Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/3d60f64f-d714-3b72-9146-0dd0f62e3cb1.roa
File: 3d60f64f-d714-3b72-9146-0dd0f62e3cb1.roa (raw, json)
Hash identifier: KGO03o/Uo7YH1ZZwasxzTnyH2bO6mw+eKlBZK3yGIV4=
Subject key identifier: DC:6A:51:A5:A9:DC:64:7E:41:33:FF:E3:55:15:7D:67:B4:66:FB:BA
Certificate issuer: /CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
Certificate serial: 010D0C9F43285848C580F7A01BB859C84E33EBA0
Authority key identifier: B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/3d60f64f-d714-3b72-9146-0dd0f62e3cb1.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 2734
IP address blocks: 2604:3fc0:2000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:80:f7:a0:1b:b8:59:c8:4e:33:eb:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=05a04f4f-b0d4-4e85-ace9-3ca995990fd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:fb:7c:0c:7f:af:57:f1:c9:4b:5d:e1:10:0b:
f0:71:47:d0:c9:71:13:b6:d4:7d:e7:5e:b9:df:f1:
aa:f7:d5:a4:b4:46:5a:59:01:db:df:5a:0b:e4:67:
95:2d:49:41:b1:0a:16:e1:5f:16:47:e1:51:2f:92:
e7:2d:68:05:55:56:ad:7e:7e:20:ea:b6:94:c5:82:
5a:f8:4c:12:d6:10:3e:e1:1c:8c:50:fa:df:5a:b3:
e3:17:76:25:90:27:36:87:3f:00:c2:54:f8:03:f0:
7b:89:de:b7:67:ae:21:39:39:8f:45:61:e7:64:a6:
48:b0:62:ce:25:0f:fd:a0:c6:2b:c9:b2:6f:6b:c9:
8d:0e:47:52:f7:77:f3:2c:d4:92:92:b0:61:ec:10:
a4:8c:d7:f0:23:ff:cb:94:49:83:c7:b8:86:70:68:
4e:a4:bd:ff:20:05:51:59:01:b2:d5:06:98:63:e4:
e0:53:f9:c8:a3:f4:89:ba:52:65:30:9f:67:8e:6d:
35:6a:e4:70:5c:66:bf:d9:42:06:be:fc:80:6a:b6:
5b:f1:69:ce:4e:c9:0a:28:a4:49:a6:5b:35:ac:01:
36:9c:c9:3b:3e:bf:68:dd:94:59:48:d5:de:d4:57:
6d:4d:1a:2e:67:3c:dc:ae:e3:00:2e:d1:4a:1f:fb:
6e:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:6A:51:A5:A9:DC:64:7E:41:33:FF:E3:55:15:7D:67:B4:66:FB:BA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/3d60f64f-d714-3b72-9146-0dd0f62e3cb1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl
X509v3 Authority Key Identifier:
keyid:B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:3fc0:2000::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
02:62:87:f8:87:58:3c:ec:57:86:44:d2:33:02:68:62:22:5a:
60:52:f2:2e:04:0a:60:c0:fe:52:0e:98:4b:eb:23:2b:ab:9b:
6d:84:12:b4:d4:ab:7e:00:6c:3e:c2:77:d5:77:66:f9:44:18:
ff:d8:a3:41:9d:1b:90:97:61:57:ec:da:a2:8d:c2:3f:1a:84:
96:1f:c0:36:df:ea:e8:9d:3a:69:e3:21:38:ff:f1:a0:6f:8f:
59:e1:cc:2f:fc:62:e8:b1:24:27:cf:57:84:39:2f:93:2b:06:
ea:26:c7:28:c6:ff:72:f9:ca:45:c8:46:7c:2b:ab:37:b5:29:
fc:31:37:8b:e7:69:26:da:74:bc:69:16:99:e6:66:63:9f:3f:
b3:b3:2d:a8:38:b4:2c:dd:94:84:25:bd:4f:77:3e:bc:16:2d:
37:71:66:cd:61:b4:f5:f0:78:ef:af:94:f4:65:d8:03:d2:4b:
fd:0d:0e:9c:30:6b:c9:f9:07:6f:45:88:1e:a4:68:f9:fb:a9:
67:1c:a0:c9:ba:5c:98:af:21:6b:d1:26:06:03:8e:a8:41:36:
4d:c1:f2:bf:a3:01:f6:a0:13:00:bb:ef:b8:b4:b1:ea:fc:2e:
e8:0d:70:84:82:45:70:4d:2c:26:80:9c:f9:4f:45:d4:ea:7a:
44:06:77:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 14:03:59 2025 by rpki-client