Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/0/323630343a6361303a3330303a3a2f34302d3430203d3e20343031363832.roa
File: 323630343a6361303a3330303a3a2f34302d3430203d3e20343031363832.roa (raw, json)
Hash identifier: wohkZEjbty04c5oBcjWIj42rnzg2rz6AxigKzQWmOuo=
Subject key identifier: B7:AC:19:23:3E:F0:C3:59:0A:12:B1:28:69:12:D6:1D:F2:22:9A:99
Certificate issuer: /CN=e8741ac4f146728b91fe091c49847f816f209b05ca913ee4ee
Certificate serial: 4918799F6158C675CB7559E40B1E074CB5B673B3
Authority key identifier: CC:40:B6:E9:0D:C2:C4:75:BC:11:2A:29:36:B7:F1:7E:5A:31:0D:5F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e962717-1138-4d2b-9442-0332e9060132/e8741ac4f146728b91fe091c49847f816f209b05ca913ee4ee.cer
Subject info access: rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/0/323630343a6361303a3330303a3a2f34302d3430203d3e20343031363832.roa
Signing time: Tue 27 May 2025 02:16:53 +0000
ROA not before: Tue 27 May 2025 02:11:53 +0000
ROA not after: Tue 26 May 2026 02:16:53 +0000
asID: 401682
IP address blocks: 2604:ca0:300::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:18:79:9f:61:58:c6:75:cb:75:59:e4:0b:1e:07:4c:b5:b6:73:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8741ac4f146728b91fe091c49847f816f209b05ca913ee4ee
Validity
Not Before: May 27 02:11:53 2025 GMT
Not After : May 26 02:16:53 2026 GMT
Subject: CN=B7AC19233EF0C3590A12B1286912D61DF2229A99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:c1:e8:69:26:7f:c1:74:a4:be:3b:ec:2a:a7:
00:5b:6d:23:b5:a8:58:b0:7c:48:ee:a5:5b:75:bf:
72:bf:b9:63:77:22:d7:a3:d8:70:66:9e:54:3c:bd:
4e:6b:e4:5a:7f:57:39:03:dc:e9:d1:68:48:00:f1:
76:86:d5:10:e1:40:07:c9:22:f7:a1:ac:96:82:58:
66:b7:5e:44:8b:1d:1d:8a:09:b1:af:59:08:37:63:
ba:03:b1:22:75:49:84:fc:13:1c:41:52:85:31:e9:
72:07:35:57:21:3c:b3:5d:c2:d4:da:47:0a:02:a6:
6c:7e:5c:95:6a:41:e0:dd:5a:ae:32:72:10:7e:4b:
5e:e8:6e:88:11:fb:30:8c:2b:18:06:48:00:5f:91:
94:7b:53:54:d8:b3:dc:f4:e3:e3:31:46:81:35:f3:
87:6d:f9:1c:b4:1f:bd:1d:d4:75:a0:cf:b3:f5:c1:
a1:37:3f:ca:6d:b3:cd:ac:85:62:ae:1c:68:90:9b:
be:0d:ea:8b:1d:87:06:25:67:2d:cc:84:ed:09:d4:
35:f4:1d:9d:48:e4:d1:da:a0:df:3d:a6:c9:79:2f:
c0:4b:7a:3e:eb:89:53:c9:59:ea:55:28:36:ca:e4:
e8:5f:73:57:d7:7d:92:e8:c8:f1:79:90:99:d6:7a:
c6:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:AC:19:23:3E:F0:C3:59:0A:12:B1:28:69:12:D6:1D:F2:22:9A:99
X509v3 Authority Key Identifier:
keyid:CC:40:B6:E9:0D:C2:C4:75:BC:11:2A:29:36:B7:F1:7E:5A:31:0D:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/0/CC40B6E90DC2C475BC112A2936B7F17E5A310D5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e962717-1138-4d2b-9442-0332e9060132/e8741ac4f146728b91fe091c49847f816f209b05ca913ee4ee.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/0/323630343a6361303a3330303a3a2f34302d3430203d3e20343031363832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2604:ca0:300::/40
Signature Algorithm: sha256WithRSAEncryption
66:65:95:6c:c0:70:a0:99:31:ad:69:1b:d7:a7:66:b9:da:5b:
cd:0f:9a:a5:ab:f4:56:34:ea:11:f7:0b:8b:9f:1e:6b:f4:37:
e9:01:45:e3:d8:f3:53:6b:95:7e:b2:90:7c:4b:83:a1:29:56:
63:04:84:c5:31:47:ea:0a:5b:91:a2:36:e4:c0:cc:6d:6a:9a:
da:7a:71:73:ad:df:1e:d6:f7:6e:36:19:28:99:42:a6:da:23:
a6:18:7c:5f:a5:5e:87:23:5d:45:93:d3:e6:dc:2c:73:8d:91:
6b:b1:46:8a:08:68:a3:92:58:fc:50:eb:cf:a1:b1:57:60:ec:
10:af:2e:9f:c7:13:c5:a3:0e:21:a3:67:8c:4d:f7:0a:81:32:
44:fa:dc:2a:3e:74:c3:9e:02:66:a5:af:33:a5:d6:1c:13:d4:
12:69:1b:f2:46:b7:78:81:36:d7:4b:38:9f:1b:9d:13:cc:1d:
5d:cc:9b:ab:49:d3:f9:f2:a9:1f:47:0b:2a:85:d1:9d:6b:69:
91:d1:b1:eb:66:14:74:8b:ec:ca:a9:b0:ec:82:6f:58:c5:fa:
dc:49:34:61:2f:86:b4:d7:c7:0c:77:12:20:fe:e5:57:56:91:
8c:c3:3f:5d:b1:95:a4:29:36:9c:d8:19:11:38:9e:94:b3:78:
8a:32:97:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 01:45:41 2025 by rpki-client