Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6087f274-05df-37ef-a775-fca9381b0329.roa
File: 6087f274-05df-37ef-a775-fca9381b0329.roa (raw, json)
Hash identifier: ctMh3LwMKgnsDu6tcSjVLFTPOkvLq6JKLaG3KnYQ1Qw=
Subject key identifier: CF:9A:B9:03:7C:0A:0B:56:EA:07:56:04:EA:05:AD:10:13:1E:1C:C9
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F43285848C535054588D514B861172680
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6087f274-05df-37ef-a775-fca9381b0329.roa
Signing time: Tue 04 Feb 2025 11:27:58 +0000
ROA not before: Tue 04 Feb 2025 11:27:58 +0000
ROA not after: Mon 05 May 2025 10:27:58 +0000
asID: 30036
IP address blocks: 2604:2d80:ad80::/41 maxlen: 41
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:35:05:45:88:d5:14:b8:61:17:26:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Feb 4 11:27:58 2025 GMT
Not After : May 5 10:27:58 2025 GMT
Subject: CN=ebd45d37-374b-4d9b-873d-bba1abc00f9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:1c:5c:81:72:cc:82:dd:9c:b0:ef:64:bb:ac:
26:28:40:a1:90:eb:28:00:89:0e:78:53:13:77:5b:
b0:88:cf:24:dc:8a:88:56:81:8a:fa:40:6c:d1:1b:
3a:85:7c:72:c2:7b:6f:8a:2c:a6:ff:35:cb:34:41:
6d:bd:3d:ea:a3:e7:84:82:48:e3:f2:13:e4:20:d0:
dc:42:44:e4:f7:c6:2f:21:04:4d:77:7c:63:8e:bb:
5d:f5:ff:21:cf:c0:39:30:8e:40:dc:af:d2:26:3a:
e9:be:2d:bf:02:a8:48:12:b9:57:9a:24:de:c1:9e:
01:40:19:7a:68:25:27:e5:ba:0f:30:ac:aa:49:58:
c4:fe:f1:3d:ea:0c:aa:05:b6:dd:f4:15:53:66:37:
74:78:02:49:08:20:9c:34:e8:0f:49:92:ba:b9:3a:
22:f8:2a:13:5a:cb:e2:c7:3e:dd:72:5b:5f:6c:aa:
2b:6e:d2:73:54:34:1a:3c:57:38:28:3c:40:a5:1a:
34:aa:16:3d:55:2f:d7:5e:a6:53:90:30:d2:91:3e:
96:c8:fd:ba:2c:5f:f2:02:98:60:7d:aa:c5:e4:4a:
0d:f9:45:cb:19:f3:d8:6a:28:10:3d:a7:ee:68:18:
3d:97:f9:7b:2d:76:6d:50:fc:f2:e4:f1:7f:69:6e:
33:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:9A:B9:03:7C:0A:0B:56:EA:07:56:04:EA:05:AD:10:13:1E:1C:C9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6087f274-05df-37ef-a775-fca9381b0329.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2d80:ad80::/41
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
29:ee:3b:99:9e:fa:da:45:13:f0:62:d4:a2:21:b6:d3:0e:50:
3e:0a:aa:4d:d6:48:6c:f2:ea:99:12:df:c6:9c:ec:f1:6f:10:
5c:ea:9c:f2:f5:ef:d0:08:36:89:f9:3c:ad:fc:5e:ab:b8:48:
e7:3d:da:41:77:ff:bf:1b:87:0f:23:31:e9:65:7f:fa:9c:d9:
ac:d5:7c:56:14:20:f2:7c:7a:81:56:95:85:d2:74:fc:f3:f1:
51:e1:d9:4d:b4:ab:48:33:0d:ac:f8:51:e0:f8:cf:a1:88:4a:
3f:d3:e0:85:cb:01:19:a6:42:14:22:da:30:37:96:30:d9:68:
d7:36:94:58:df:07:14:57:41:d1:0b:68:f5:4d:4d:40:9e:7b:
84:57:70:29:57:b2:41:8b:a1:35:5f:19:21:ca:bd:86:af:ac:
61:e7:99:86:26:49:b1:29:dc:b6:10:88:04:98:79:83:8e:b9:
d2:c1:62:06:4f:a9:1a:5c:65:61:c0:8e:41:35:8d:55:93:7e:
a4:ef:27:6a:cd:67:8e:ff:f1:1a:8f:fd:83:f2:d5:95:e2:7b:
e5:90:76:33:47:00:17:44:be:fa:fd:4b:88:a7:4b:f4:25:8e:
47:aa:11:0c:01:c3:00:61:1d:d9:ac:2e:eb:9b:42:d8:56:58:
e1:4f:af:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:28:10 2025 by rpki-client