Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4e85c1b3-cc18-3afd-9b2f-67b937490c1b.roa
File: 4e85c1b3-cc18-3afd-9b2f-67b937490c1b.roa (raw, json)
Hash identifier: Is94lA3uasTo6Qr+T7WcTOqrD/nf8UE0xQMgWG8r0W4=
Subject key identifier: 2C:8F:87:EF:89:EB:2D:79:3E:21:BD:3F:3A:2E:79:7C:B6:D9:A8:2B
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F43285848C7F882A839C79EF4C81BAD00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4e85c1b3-cc18-3afd-9b2f-67b937490c1b.roa
Signing time: Wed 05 Feb 2025 11:13:28 +0000
ROA not before: Wed 05 Feb 2025 11:13:28 +0000
ROA not after: Tue 06 May 2025 10:13:28 +0000
asID: 30036
IP address blocks: 2604:2d80:9900::/41 maxlen: 41
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c7:f8:82:a8:39:c7:9e:f4:c8:1b:ad:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Feb 5 11:13:28 2025 GMT
Not After : May 6 10:13:28 2025 GMT
Subject: CN=888bd249-6f5d-49fd-8ac3-38281f706c38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:e3:4f:44:c1:74:b8:27:80:98:a6:75:29:65:
38:19:c8:c5:b2:c7:80:8b:47:eb:0a:cd:87:b1:93:
0d:9a:cf:fe:ea:45:df:ec:5b:aa:56:c5:93:66:a5:
06:6a:61:dc:ef:a2:5f:b1:1b:d2:9f:46:89:9f:a4:
cf:22:3d:c9:c2:22:b6:c6:35:52:7a:b3:74:0e:23:
a3:90:08:8a:18:5e:22:9f:7d:e8:fa:66:52:ab:b9:
fa:2f:22:ff:a4:ea:03:46:f1:3a:e4:77:88:b9:56:
1e:fa:a4:45:10:c8:d3:f7:82:04:ac:db:8a:a5:3a:
23:84:e4:37:ad:8e:43:14:f6:5e:81:4c:4e:12:93:
be:15:13:32:86:06:6d:62:d7:88:71:8c:bd:39:40:
cf:75:90:88:e1:8f:48:2f:e4:b2:ec:0d:7d:e6:0e:
47:db:63:5d:35:c4:15:8e:05:cd:b9:4a:12:b9:e5:
97:69:c5:ff:22:f1:a6:ed:9d:f8:bb:32:7a:dc:96:
07:86:b0:10:44:e5:d7:80:81:37:b1:e7:74:72:eb:
46:bb:da:0e:a0:8d:06:d6:69:d7:fa:cb:bc:e1:24:
32:84:90:bb:55:4e:48:06:f8:df:42:97:24:5c:96:
00:8e:7c:52:a3:6d:e8:e1:75:4e:d2:04:92:b9:fc:
9c:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:8F:87:EF:89:EB:2D:79:3E:21:BD:3F:3A:2E:79:7C:B6:D9:A8:2B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4e85c1b3-cc18-3afd-9b2f-67b937490c1b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2d80:9900::/41
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4f:84:46:a8:6a:57:77:1a:77:91:8d:9e:91:01:59:e7:10:f9:
9d:c2:61:9d:58:9b:ad:78:4f:72:4b:b2:01:32:54:8f:f6:08:
35:d6:4f:37:15:11:30:4a:a7:95:73:66:86:99:c9:e9:5a:cb:
7b:80:d3:04:34:12:58:e5:c9:35:74:7e:6f:a4:0d:06:9a:4c:
ec:16:92:44:e7:2f:2c:c6:0b:34:1f:0b:79:08:4e:94:1d:6b:
71:46:a0:2c:27:bf:69:27:4e:da:70:46:4b:d5:c3:e6:82:0a:
2e:6e:10:51:bf:b2:75:a1:b9:84:2e:6b:d5:32:21:d0:82:14:
6b:e3:6c:f0:a8:04:4d:74:64:bb:df:cd:f4:87:ef:dc:48:70:
b0:f5:0e:f2:cd:96:79:9d:6e:92:76:d3:e4:78:c8:40:83:64:
80:e1:7e:10:a0:b1:e1:0c:3d:28:ac:68:64:f9:99:a2:3a:52:
f4:24:6f:7f:51:5a:54:23:ee:b4:13:4c:4a:dd:5a:2d:77:e4:
40:55:da:b1:b3:c6:b6:b7:04:70:25:e7:5d:5e:46:56:93:61:
e9:9b:6a:9f:bf:6e:81:b4:0d:58:36:05:a1:b9:5d:db:18:bb:
35:77:ba:1c:91:93:d7:5d:d5:fb:07:3f:7c:03:b6:15:4a:8c:
e2:bf:8d:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:54:59 2025 by rpki-client