Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0ad2cc08-fce6-348c-817b-5ca40fafc9ae.roa
File: 0ad2cc08-fce6-348c-817b-5ca40fafc9ae.roa (raw, json)
Hash identifier: oLQPPw5IbgB3ZcbqukGW9PAclOkDzfNs0CY2J/P8K2I=
Subject key identifier: 17:97:89:A0:FA:1A:5C:26:42:7F:57:0A:82:3A:9B:CA:82:6E:05:57
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F43285848C7F851C5C96B63D58D0EB380
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0ad2cc08-fce6-348c-817b-5ca40fafc9ae.roa
Signing time: Wed 05 Feb 2025 11:13:05 +0000
ROA not before: Wed 05 Feb 2025 11:13:05 +0000
ROA not after: Tue 06 May 2025 10:13:05 +0000
asID: 30036
IP address blocks: 2604:2d80:2000::/41 maxlen: 41
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c7:f8:51:c5:c9:6b:63:d5:8d:0e:b3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Feb 5 11:13:05 2025 GMT
Not After : May 6 10:13:05 2025 GMT
Subject: CN=17e70935-5275-4414-9bc5-2011313ee097
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:1b:ec:70:53:1c:8c:0c:41:61:50:cb:e0:0f:
21:31:cc:d4:40:c7:47:84:b2:f6:76:c3:12:1a:8f:
12:dc:e3:7e:0d:d5:66:d1:f3:25:f0:11:03:09:38:
09:7d:f9:94:e1:7d:f6:bb:64:88:1b:d6:fb:73:e5:
5f:6e:a2:41:f4:30:17:71:3b:2b:52:dc:17:6e:f2:
bd:e4:e0:6f:17:82:28:0c:f5:d9:fa:c4:d8:29:ac:
0e:64:24:92:f5:94:a4:e4:f2:e8:e4:28:3a:03:dd:
31:25:8d:20:a0:ab:42:5e:64:9c:c5:fd:3f:71:b3:
d9:09:4f:4e:32:87:c3:1f:b4:40:c7:9a:7d:a2:38:
90:ea:b3:02:d5:e0:33:0c:68:28:77:bf:e5:5c:f8:
f9:a0:a9:98:c3:39:5d:9f:df:64:d9:53:f8:96:83:
71:b9:4f:78:04:e9:93:09:41:8c:0b:fb:ad:78:84:
3d:d4:53:bf:57:32:8b:e4:84:ec:c2:ff:26:64:78:
44:96:52:7f:7c:b5:63:24:6e:c5:2e:b1:55:32:b2:
53:ae:ff:91:0b:0a:08:b3:e2:48:bd:97:73:60:07:
d4:5c:f9:e8:29:81:ce:f4:81:0e:11:4a:0d:12:1e:
9f:59:12:7a:81:db:60:ef:ec:11:32:44:72:e7:84:
20:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:97:89:A0:FA:1A:5C:26:42:7F:57:0A:82:3A:9B:CA:82:6E:05:57
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0ad2cc08-fce6-348c-817b-5ca40fafc9ae.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2d80:2000::/41
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6b:ea:0b:87:33:6d:c9:f6:c6:b8:6a:b6:99:9a:74:cc:ac:fc:
ca:fc:78:ed:52:43:15:a7:bc:be:53:5b:3e:22:a4:67:fe:bc:
35:17:55:51:89:6a:c3:03:33:8e:07:c2:00:a1:a4:a3:21:fe:
ca:94:7d:97:75:99:ee:66:2a:0c:c6:73:ba:c9:9e:c1:a1:1d:
ed:c4:41:22:d9:45:3c:40:aa:86:45:9f:87:69:52:86:9d:b1:
81:86:2f:be:a6:5a:1d:31:80:10:3d:93:bd:60:65:bb:b8:d1:
f7:72:2f:48:32:8f:40:77:9d:97:0e:d2:fb:12:50:6b:2e:5e:
65:47:e2:3a:b5:d3:1a:92:85:72:00:a8:18:f6:c6:17:5c:64:
96:13:5a:49:74:ce:50:81:f6:fe:c6:36:63:48:17:dd:81:55:
01:94:c6:a2:0b:b0:0f:89:aa:ce:0e:b3:a2:65:2c:5a:ed:bc:
c3:74:d9:0c:d6:a1:c6:fe:0d:e6:9a:d5:e6:2f:7b:db:54:eb:
fe:ca:03:bb:e9:a8:0f:0e:88:73:b2:cc:9e:50:e3:57:74:2b:
34:a3:b9:c3:bf:93:71:c0:ec:9b:63:18:c7:ca:d4:f5:e8:00:
2c:3a:2c:17:3f:d7:3c:e6:1b:15:20:df:43:c6:d0:e9:89:fa:
01:b4:8a:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:54:37 2025 by rpki-client