Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9cb5a1d3-7b63-3bf5-99e5-83506e506053.roa
File: 9cb5a1d3-7b63-3bf5-99e5-83506e506053.roa (raw, json)
Hash identifier: iRA5xtuNH3DZYw8jDOtXGgs+5bTdoErtOVP210eK5Yc=
Subject key identifier: B7:5C:52:6C:D9:6B:FA:EB:E0:4E:5F:C8:86:F2:1F:D2:DE:4B:38:01
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F43285848C534E6D9BF32C20334D28780
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9cb5a1d3-7b63-3bf5-99e5-83506e506053.roa
Signing time: Tue 04 Feb 2025 11:27:43 +0000
ROA not before: Tue 04 Feb 2025 11:27:43 +0000
ROA not after: Mon 05 May 2025 10:27:43 +0000
asID: 30036
IP address blocks: 2604:2d80:a700::/41 maxlen: 41
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:34:e6:d9:bf:32:c2:03:34:d2:87:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Feb 4 11:27:43 2025 GMT
Not After : May 5 10:27:43 2025 GMT
Subject: CN=6ef5e583-0d2e-4841-b6e8-7b9aae5d9167
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:83:8d:44:22:89:25:7d:d1:e9:7f:78:f8:2b:
91:1f:28:8d:60:19:79:72:33:a2:3b:7f:6d:93:ac:
ca:92:16:0a:3b:3e:a0:94:b9:32:4c:1c:3f:2b:9f:
24:53:6f:c9:6c:b3:ff:fe:ac:40:33:16:ed:6a:85:
b6:c7:6d:65:6c:31:c0:de:4c:f5:b4:6f:50:43:15:
91:e0:dc:24:0a:26:8c:04:10:e9:98:88:87:a2:56:
76:cc:1b:ce:48:74:4d:84:81:a2:60:e1:4a:43:95:
b5:bb:cd:50:e9:0d:9a:b4:bb:7a:93:44:24:e3:2b:
79:66:ea:3d:f2:56:1b:d8:24:dd:f0:66:77:04:77:
30:12:d3:03:fb:9c:cc:89:8c:93:22:db:05:88:1a:
7a:32:71:a2:74:2f:05:4d:84:da:a6:30:a5:0f:ab:
8e:cc:e0:a1:45:86:33:2c:aa:74:64:4e:ee:0f:b0:
ce:80:d1:47:de:69:22:a9:16:e9:43:1a:a4:d3:d0:
04:73:f7:d6:f0:e1:cc:ed:91:5f:5d:4f:8a:45:d1:
da:4f:8a:51:63:76:6e:d9:8c:4e:5b:43:9c:e6:45:
30:f8:c9:ca:43:b2:fc:9d:be:a4:91:f3:59:5f:fa:
c2:27:ba:23:4b:20:16:a8:1b:e5:3f:96:13:34:38:
fa:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:5C:52:6C:D9:6B:FA:EB:E0:4E:5F:C8:86:F2:1F:D2:DE:4B:38:01
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9cb5a1d3-7b63-3bf5-99e5-83506e506053.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2d80:a700::/41
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
72:b2:06:8e:0a:0c:1c:f6:ab:e0:fc:ed:06:2b:11:66:4d:9e:
29:ca:98:55:39:fe:4a:a0:bb:1f:7d:f5:84:ea:f2:08:71:97:
5d:af:e7:b7:da:b2:0d:00:ee:4a:e6:44:a1:99:80:21:c8:55:
16:8f:5b:a1:d8:0d:52:1c:d0:43:e1:84:fd:21:77:b8:d6:f6:
99:b3:af:6f:60:69:30:3a:61:c6:3c:88:f7:af:01:ed:74:63:
81:48:47:cd:52:df:e6:13:50:f0:40:f8:9e:50:8a:b1:85:2c:
a0:72:06:b0:00:de:6e:99:91:14:b6:19:08:d0:08:f2:22:0a:
73:d7:ab:18:ee:ab:36:f3:85:6d:4c:75:d3:e5:cf:66:ad:c3:
16:6a:a3:7a:9b:56:f8:c9:29:c9:a1:86:41:0a:72:04:1e:3e:
f1:db:11:7a:bc:8d:8e:a4:9d:b5:14:db:2f:a1:82:c4:dd:7e:
32:41:8b:f3:d6:15:8a:0b:47:e4:90:e5:b2:f7:6e:ed:c0:ea:
0c:ee:4a:d5:52:c4:dc:a1:2a:74:27:56:18:b9:88:ef:0e:1f:
ca:e4:fd:92:d2:46:c6:16:51:5c:79:ec:44:6b:60:54:a1:45:
43:e5:9c:53:a0:f8:3e:cd:0f:0a:2f:20:a5:f7:5d:26:c2:0c:
26:18:42:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 11:33:12 2025 by rpki-client