN=fc8b8046-ca5f-4dc3-b39b-ba4bb3eec2b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:3e:68:d4:ff:e2:c6:19:5e:4d:d0:9c:bb:49:
47:bb:48:79:06:38:2e:f0:c0:bd:a9:01:c6:66:29:
30:e3:65:5c:e9:99:40:0f:f4:e9:5d:27:06:36:5a:
93:35:f5:08:ef:33:20:1d:07:23:f3:00:70:95:22:
b1:27:0b:dc:7e:36:21:33:d9:47:5b:cd:73:20:45:
6c:2d:24:8a:fd:e6:b8:d3:47:4a:ca:16:30:07:4b:
23:1f:65:9f:ea:62:64:7d:70:12:7f:61:1a:09:41:
f9:9a:c9:ce:65:25:fb:81:f1:b1:e0:ba:1b:75:29:
fc:75:8d:ca:b0:3c:7f:26:be:0e:78:69:bf:91:0c:
a6:19:5a:e0:d2:9f:43:90:c5:1c:49:68:e2:50:04:
b1:8a:e9:a8:37:f4:10:84:ee:7a:c6:6c:91:5b:46:
2c:9e:1b:e4:30:3d:4c:fb:b3:c3:ae:04:09:65:ed:
48:4b:f6:8d:39:12:ee:a2:79:48:7a:a5:23:c2:45:
08:44:c8:26:71:c2:da:9a:72:bf:d3:ce:55:a9:b1:
ab:08:8c:b1:fb:0b:f3:62:f5:c7:e4:13:4a:05:54:
a2:d3:bb:33:b1:26:b2:ab:f8:69:db:c8:8a:76:04:
bd:28:d0:95:a2:a0:55:71:b5:f1:3e:b6:a4:8b:80:
5e:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:B7:E7:75:F1:93:40:E2:E3:77:66:72:3B:29:EA:08:5C:85:4F:FA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/e4750b52-6cee-3950-85f4-7dda0c1fbe26.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl
X509v3 Authority Key Identifier:
keyid:AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
sbgp-ipAddrBlock: critical
IPv6:
2606:bc40:25::/48
2606:bc40:f009::-2606:bc40:f00a:ffff:ffff:ffff:ffff:ffff
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
44:3b:53:d4:6a:d9:ad:b1:46:4a:9f:09:8e:28:16:52:b2:d9:
69:c2:c3:57:a9:3a:76:57:53:63:1e:81:63:7c:c9:cf:f2:59:
21:53:b8:70:73:de:74:e9:84:cd:6b:a0:3f:29:13:3c:6b:5d:
55:64:90:a0:c2:04:70:3c:4a:14:46:20:d4:aa:0e:0e:24:76:
92:fb:e1:10:d2:c2:e6:87:89:f8:8b:07:af:f1:22:0e:9c:64:
a7:fc:81:72:26:da:82:53:fa:7d:22:59:01:7c:34:12:c3:15:
cb:2f:e7:1d:21:e0:30:5c:04:71:a9:2d:34:48:cf:c5:1d:43:
9d:f3:1b:1d:de:64:2d:6c:82:4a:5c:59:6e:76:1c:17:bf:2b:
2a:f5:f8:dc:81:61:51:a1:86:f1:59:91:79:69:b3:fd:7a:15:
45:0d:9e:e9:e4:4c:d4:4d:52:90:c9:16:32:5d:d3:3c:24:64:
a9:93:fc:61:6a:bc:56:51:1a:3a:ff:fe:70:c7:d5:b0:36:2e:
e3:f8:92:87:3f:1a:3f:2a:bf:3b:cf:ec:92:2d:44:e7:f4:5f:
71:d9:02:57:6c:10:e0:99:da:12:5a:fa:f2:65:72:cf:dd:f4:
9e:0f:93:cf:e6:7f:c6:3b:f1:7f:e8:69:6c:81:a0:ca:1a:9b:
8d:a2:f6:5d
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Apr 27 09:26:22 2025 by rpki-client