Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3cf0b1c1-3082-3827-a244-2a1b7cfffac4.roa
File: 3cf0b1c1-3082-3827-a244-2a1b7cfffac4.roa (raw, json)
Hash identifier: rXXYlw/hD64xZs57dWxgaxY/VYBP0EyPNXwH32PbbmA=
Subject key identifier: 23:67:EE:EA:3C:E0:33:DC:95:54:D5:8E:BC:B4:7E:20:41:0A:7E:86
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F43285848C7FE645D2995063F29D6D140
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3cf0b1c1-3082-3827-a244-2a1b7cfffac4.roa
Signing time: Wed 05 Feb 2025 11:25:19 +0000
ROA not before: Wed 05 Feb 2025 11:25:19 +0000
ROA not after: Tue 06 May 2025 10:25:19 +0000
asID: 30036
IP address blocks: 2604:2d80:2980::/41 maxlen: 41
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c7:fe:64:5d:29:95:06:3f:29:d6:d1:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Feb 5 11:25:19 2025 GMT
Not After : May 6 10:25:19 2025 GMT
Subject: CN=7c0e6da6-7707-4e7b-92b5-f81057699ca5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:a3:30:1a:3f:48:8f:24:84:05:84:88:07:8b:
93:55:6b:06:37:23:8d:c1:44:6d:90:d1:f4:c5:b1:
76:d8:e0:6c:76:c4:5e:8e:6c:78:7f:ec:fb:45:14:
d9:5e:23:a3:80:0d:f8:36:79:99:47:2c:a6:d4:d6:
86:8e:b6:5a:b6:1e:a8:5f:ef:0b:65:5d:8e:57:3c:
4a:d3:02:e6:8e:32:94:29:aa:fb:35:11:fd:5a:be:
23:f1:52:ae:57:c0:3f:1d:c1:02:d6:c3:5e:3b:c4:
e0:1c:aa:84:d6:19:48:2e:a6:70:54:4b:3a:de:1a:
9e:9e:12:0d:4c:29:35:be:f2:f3:b2:b1:50:f1:a6:
e9:a4:3f:c3:19:da:c4:94:c4:42:0d:c4:07:55:9e:
8b:e3:b4:d6:42:65:3a:86:f4:09:1b:2a:4a:00:65:
c5:96:09:19:68:be:fb:d9:32:63:96:0f:18:c8:c7:
16:61:38:37:7f:57:d5:23:0c:b6:5a:94:1d:4a:88:
0c:51:55:f0:08:88:8a:e3:d5:b6:71:39:e2:8c:59:
4b:ef:a7:44:85:a8:96:c5:77:87:44:0b:01:6a:f5:
af:34:14:f8:59:13:4d:18:0f:bb:45:7f:3a:0b:2d:
18:8d:cc:6a:82:ec:2b:f5:f5:61:34:2e:c5:dd:0a:
60:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:67:EE:EA:3C:E0:33:DC:95:54:D5:8E:BC:B4:7E:20:41:0A:7E:86
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3cf0b1c1-3082-3827-a244-2a1b7cfffac4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2d80:2980::/41
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:52:5e:75:dc:f9:55:76:f1:36:69:78:6a:b0:a2:ad:84:de:
4f:05:1e:19:f7:87:19:b3:50:f2:0b:93:d0:54:e5:b0:3b:cb:
77:74:5b:7d:14:24:31:5d:dd:95:62:d9:58:12:f6:96:2c:2f:
77:7b:ac:29:92:a2:79:d9:07:2e:7b:1a:66:f3:a1:d8:65:12:
6d:30:64:4d:ef:1a:b3:d8:24:b8:a8:e1:df:e4:c8:47:5c:e2:
3f:73:f6:ce:5f:63:ea:36:3a:55:f2:c6:7b:3e:e6:99:75:78:
ac:ed:ce:94:95:45:8a:f4:3e:89:59:4b:2e:7f:2e:fd:8f:5a:
30:39:5a:b5:a6:f6:b2:98:fa:a8:10:84:b6:a5:45:b8:a5:e2:
9e:98:38:d1:df:87:4c:37:91:2f:79:21:df:35:94:e6:f5:4c:
0b:7f:61:50:6c:76:c5:94:de:b2:14:d5:b0:a8:2f:ca:16:57:
cf:13:73:7a:e3:f6:f2:ab:06:7b:08:cc:5d:67:16:bf:fe:c5:
72:2b:99:e3:60:ce:8d:6f:65:b7:55:c4:47:73:24:4f:87:2d:
81:17:cd:c6:fd:a9:75:0a:2a:37:5f:01:d5:3a:83:b1:19:de:
71:97:3d:1c:ef:1d:3e:40:b5:37:c8:41:5f:ee:77:0c:c2:72:
62:fd:ea:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:58:34 2025 by rpki-client