Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/0/323630343a6361303a3530303a3a2f34302d3430203d3e20343031363832.roa
File: 323630343a6361303a3530303a3a2f34302d3430203d3e20343031363832.roa (raw, json)
Hash identifier: XUfBTFYhsd5rZOzcwAXtKPsd+QvhQ8gQaB15OQfc77U=
Subject key identifier: 77:CF:18:81:7A:15:C4:81:1E:C3:0E:70:4E:DF:07:E9:28:BE:94:6D
Certificate issuer: /CN=e8741ac4f146728b91fe091c49847f816f209b05ca913ee4ee
Certificate serial: 217490E44FD7BF4D208178329EDC224E67704DF8
Authority key identifier: CC:40:B6:E9:0D:C2:C4:75:BC:11:2A:29:36:B7:F1:7E:5A:31:0D:5F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e962717-1138-4d2b-9442-0332e9060132/e8741ac4f146728b91fe091c49847f816f209b05ca913ee4ee.cer
Subject info access: rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/0/323630343a6361303a3530303a3a2f34302d3430203d3e20343031363832.roa
Signing time: Tue 27 May 2025 02:16:58 +0000
ROA not before: Tue 27 May 2025 02:11:58 +0000
ROA not after: Tue 26 May 2026 02:16:58 +0000
asID: 401682
IP address blocks: 2604:ca0:500::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:74:90:e4:4f:d7:bf:4d:20:81:78:32:9e:dc:22:4e:67:70:4d:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8741ac4f146728b91fe091c49847f816f209b05ca913ee4ee
Validity
Not Before: May 27 02:11:58 2025 GMT
Not After : May 26 02:16:58 2026 GMT
Subject: CN=77CF18817A15C4811EC30E704EDF07E928BE946D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:a2:bb:18:87:4f:b9:c9:1b:3b:43:ae:f9:78:
6e:31:1c:aa:55:4d:1a:03:87:d2:dd:a4:a1:78:95:
f7:f4:8a:0d:06:5d:a1:a2:30:ca:5f:ab:3e:32:af:
7e:df:d9:c5:d3:13:f9:77:83:b8:00:8e:e5:66:70:
20:79:7e:0d:b2:27:16:80:c5:08:74:90:e6:b8:49:
47:7d:c2:96:97:e1:77:7d:26:d0:29:dd:e4:2c:ca:
10:01:f3:5b:5d:39:ef:70:ea:97:3d:ae:27:41:91:
c8:43:8c:fe:78:ec:7f:d3:a4:32:bc:27:3f:58:65:
c4:bd:31:66:dd:be:a9:6e:58:31:91:0b:5a:85:3c:
56:34:aa:ff:4c:42:65:4d:ed:09:6d:f4:b0:50:c8:
63:cf:26:a2:74:03:1e:17:04:a9:bd:d9:1d:dc:f3:
23:e7:12:69:f1:4c:80:a6:98:83:61:59:84:9c:95:
77:fb:dd:09:03:1e:db:c1:99:a9:58:c7:ad:bd:5d:
b7:f9:62:28:fd:a0:77:47:bf:4c:8b:4c:7f:fa:80:
36:d6:76:36:fa:94:7e:63:3e:35:7a:1c:59:fb:e3:
1c:9c:ed:73:61:c3:b2:be:27:40:ee:9c:0f:d7:f9:
21:98:90:9c:81:fa:dc:56:1e:62:31:a8:e8:a0:90:
af:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:CF:18:81:7A:15:C4:81:1E:C3:0E:70:4E:DF:07:E9:28:BE:94:6D
X509v3 Authority Key Identifier:
keyid:CC:40:B6:E9:0D:C2:C4:75:BC:11:2A:29:36:B7:F1:7E:5A:31:0D:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/0/CC40B6E90DC2C475BC112A2936B7F17E5A310D5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e962717-1138-4d2b-9442-0332e9060132/e8741ac4f146728b91fe091c49847f816f209b05ca913ee4ee.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/0/323630343a6361303a3530303a3a2f34302d3430203d3e20343031363832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2604:ca0:500::/40
Signature Algorithm: sha256WithRSAEncryption
5c:d0:3d:ba:d7:73:2e:3e:50:67:f5:65:c7:40:ea:d0:3e:9e:
d3:9a:35:9b:76:81:2a:4b:e9:2e:95:86:29:0c:6a:7a:42:18:
45:70:d1:47:ae:a3:8e:9d:f3:d0:82:be:ae:39:c4:18:be:aa:
c6:5e:5e:c4:79:6b:ac:cb:86:80:66:25:38:77:5e:51:54:78:
68:72:cc:73:0b:d3:36:c9:b8:82:7e:83:00:14:21:a1:1f:20:
98:ef:0b:ec:e2:9c:a9:b6:54:37:81:30:a7:ca:72:39:53:02:
a8:ac:b1:3f:91:74:83:b1:0b:cb:16:90:8c:c7:76:06:8d:66:
09:8a:62:7d:b0:d2:0d:79:e5:37:67:c9:f3:4d:a6:ff:e1:f8:
56:8a:86:57:c5:00:4d:ca:71:fd:b8:11:cb:93:8a:fa:59:be:
61:4e:ae:94:97:e6:93:d6:c3:80:2c:f1:ae:ee:0d:2a:d2:0e:
83:94:6a:f2:41:c8:04:12:bf:65:c0:c3:df:03:65:ae:3e:10:
f1:be:cd:c8:c7:19:90:87:13:4b:99:60:d4:5e:b7:ea:24:a6:
39:5a:81:98:31:1c:7d:e2:97:25:92:a6:e8:d1:cf:a8:db:9c:
e3:88:bb:65:92:b5:1f:09:00:82:ce:c0:aa:89:da:30:5d:bb:
ca:01:0c:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 01:48:29 2025 by rpki-client