Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/70f9fd93-5815-354f-a7a4-12399bd668b8.roa
File: 70f9fd93-5815-354f-a7a4-12399bd668b8.roa (raw, json)
Hash identifier: KKo1OOwSjPLYFACq09J5hw1Ai9cAAxIkfy1bHZAMs3I=
Subject key identifier: 3B:7C:8F:79:8A:74:29:B1:BF:9B:98:B9:F6:47:AD:C4:FF:6C:7C:BC
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F432858493EAB72CCEAE7C1C12808F780
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/70f9fd93-5815-354f-a7a4-12399bd668b8.roa
Signing time: Wed 19 Mar 2025 23:39:23 +0000
ROA not before: Wed 19 Mar 2025 23:39:23 +0000
ROA not after: Tue 17 Jun 2025 23:39:23 +0000
asID: 30036
IP address blocks: 2604:2d81:900::/41 maxlen: 41
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:3e:ab:72:cc:ea:e7:c1:c1:28:08:f7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Mar 19 23:39:23 2025 GMT
Not After : Jun 17 23:39:23 2025 GMT
Subject: CN=8a596354-e540-478f-977e-1e2061895def
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:76:60:44:7b:5b:6e:3b:56:70:1f:f1:70:04:
de:e2:cf:20:dc:89:01:dc:3b:b8:e9:52:c9:dd:0a:
d6:77:90:de:b3:fe:02:af:49:4a:a2:c3:d0:7e:7a:
7e:a2:31:a9:b2:6f:82:aa:6c:6c:41:78:6f:6a:91:
a0:41:d4:de:56:8c:25:89:58:33:06:d4:f3:e1:29:
c6:26:45:21:42:58:d8:d1:86:15:96:ec:51:c7:28:
9c:fe:df:bd:1f:89:4a:0a:8f:72:22:b6:bc:4f:3f:
ad:db:48:8f:e0:6f:39:98:fd:b4:b1:64:e3:df:cb:
66:59:ca:4f:71:af:15:f1:55:95:71:2c:81:a5:62:
7a:ba:bf:57:03:0e:31:0c:b3:c9:fd:29:26:0c:7d:
1d:97:20:ca:21:8c:f7:a5:76:f3:de:e0:d2:f3:ba:
7c:bc:0a:a6:44:38:57:4b:3c:e8:dd:db:3b:e1:3f:
2e:f6:e4:c9:59:e1:af:62:79:01:98:7c:56:dd:4b:
c0:29:3b:85:92:50:96:a2:68:ca:c5:95:b7:46:ec:
37:6d:90:43:46:53:87:fd:eb:99:62:cf:2c:4a:ff:
04:27:41:84:ac:8d:be:c2:fb:e8:5b:e9:a5:71:40:
9f:e0:bb:0c:d7:9f:51:47:a7:c1:ec:93:55:3d:bf:
19:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:7C:8F:79:8A:74:29:B1:BF:9B:98:B9:F6:47:AD:C4:FF:6C:7C:BC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/70f9fd93-5815-354f-a7a4-12399bd668b8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2d81:900::/41
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
63:41:b4:85:bb:60:23:86:35:c2:94:a7:6b:7a:98:d1:1d:e9:
ef:dc:d5:2e:3a:1f:94:e7:4e:3f:79:b8:86:ea:28:7e:41:4c:
2e:1b:c7:d2:12:fc:a6:93:51:5e:6c:19:1d:09:5f:c8:70:08:
f5:4c:b1:32:1c:52:e4:64:b8:94:44:7b:51:4f:d9:80:63:bb:
b0:dd:f5:67:07:44:9e:88:75:37:38:cc:82:06:c4:7b:15:fd:
ea:d0:5a:1b:3c:33:62:c6:eb:32:12:1b:26:4a:1a:5e:4e:fb:
b1:73:00:04:29:b8:99:d4:07:ea:c1:03:e9:5e:71:93:84:95:
e7:57:99:62:e1:91:d6:57:ec:87:e1:89:4a:d5:17:85:8c:e9:
76:11:45:90:da:a5:67:a5:dc:b1:95:0a:ca:ef:b3:d3:53:f2:
5e:6f:93:ff:0e:8c:89:ce:92:15:2b:2b:c0:99:2f:99:ad:f8:
25:7d:06:9c:bf:a9:04:96:45:91:5d:cf:5a:f6:52:76:0e:66:
7c:d5:6b:b1:26:71:7c:ab:f4:3c:ad:c9:fd:2a:ec:d8:fd:fc:
c1:8b:a1:94:3b:f2:50:df:23:48:6a:a6:b3:11:f6:dd:cb:d8:
77:fc:37:01:8d:11:96:97:de:0e:dd:f7:fa:2a:ee:80:bb:f6:
3a:9e:91:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:02:07 2025 by rpki-client