Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/0/323630343a6361303a3230303a3a2f34302d3430203d3e20343031363832.roa
File: 323630343a6361303a3230303a3a2f34302d3430203d3e20343031363832.roa (raw, json)
Hash identifier: DoIw0QpfhoREd6BwXz0VtNyZ1GAVmXGhOTgWv25ebVI=
Subject key identifier: 8B:2E:3C:12:F1:9F:79:13:84:14:EF:56:64:59:A9:A1:DC:F8:C6:63
Certificate issuer: /CN=e8741ac4f146728b91fe091c49847f816f209b05ca913ee4ee
Certificate serial: 383D39652DC332F710BE38029221F7879DF49DDD
Authority key identifier: CC:40:B6:E9:0D:C2:C4:75:BC:11:2A:29:36:B7:F1:7E:5A:31:0D:5F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e962717-1138-4d2b-9442-0332e9060132/e8741ac4f146728b91fe091c49847f816f209b05ca913ee4ee.cer
Subject info access: rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/0/323630343a6361303a3230303a3a2f34302d3430203d3e20343031363832.roa
Signing time: Tue 27 May 2025 02:16:50 +0000
ROA not before: Tue 27 May 2025 02:11:50 +0000
ROA not after: Tue 26 May 2026 02:16:50 +0000
asID: 401682
IP address blocks: 2604:ca0:200::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:3d:39:65:2d:c3:32:f7:10:be:38:02:92:21:f7:87:9d:f4:9d:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8741ac4f146728b91fe091c49847f816f209b05ca913ee4ee
Validity
Not Before: May 27 02:11:50 2025 GMT
Not After : May 26 02:16:50 2026 GMT
Subject: CN=8B2E3C12F19F79138414EF566459A9A1DCF8C663
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e3:e2:7b:1b:bd:fa:1c:4f:de:3f:5c:bc:79:
1a:7b:65:9f:85:d7:9f:4d:b0:2c:93:3f:f5:0b:56:
2f:4c:2e:1a:83:95:f7:9a:1b:20:5a:94:17:c7:be:
76:1a:c1:d0:aa:6c:26:d0:c5:ba:ff:87:3b:9a:42:
08:7b:ad:77:b6:8d:d5:dd:e2:ee:89:8d:90:1f:7e:
f8:e6:23:e6:b8:60:33:9d:38:ee:ef:40:ad:c2:7a:
8e:5a:58:0f:66:91:0c:6f:91:c3:df:b3:21:1b:0d:
70:36:6a:d7:69:6c:30:14:fd:6b:ea:75:f0:61:1b:
58:6b:3a:2a:4b:01:65:fa:1f:6d:5f:ca:52:69:95:
ae:c5:ad:53:6f:be:1f:45:ac:e3:39:1e:93:49:39:
06:05:36:21:d3:33:cc:5b:28:e0:30:3f:34:db:78:
8e:17:16:fb:53:4c:3a:16:c4:45:71:47:9b:2f:d8:
1b:70:4c:2b:3b:57:dd:63:28:c6:dd:6d:65:eb:c3:
45:7d:8c:52:43:ed:e0:a3:58:a4:d9:b2:08:09:39:
39:ad:79:32:b8:d1:d3:be:97:52:4f:4a:74:24:6e:
d3:46:f7:bd:69:00:c5:76:66:2f:f2:64:0f:57:b6:
4b:42:dd:e3:a5:db:83:ec:d3:a4:c5:14:5e:2f:03:
1d:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:2E:3C:12:F1:9F:79:13:84:14:EF:56:64:59:A9:A1:DC:F8:C6:63
X509v3 Authority Key Identifier:
keyid:CC:40:B6:E9:0D:C2:C4:75:BC:11:2A:29:36:B7:F1:7E:5A:31:0D:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/0/CC40B6E90DC2C475BC112A2936B7F17E5A310D5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e962717-1138-4d2b-9442-0332e9060132/e8741ac4f146728b91fe091c49847f816f209b05ca913ee4ee.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/0/323630343a6361303a3230303a3a2f34302d3430203d3e20343031363832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2604:ca0:200::/40
Signature Algorithm: sha256WithRSAEncryption
3a:9f:91:97:54:2e:b0:db:c4:b7:62:21:fd:0c:14:bc:4c:14:
6e:ee:01:51:33:7f:09:ee:be:67:94:df:fe:06:56:b1:03:5e:
30:8d:ab:5c:b7:47:b2:2e:db:1c:f1:07:f8:a2:ef:16:4c:ce:
48:7e:06:0e:7a:64:61:99:68:1a:74:8f:5f:84:63:0d:72:03:
ce:e4:1a:39:2f:2d:1c:a5:bb:b1:2e:70:85:46:35:e0:3b:3c:
07:46:2f:4b:fb:99:2e:cd:30:56:bf:e3:c0:06:a4:02:50:c0:
2c:cf:a7:f7:ce:2e:f5:67:76:c4:5e:a4:48:c9:1b:f0:c5:96:
4f:65:03:f0:c5:7d:fc:c4:22:5e:fa:71:c6:66:a8:23:02:d1:
b5:4d:30:f2:20:ff:22:5b:e0:db:02:6f:da:59:98:9a:42:af:
91:d1:e8:3a:91:f1:8f:f1:d9:12:07:9b:4e:46:aa:37:a5:42:
a5:7d:ee:67:88:83:84:96:5f:9b:cd:4c:ba:cd:b3:95:3e:1a:
25:cf:e6:cc:e2:e7:5f:af:05:b7:96:7a:ee:30:6f:7b:d3:cb:
0b:36:52:fb:e7:4a:1e:59:18:8b:7f:b2:c8:ed:e6:7f:ba:1c:
dd:35:ad:0a:8a:8b:18:24:e0:fe:f1:21:7a:1c:2c:09:b0:c8:
e9:ec:c0:28
-----BEGIN CERTIFICATE-----
MIIFujCCBKKgAwIBAgIUOD05ZS3DMvcQvjgCkiH3h530nd0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZTg3NDFhYzRmMTQ2NzI4YjkxZmUwOTFjNDk4NDdmODE2
ZjIwOWIwNWNhOTEzZWU0ZWUwHhcNMjUwNTI3MDIxMTUwWhcNMjYwNTI2MDIxNjUw
WjAzMTEwLwYDVQQDEyg4QjJFM0MxMkYxOUY3OTEzODQxNEVGNTY2NDU5QTlBMURD
RjhDNjYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+Piexu9+hxP
3j9cvHkae2WfhdefTbAskz/1C1YvTC4ag5X3mhsgWpQXx752GsHQqmwm0MW6/4c7
mkIIe613to3V3eLuiY2QH3745iPmuGAznTju70CtwnqOWlgPZpEMb5HD37MhGw1w
NmrXaWwwFP1r6nXwYRtYazoqSwFl+h9tX8pSaZWuxa1Tb74fRazjOR6TSTkGBTYh
0zPMWyjgMD8023iOFxb7U0w6FsRFcUebL9gbcEwrO1fdYyjG3W1l68NFfYxSQ+3g
o1ik2bIICTk5rXkyuNHTvpdST0p0JG7TRve9aQDFdmYv8mQPV7ZLQt3jpduD7NOk
xRReLwMdxwIDAQABo4ICujCCArYwHQYDVR0OBBYEFIsuPBLxn3kThBTvVmRZqaHc
+MZjMB8GA1UdIwQYMBaAFMxAtukNwsR1vBEqKTa38X5aMQ1fMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5L2M1ZGE0MTNlNDQzODRkN2I4N2UwYTc0YjQyY2ExODY3LzAv
Q0M0MEI2RTkwREMyQzQ3NUJDMTEyQTI5MzZCN0YxN0U1QTMxMEQ1Ri5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFh
NTQ4N2MzLzRlOTYyNzE3LTExMzgtNGQyYi05NDQyLTAzMzJlOTA2MDEzMi9lODc0
MWFjNGYxNDY3MjhiOTFmZTA5MWM0OTg0N2Y4MTZmMjA5YjA1Y2E5MTNlZTRlZS5j
ZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS9jNWRhNDEzZTQ0Mzg0ZDdiODdlMGE3
NGI0MmNhMTg2Ny8wLzMyMzYzMDM0M2E2MzYxMzAzYTMyMzAzMDNhM2EyZjM0MzAy
ZDM0MzAyMDNkM2UyMDM0MzAzMTM2MzgzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACYEDKACMA0GCSqG
SIb3DQEBCwUAA4IBAQA6n5GXVC6w28S3YiH9DBS8TBRu7gFRM38J7r5nlN/+Blax
A14wjatct0eyLtsc8Qf4ou8WTM5IfgYOemRhmWgadI9fhGMNcgPO5Bo5Ly0cpbux
LnCFRjXgOzwHRi9L+5kuzTBWv+PABqQCUMAsz6f3zi71Z3bEXqRIyRvwxZZPZQPw
xX38xCJe+nHGZqgjAtG1TTDyIP8iW+DbAm/aWZiaQq+R0eg6kfGP8dkSB5tORqo3
pUKlfe5niIOEll+bzUy6zbOVPholz+bM4udfrwW3lnruMG9708sLNlL750oeWRiL
f7LI7eZ/uhzdNa0KiosYJOD+8SF6HCwJsMjp7MAo
-----END CERTIFICATE-----
Generated at Sun Jun 8 01:55:11 2025 by rpki-client