Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/0/323630343a6361303a3930303a3a2f34302d3430203d3e20343031363832.roa
File: 323630343a6361303a3930303a3a2f34302d3430203d3e20343031363832.roa (raw, json)
Hash identifier: sBFvdEpBj14nznaBuYXXjImhvpBUcR4hkNQ3ry2+KYk=
Subject key identifier: B2:AC:64:36:D5:73:D3:7F:CB:16:C4:54:29:4B:96:E8:0F:2C:E4:95
Certificate issuer: /CN=e8741ac4f146728b91fe091c49847f816f209b05ca913ee4ee
Certificate serial: 0AD3567726A386884F5DABEE07CB05AAA7942EB9
Authority key identifier: CC:40:B6:E9:0D:C2:C4:75:BC:11:2A:29:36:B7:F1:7E:5A:31:0D:5F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e962717-1138-4d2b-9442-0332e9060132/e8741ac4f146728b91fe091c49847f816f209b05ca913ee4ee.cer
Subject info access: rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/0/323630343a6361303a3930303a3a2f34302d3430203d3e20343031363832.roa
Signing time: Tue 27 May 2025 02:17:09 +0000
ROA not before: Tue 27 May 2025 02:12:09 +0000
ROA not after: Tue 26 May 2026 02:17:09 +0000
asID: 401682
IP address blocks: 2604:ca0:900::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:d3:56:77:26:a3:86:88:4f:5d:ab:ee:07:cb:05:aa:a7:94:2e:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8741ac4f146728b91fe091c49847f816f209b05ca913ee4ee
Validity
Not Before: May 27 02:12:09 2025 GMT
Not After : May 26 02:17:09 2026 GMT
Subject: CN=B2AC6436D573D37FCB16C454294B96E80F2CE495
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:03:ee:2a:c0:f7:32:d0:6b:ab:47:55:a0:21:
90:ee:d9:16:c7:0e:17:c2:6d:e4:fc:fd:d5:92:b0:
8c:86:b1:22:f7:ce:65:25:9f:a5:17:ab:60:10:39:
24:bc:3f:11:a6:f6:1f:56:45:a4:17:a3:3c:44:54:
92:de:a6:bb:86:84:4b:d8:b3:9c:11:bc:00:4f:7c:
13:76:33:24:66:bc:9b:45:6b:ce:c5:82:8e:02:d0:
7a:e5:ca:26:25:22:69:fa:ef:06:7b:0c:12:65:44:
7e:81:79:15:97:69:59:30:d4:d4:e2:ef:29:54:e6:
98:2f:f0:af:8e:94:9b:23:56:ea:31:ad:10:66:d9:
98:6b:3e:d1:5e:fe:9c:c1:28:89:a1:e7:fd:aa:14:
9e:96:b5:a7:26:33:ba:bb:77:4a:48:63:35:fe:33:
5d:f7:0a:62:ed:c4:01:b0:d7:84:d2:ba:48:d9:7d:
82:bd:7c:84:51:1a:de:ce:b5:6a:ce:00:7e:cc:2b:
7e:45:9a:d5:4b:f3:41:ad:56:ff:03:df:58:18:7b:
51:7f:40:07:94:e5:be:1f:ab:b2:4d:c4:e6:ff:e0:
32:1a:10:68:2b:75:ac:bb:3d:7e:3e:c3:ab:1a:5d:
f3:00:43:fb:1c:c2:a8:3b:f7:28:49:e6:32:da:ae:
f7:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:AC:64:36:D5:73:D3:7F:CB:16:C4:54:29:4B:96:E8:0F:2C:E4:95
X509v3 Authority Key Identifier:
keyid:CC:40:B6:E9:0D:C2:C4:75:BC:11:2A:29:36:B7:F1:7E:5A:31:0D:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/0/CC40B6E90DC2C475BC112A2936B7F17E5A310D5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e962717-1138-4d2b-9442-0332e9060132/e8741ac4f146728b91fe091c49847f816f209b05ca913ee4ee.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/0/323630343a6361303a3930303a3a2f34302d3430203d3e20343031363832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2604:ca0:900::/40
Signature Algorithm: sha256WithRSAEncryption
57:2f:26:88:41:cf:34:bc:ce:54:7b:5e:ac:08:b3:28:2c:26:
55:39:04:38:c8:b2:23:95:69:a5:2d:43:ca:a2:d8:d4:2f:f7:
a2:f9:64:16:da:58:ed:55:6e:7f:c7:ac:5a:03:84:dd:a5:1b:
77:24:99:f8:de:2a:6d:34:be:a8:48:63:57:e0:c5:94:09:c7:
c8:6b:99:08:51:ab:6d:62:d9:0f:33:de:61:7a:bd:85:ae:6b:
f3:75:53:c1:9b:51:f9:d0:6e:58:5c:bc:72:bd:db:54:e1:8d:
c8:da:9e:20:0d:73:bb:1a:e3:38:82:8d:77:1e:bc:6d:88:00:
af:06:02:1b:fc:12:33:9c:b0:dd:8b:61:09:3d:fc:92:17:57:
91:23:ff:b0:e5:c9:ba:52:97:5e:ff:85:b7:1d:3c:aa:58:71:
b5:e3:f5:64:da:7f:88:1d:5e:63:5c:70:d4:e3:4b:aa:f6:10:
b9:e6:b8:b2:38:eb:3f:56:d6:31:d7:92:59:31:15:e3:f2:b5:
67:25:22:c8:dc:f7:0d:7c:df:0a:8b:0a:e0:06:54:96:16:11:
0c:d6:12:7f:17:92:7d:21:c3:08:6c:eb:7f:80:22:94:79:ad:
bc:01:ef:30:01:05:c3:31:52:55:f2:da:cc:64:a8:0f:6c:0b:
61:fe:7a:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 01:49:40 2025 by rpki-client