Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a219f280-97e6-37c0-95e5-623b7251cdd5.roa
File: a219f280-97e6-37c0-95e5-623b7251cdd5.roa (raw, json)
Hash identifier: D7md7glbynN3ovi2eRKxwUVYsHdcoud7Y4FvdYH2nsg=
Subject key identifier: B8:1F:64:38:40:A7:71:4F:0D:38:32:CA:B3:BB:06:31:9C:7E:A5:DA
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F43285849107D7EE44BF57D1255CB6B80
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a219f280-97e6-37c0-95e5-623b7251cdd5.roa
Signing time: Mon 03 Mar 2025 10:39:37 +0000
ROA not before: Mon 03 Mar 2025 10:39:37 +0000
ROA not after: Sun 01 Jun 2025 09:39:37 +0000
asID: 30036
IP address blocks: 2604:2d81:280::/41 maxlen: 41
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:10:7d:7e:e4:4b:f5:7d:12:55:cb:6b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Mar 3 10:39:37 2025 GMT
Not After : Jun 1 09:39:37 2025 GMT
Subject: CN=1308daf4-7adb-48bc-bc3e-6547e74acaa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:68:c3:43:e8:0b:31:09:5c:a4:be:8c:f9:57:
03:74:79:b7:95:09:81:ef:18:05:33:12:c6:50:09:
0b:64:4f:c9:37:2a:fd:32:e1:ff:77:48:a9:ac:46:
51:8a:48:db:23:2a:eb:4e:e3:78:ba:d6:ba:0a:50:
7c:1f:55:44:bf:c0:53:05:84:76:44:5b:18:53:85:
54:0b:e6:b8:3e:70:d3:03:5f:40:45:c7:53:95:30:
fa:0a:9d:da:30:77:ed:dd:66:4c:5b:ab:59:91:90:
82:73:7b:87:72:f7:e7:26:01:26:c4:a1:fb:10:cb:
37:35:86:8c:e7:c9:98:2a:39:3d:4b:f1:af:cd:8c:
58:ef:1c:a0:5c:74:6b:0d:08:d0:ba:94:52:76:7b:
f1:43:07:9c:48:72:25:3e:f6:e7:8a:83:8c:f6:c9:
42:72:ff:c0:bb:7b:f5:aa:5e:ce:c2:71:60:a5:9d:
c9:48:3f:eb:20:14:a1:bc:57:42:23:39:d3:dc:e0:
5b:bf:dc:d8:77:da:3a:01:2e:f5:f1:a1:73:1b:c2:
0a:23:e0:00:73:ca:42:0c:10:9e:b4:f1:18:21:95:
ce:5b:41:ec:10:91:7d:e6:33:50:bd:8f:93:f2:db:
48:2c:93:99:e6:22:74:bd:2c:4e:32:1e:55:c0:35:
25:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:1F:64:38:40:A7:71:4F:0D:38:32:CA:B3:BB:06:31:9C:7E:A5:DA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a219f280-97e6-37c0-95e5-623b7251cdd5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2d81:280::/41
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
78:42:96:e0:8b:af:b0:1d:51:0e:1d:fb:91:9e:c1:07:ad:24:
b5:25:80:a3:a4:a1:36:9e:f0:27:92:48:23:2f:72:ee:f0:5d:
f6:11:b1:81:67:2d:db:06:84:16:dd:6e:80:8a:69:d5:ed:09:
c0:c6:68:69:72:f7:06:da:13:c4:45:a4:f2:03:7d:f4:4e:d4:
cc:7b:18:28:9f:49:3f:c5:6c:29:e6:72:8a:ce:bf:87:64:e1:
e5:ab:73:48:f6:29:de:23:3a:65:2b:21:cf:91:1a:98:c5:2e:
62:aa:2f:f8:29:07:e7:81:8c:3f:72:62:10:e1:ce:f7:ae:98:
c2:f7:95:f2:d8:54:c9:a8:fb:d2:8f:fc:0e:ab:1c:ec:c4:26:
dc:e4:38:97:6a:f2:2f:25:18:78:b5:5a:6f:47:7d:f7:c2:c4:
3d:bf:d4:e1:8f:fd:15:23:ab:3b:be:10:90:ed:b3:99:28:23:
83:db:eb:f2:96:63:72:0a:37:6b:0b:61:4e:b8:84:20:6b:71:
27:20:0c:76:8a:fc:fa:2d:1b:9a:12:42:28:eb:65:52:6f:51:
7b:7b:84:d4:f4:54:0e:c9:59:39:bc:fe:83:e0:91:b6:7c:1a:
fe:0a:6f:2b:b8:3c:1d:2f:2f:99:64:17:1b:c4:25:43:aa:77:
78:83:fc:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:56:57 2025 by rpki-client