Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/0/323630343a6361303a3630303a3a2f34302d3430203d3e20343031363832.roa
File: 323630343a6361303a3630303a3a2f34302d3430203d3e20343031363832.roa (raw, json)
Hash identifier: y5SgKRqUMZWdAuIzNpOm384QFZLr8HtTLpokT5geXYg=
Subject key identifier: A8:4C:DB:B7:4A:76:31:BB:67:74:BD:E6:0A:6D:69:72:5A:F5:D3:A9
Certificate issuer: /CN=e8741ac4f146728b91fe091c49847f816f209b05ca913ee4ee
Certificate serial: 03BEB84CB8F4561BBED035772AB8BB4757891C8C
Authority key identifier: CC:40:B6:E9:0D:C2:C4:75:BC:11:2A:29:36:B7:F1:7E:5A:31:0D:5F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e962717-1138-4d2b-9442-0332e9060132/e8741ac4f146728b91fe091c49847f816f209b05ca913ee4ee.cer
Subject info access: rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/0/323630343a6361303a3630303a3a2f34302d3430203d3e20343031363832.roa
Signing time: Tue 27 May 2025 02:17:01 +0000
ROA not before: Tue 27 May 2025 02:12:01 +0000
ROA not after: Tue 26 May 2026 02:17:01 +0000
asID: 401682
IP address blocks: 2604:ca0:600::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:be:b8:4c:b8:f4:56:1b:be:d0:35:77:2a:b8:bb:47:57:89:1c:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8741ac4f146728b91fe091c49847f816f209b05ca913ee4ee
Validity
Not Before: May 27 02:12:01 2025 GMT
Not After : May 26 02:17:01 2026 GMT
Subject: CN=A84CDBB74A7631BB6774BDE60A6D69725AF5D3A9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:2d:9d:6c:65:b3:c5:3a:4c:59:52:cf:fe:83:
36:80:93:5f:0e:8a:26:bc:5d:97:fb:74:e3:c1:c8:
7d:01:75:1f:82:e8:2f:a8:f0:48:6a:b0:27:9c:1e:
d5:2b:36:da:3e:62:74:49:dc:33:67:e1:fc:7c:e6:
30:06:ac:14:e0:fe:8c:a4:a3:34:92:30:71:a0:cd:
b6:40:10:96:66:2c:e3:bb:94:4a:88:b7:ae:be:9a:
35:ff:7f:e6:92:20:16:b0:10:ed:fb:bd:38:74:61:
29:3b:1f:63:89:c1:b4:20:61:f8:92:d9:b6:b2:03:
16:54:16:a9:2d:7f:a6:b5:48:e5:e3:37:2f:55:93:
4c:a2:17:73:cd:20:94:fc:6c:f3:db:ea:26:2f:4a:
2f:56:e8:e1:fd:ce:f5:04:66:68:a5:b0:5c:64:78:
fb:1c:ca:b0:4e:77:dc:0b:fc:57:96:11:c5:67:a0:
70:00:03:0b:bd:40:ce:36:43:d7:ba:d4:75:fa:48:
24:28:10:d4:03:eb:cc:0f:26:b5:7d:96:c7:bb:e1:
71:7e:fc:41:75:d3:75:c8:46:d8:30:7d:0e:1f:8a:
bf:ef:e1:9b:00:5b:90:15:1d:59:7f:1d:70:eb:43:
48:85:1c:3b:c2:33:97:4c:05:80:28:25:cd:ab:f4:
d7:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:4C:DB:B7:4A:76:31:BB:67:74:BD:E6:0A:6D:69:72:5A:F5:D3:A9
X509v3 Authority Key Identifier:
keyid:CC:40:B6:E9:0D:C2:C4:75:BC:11:2A:29:36:B7:F1:7E:5A:31:0D:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/0/CC40B6E90DC2C475BC112A2936B7F17E5A310D5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e962717-1138-4d2b-9442-0332e9060132/e8741ac4f146728b91fe091c49847f816f209b05ca913ee4ee.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/0/323630343a6361303a3630303a3a2f34302d3430203d3e20343031363832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2604:ca0:600::/40
Signature Algorithm: sha256WithRSAEncryption
1c:e0:ac:03:f2:2e:4b:44:8a:36:cf:20:45:3d:b3:eb:76:05:
f3:f9:3c:32:8d:8c:ba:61:a0:ec:b5:a3:c5:a7:dd:27:ff:15:
34:6d:58:3e:ff:2f:e7:86:f4:e4:ba:39:d0:2b:1f:51:f1:20:
ed:bf:ba:2e:3d:ec:dc:6f:38:78:79:f6:76:11:87:ea:03:1d:
47:21:68:d9:56:8c:55:89:68:08:b9:10:fd:b4:18:94:a2:17:
f3:a8:a4:f0:f7:99:5d:da:56:e3:7e:68:38:82:77:0a:7f:f9:
28:9d:99:c8:aa:83:d2:81:aa:c1:ef:cf:09:44:d7:ea:be:ce:
f8:8e:a9:d1:a5:52:91:b1:36:b9:3f:71:75:7e:76:64:2b:cb:
b4:5d:f5:55:0c:81:88:a2:3e:70:02:bd:02:fc:1c:61:0b:7d:
09:90:3e:ab:ea:9e:16:56:d0:d7:8c:8f:3b:d1:68:68:7f:93:
7f:5b:ec:aa:6f:20:a8:c8:12:af:5e:fd:93:5c:d7:b2:d6:e3:
e4:81:71:39:9a:ca:a1:43:4f:73:24:1d:3d:69:5c:5e:1d:9f:
cb:de:cb:d6:38:de:fc:8c:24:f7:bf:b8:16:af:ae:1c:46:bd:
b2:5c:d0:46:84:7e:fb:89:14:04:d6:ca:f2:60:c8:a9:9d:9f:
1e:37:17:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 01:47:43 2025 by rpki-client