Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/0/323630343a6361303a3730303a3a2f34302d3430203d3e20343031363832.roa
File: 323630343a6361303a3730303a3a2f34302d3430203d3e20343031363832.roa (raw, json)
Hash identifier: 7ltKJD8BqqX19mDfDRpH7QEyrrnn9amdf0cnlwkPHsE=
Subject key identifier: 78:44:EE:C4:E3:90:D5:17:F2:54:B1:FA:E3:2F:F0:C5:D8:0D:9B:ED
Certificate issuer: /CN=e8741ac4f146728b91fe091c49847f816f209b05ca913ee4ee
Certificate serial: 52BA59811B96A461437FEEF581D9013316A85F16
Authority key identifier: CC:40:B6:E9:0D:C2:C4:75:BC:11:2A:29:36:B7:F1:7E:5A:31:0D:5F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e962717-1138-4d2b-9442-0332e9060132/e8741ac4f146728b91fe091c49847f816f209b05ca913ee4ee.cer
Subject info access: rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/0/323630343a6361303a3730303a3a2f34302d3430203d3e20343031363832.roa
Signing time: Tue 27 May 2025 02:17:03 +0000
ROA not before: Tue 27 May 2025 02:12:03 +0000
ROA not after: Tue 26 May 2026 02:17:03 +0000
asID: 401682
IP address blocks: 2604:ca0:700::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:ba:59:81:1b:96:a4:61:43:7f:ee:f5:81:d9:01:33:16:a8:5f:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8741ac4f146728b91fe091c49847f816f209b05ca913ee4ee
Validity
Not Before: May 27 02:12:03 2025 GMT
Not After : May 26 02:17:03 2026 GMT
Subject: CN=7844EEC4E390D517F254B1FAE32FF0C5D80D9BED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e5:47:f9:33:00:a5:41:5c:26:66:e1:3f:9f:
92:3d:a3:6c:4a:ae:72:0a:dd:d2:08:59:47:8e:8a:
52:8c:36:f8:df:ee:ca:01:5f:ad:2c:fe:6b:61:80:
c1:b4:d2:64:d7:96:3f:51:72:23:fc:ba:ca:70:37:
eb:bb:78:bc:cc:9a:63:d7:67:f1:fb:90:fa:ef:eb:
9d:47:b5:be:3a:ad:8b:ac:d5:bd:30:62:78:3a:cd:
2f:ff:f4:15:72:9d:02:53:db:2c:f0:d4:1b:90:78:
9b:50:94:7b:9a:b8:07:c9:ae:aa:52:13:e5:00:a8:
e8:84:5b:92:ea:7d:d2:58:68:ca:3e:87:6d:a9:d9:
b2:be:03:4d:59:76:a9:d8:00:28:dd:d5:99:86:59:
32:54:f4:e4:ec:34:5a:3b:39:01:4c:63:46:be:12:
79:24:dc:b8:ff:a5:c6:be:54:35:43:a5:07:06:00:
22:52:39:50:fa:27:bc:47:b9:85:08:5b:67:e5:2c:
3f:64:95:c4:22:1d:80:95:3e:70:ec:05:52:b9:fe:
b8:9b:f8:2b:f9:6c:b1:f0:ea:c6:de:a0:26:05:df:
04:3b:2d:75:5c:db:2d:47:af:18:e8:b9:a1:eb:fb:
be:d3:80:30:03:15:b1:96:4c:a5:40:90:d1:f5:68:
df:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:44:EE:C4:E3:90:D5:17:F2:54:B1:FA:E3:2F:F0:C5:D8:0D:9B:ED
X509v3 Authority Key Identifier:
keyid:CC:40:B6:E9:0D:C2:C4:75:BC:11:2A:29:36:B7:F1:7E:5A:31:0D:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/0/CC40B6E90DC2C475BC112A2936B7F17E5A310D5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e962717-1138-4d2b-9442-0332e9060132/e8741ac4f146728b91fe091c49847f816f209b05ca913ee4ee.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/0/323630343a6361303a3730303a3a2f34302d3430203d3e20343031363832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2604:ca0:700::/40
Signature Algorithm: sha256WithRSAEncryption
ba:96:15:55:3f:80:03:3a:25:b2:a2:08:76:52:52:f4:4a:e1:
85:3b:8d:ab:86:05:0b:17:58:e0:3a:59:2a:54:7b:83:3b:57:
f3:a2:80:52:a6:a5:a5:96:d8:22:4c:49:21:20:fc:64:29:21:
bb:bc:4c:5a:fc:1f:05:2c:a5:d7:de:3a:2c:50:bb:d8:ac:27:
3f:ca:bc:4e:cb:e2:ec:4e:68:3d:b5:9e:b0:b3:e0:4c:01:5d:
55:7b:ce:5a:e9:d5:08:b3:8f:bb:28:2d:c3:24:45:a2:eb:2d:
68:a3:ec:f5:ef:fd:07:cd:33:92:b1:dd:77:5b:4d:18:4d:34:
9d:de:6c:a6:ef:31:21:13:22:e5:71:ac:6e:07:ea:42:40:dd:
3b:d2:bb:e2:0d:92:58:71:15:76:1e:55:d2:f4:3c:d9:d0:9d:
ca:68:d4:55:8c:97:5b:d2:08:ab:fb:3c:aa:2f:7f:0e:5b:77:
41:72:d9:8a:69:26:0d:36:43:92:04:94:7b:54:9e:b3:71:38:
71:6a:ff:6c:64:f8:19:95:df:f5:a7:9e:ba:4c:73:d3:96:ea:
4f:82:70:be:5c:71:dc:dd:90:45:9c:78:e9:2f:79:62:bb:00:
5b:76:e0:2a:c6:9e:3b:f0:91:3a:62:34:78:36:ef:7d:50:e3:
b2:5c:6e:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 01:47:38 2025 by rpki-client