Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/0/323630343a6361303a3430303a3a2f34302d3430203d3e20343031363832.roa
File: 323630343a6361303a3430303a3a2f34302d3430203d3e20343031363832.roa (raw, json)
Hash identifier: eYPFoCO9UPX0sm/WsALmM8a5aPz2yYgjJ9lQOmgh540=
Subject key identifier: 70:9B:83:C5:06:72:A9:0E:AA:D7:12:55:F7:44:F4:17:C5:0E:52:13
Certificate issuer: /CN=e8741ac4f146728b91fe091c49847f816f209b05ca913ee4ee
Certificate serial: 2A9BBD07F8B37BC6666B7EAE3228C71016C7688E
Authority key identifier: CC:40:B6:E9:0D:C2:C4:75:BC:11:2A:29:36:B7:F1:7E:5A:31:0D:5F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e962717-1138-4d2b-9442-0332e9060132/e8741ac4f146728b91fe091c49847f816f209b05ca913ee4ee.cer
Subject info access: rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/0/323630343a6361303a3430303a3a2f34302d3430203d3e20343031363832.roa
Signing time: Tue 27 May 2025 02:16:56 +0000
ROA not before: Tue 27 May 2025 02:11:56 +0000
ROA not after: Tue 26 May 2026 02:16:56 +0000
asID: 401682
IP address blocks: 2604:ca0:400::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:9b:bd:07:f8:b3:7b:c6:66:6b:7e:ae:32:28:c7:10:16:c7:68:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8741ac4f146728b91fe091c49847f816f209b05ca913ee4ee
Validity
Not Before: May 27 02:11:56 2025 GMT
Not After : May 26 02:16:56 2026 GMT
Subject: CN=709B83C50672A90EAAD71255F744F417C50E5213
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:bb:46:c4:f9:59:96:26:5e:a3:35:f6:c4:8c:
2e:d4:5b:72:c4:fd:1b:cf:cc:3a:32:de:d6:db:7d:
ef:05:66:26:a9:b7:41:ec:14:af:c2:ba:43:85:af:
f8:c8:57:66:6a:1d:01:71:b4:e1:9c:47:d1:12:af:
e1:b2:15:0c:77:a9:0b:de:c4:73:a0:35:cb:77:67:
4f:3c:43:df:6b:77:23:aa:a5:07:1f:90:29:f8:5a:
05:6e:39:ad:e3:e6:7e:74:6a:e2:e8:2a:4d:92:8f:
21:5a:8b:a4:0b:f0:21:3f:56:3f:4d:47:6b:fc:b9:
0b:74:d7:2d:59:a3:89:40:12:49:13:3d:af:63:89:
e6:9f:0a:1d:92:ff:7c:90:4c:35:44:e7:f9:d7:9a:
ca:0b:73:fc:0d:1a:b6:bd:7d:69:d3:f9:bf:57:5a:
b5:8f:9f:15:d9:77:44:6a:22:d5:77:d7:8e:e6:88:
20:ed:0b:cb:69:67:0c:86:a7:c5:70:d1:fc:d8:77:
69:ae:46:88:e5:03:af:98:2f:a0:42:06:b2:0c:1b:
82:c0:38:da:1d:4d:0f:bd:cd:e8:ed:f0:77:02:69:
d8:db:59:8c:73:a2:5c:e0:26:68:3a:c5:19:2b:37:
cb:8b:e4:9d:8b:6f:d5:f8:7b:23:bb:8b:02:81:05:
0b:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:9B:83:C5:06:72:A9:0E:AA:D7:12:55:F7:44:F4:17:C5:0E:52:13
X509v3 Authority Key Identifier:
keyid:CC:40:B6:E9:0D:C2:C4:75:BC:11:2A:29:36:B7:F1:7E:5A:31:0D:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/0/CC40B6E90DC2C475BC112A2936B7F17E5A310D5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e962717-1138-4d2b-9442-0332e9060132/e8741ac4f146728b91fe091c49847f816f209b05ca913ee4ee.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/0/323630343a6361303a3430303a3a2f34302d3430203d3e20343031363832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2604:ca0:400::/40
Signature Algorithm: sha256WithRSAEncryption
b8:36:c0:9d:6e:85:d3:b6:6c:04:c9:da:f7:df:30:55:4f:1f:
08:63:18:12:b0:72:99:87:6e:8b:ab:ef:4f:a9:8e:22:e2:7b:
ee:2f:e6:69:e4:d6:22:f0:a8:5e:3c:d7:c9:c5:ea:1f:14:08:
9d:86:e7:f0:a7:e7:7b:7e:70:99:d4:86:e6:8f:a3:71:6b:91:
a3:c1:4b:4b:d6:5d:7d:63:49:82:0a:e8:17:6d:66:6a:7a:96:
d1:ed:42:28:9b:8d:b5:0b:a8:97:35:f9:4c:f8:e6:c5:d0:ed:
55:4d:79:e2:db:f7:63:b3:15:ea:1c:9d:80:2e:4d:77:c0:1f:
2f:6a:17:5c:6d:46:97:6e:23:02:ef:6a:d7:cf:fa:c1:bc:7f:
65:df:e6:a8:02:1d:7e:d0:fa:bf:79:f6:c3:21:cf:86:03:df:
48:ea:fd:de:05:f8:32:81:07:0a:eb:04:29:4d:e9:a4:5d:98:
21:d6:20:f3:dc:52:96:31:da:1f:e3:c1:11:2a:a7:1d:04:42:
23:27:f3:9a:6e:69:29:e2:ed:f5:ec:54:8c:72:7f:40:ce:29:
fd:15:c4:41:b4:71:cd:ea:66:6f:b0:98:0d:5d:ab:26:9c:d3:
37:79:b2:fc:44:61:ea:d2:73:21:e3:59:47:fa:85:12:60:90:
fa:14:08:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 01:45:26 2025 by rpki-client