Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a1893040-a1c9-3e17-a413-e2c3c75567de.roa
File: a1893040-a1c9-3e17-a413-e2c3c75567de.roa (raw, json)
Hash identifier: P1zlFDs4QH8YmesYW/JlbgLGtlZuSJQJdYQLQOWHtyo=
Subject key identifier: 28:01:D6:55:E8:B3:D3:B6:0F:F0:DB:AB:0F:BB:FF:A2:E1:17:D2:01
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F43285848D960DCBF3BBBF4F0B61D9E80
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a1893040-a1c9-3e17-a413-e2c3c75567de.roa
Signing time: Tue 11 Feb 2025 16:52:28 +0000
ROA not before: Tue 11 Feb 2025 16:52:28 +0000
ROA not after: Mon 12 May 2025 15:52:28 +0000
asID: 30036
IP address blocks: 2604:2d80:3e80::/41 maxlen: 41
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d9:60:dc:bf:3b:bb:f4:f0:b6:1d:9e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Feb 11 16:52:28 2025 GMT
Not After : May 12 15:52:28 2025 GMT
Subject: CN=6095c7d4-6bf3-47af-9611-86f448d36e4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:00:fa:6d:a8:27:99:5e:1a:7c:ee:20:86:ee:
3e:6a:fb:e0:66:bc:a1:23:c5:f2:12:a7:7a:17:8a:
b4:48:32:7d:9d:d4:ee:a2:15:ab:70:3b:3e:df:fb:
8b:80:0e:4b:c8:9f:45:35:bd:5b:2c:b8:f0:6e:69:
63:af:70:fe:5c:1d:37:48:9e:18:f9:f9:7d:9d:68:
47:7e:00:1c:ce:1c:47:ab:e0:54:d3:a5:40:8c:f0:
75:23:5f:28:79:15:3a:01:b2:d7:5f:77:1b:3b:b4:
9c:d7:f6:80:fd:03:35:e7:96:58:13:33:74:0a:66:
96:88:ef:31:86:ac:b5:38:0a:d6:fa:60:38:d1:4e:
dd:18:8d:e8:90:49:21:f7:e5:23:87:a2:52:37:67:
9a:aa:2a:08:e1:4f:70:6c:62:e4:41:10:2b:3b:d7:
8d:f3:c2:6d:d5:30:22:b0:ce:8c:b0:aa:4f:ae:c3:
6c:47:25:ed:d7:f2:fa:34:30:2e:f0:0e:61:ea:45:
d2:e7:93:d3:ee:6b:ca:83:0d:78:67:22:69:2c:11:
8e:77:c5:3d:98:01:77:a6:aa:13:b5:57:63:26:8a:
2c:0d:46:f9:2f:82:45:72:04:70:9c:44:c1:0b:f3:
9a:07:fd:e7:0a:77:7b:0c:0c:16:6d:74:8e:b7:0c:
9e:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:01:D6:55:E8:B3:D3:B6:0F:F0:DB:AB:0F:BB:FF:A2:E1:17:D2:01
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a1893040-a1c9-3e17-a413-e2c3c75567de.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2d80:3e80::/41
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
17:1c:eb:89:d9:d9:f7:c6:4b:4e:a2:8f:ff:50:47:49:4d:16:
c3:81:a8:d7:1b:65:88:4c:9a:c0:80:c6:a1:cf:61:1d:8b:33:
46:44:ab:b6:a5:71:42:65:c1:c3:26:3c:46:2e:e0:fb:d7:58:
0b:b4:59:e9:ec:8f:3e:c0:37:7d:07:80:19:98:8c:11:2b:95:
41:d6:92:35:b8:c6:c6:ee:d0:03:12:4e:dc:3b:aa:02:82:b0:
7a:93:63:a8:2c:75:00:4e:f7:c6:c0:f5:54:b0:d9:65:c7:fd:
88:12:a7:b0:f7:96:00:fe:12:35:ab:5b:e3:13:b0:c8:3e:89:
88:e9:be:c2:36:4f:45:0c:d7:dd:e6:5c:a9:4e:88:a0:5f:0a:
84:be:77:6c:a6:82:da:81:05:a7:7f:58:02:d5:ed:71:7e:d1:
1d:81:07:f3:c0:8a:b9:0b:d8:23:06:b8:81:5c:47:df:0e:db:
b4:bd:f9:ec:70:ed:9c:84:1a:9c:8e:5b:ca:a9:36:af:ae:1a:
d0:17:b5:45:e1:1b:24:cb:51:f9:fb:3d:c4:01:f2:dd:67:15:
4d:ba:39:e7:de:52:bc:cb:ce:44:b9:4d:06:c7:a1:36:ea:41:
2f:e3:5e:ed:fc:e7:97:f2:c5:80:b6:8a:ab:c9:6f:b2:ff:68:
7d:8e:0f:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:52:40 2025 by rpki-client