Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a36c10f5-5c87-363c-bdfc-b8a859794fe4.roa
File: a36c10f5-5c87-363c-bdfc-b8a859794fe4.roa (raw, json)
Hash identifier: NEXj7/RC1dLXRq1GydLSdwu6VgZh7ThLsLP4ZsU+lxI=
Subject key identifier: 7D:F7:DA:9C:A4:EF:6C:2A:3D:AB:B1:5F:AE:FC:D5:95:08:C8:B2:A4
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F43285849514A7FECC43F7C14BFEC8780
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a36c10f5-5c87-363c-bdfc-b8a859794fe4.roa
Signing time: Wed 26 Mar 2025 15:44:25 +0000
ROA not before: Wed 26 Mar 2025 15:44:25 +0000
ROA not after: Tue 24 Jun 2025 15:44:25 +0000
asID: 30036
IP address blocks: 2604:2d80:380::/41 maxlen: 41
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:51:4a:7f:ec:c4:3f:7c:14:bf:ec:87:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Mar 26 15:44:25 2025 GMT
Not After : Jun 24 15:44:25 2025 GMT
Subject: CN=778dd84d-a3db-4790-98a2-6f81e175f8c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:26:c2:f2:b2:17:09:5f:c6:c1:66:62:2a:f3:
fc:5d:d3:28:14:b9:9d:ed:0d:40:0b:84:0f:ba:82:
db:23:db:ea:3c:02:7b:31:87:65:62:14:2e:36:ec:
7a:f8:dd:58:58:e8:1f:63:e4:9d:96:d8:22:29:5d:
9e:36:11:13:dd:45:97:72:d7:81:90:9b:fd:21:d3:
8c:57:e4:59:d5:87:14:5f:02:e9:ce:fa:db:09:78:
1f:ba:cd:b0:2a:ae:f8:3a:77:31:dd:f2:18:29:0b:
f9:22:46:2f:85:95:19:9e:70:d2:d7:84:e9:58:61:
a2:1d:8b:3a:3c:75:3b:01:6e:ed:c1:16:e8:a6:2b:
0d:59:f6:fa:3e:dc:42:8d:7f:ac:e9:32:7d:ca:24:
d3:b5:6b:83:b6:8f:74:a6:43:30:f9:1f:9c:9f:8e:
14:5a:65:e6:4a:0a:8f:d0:ad:56:65:5d:b7:5e:61:
3a:11:19:60:d7:20:b9:d3:d2:55:a4:10:60:d4:13:
b6:d7:ad:c3:f7:8a:ac:f0:32:a0:c1:bb:49:0c:67:
51:1b:af:cb:df:43:07:0c:07:3f:e9:07:96:15:64:
cd:5d:54:d6:0d:81:18:56:69:ba:af:d0:4a:db:b4:
5c:cf:c6:54:b1:d6:ef:f9:b0:2a:d1:38:1f:b4:71:
79:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:F7:DA:9C:A4:EF:6C:2A:3D:AB:B1:5F:AE:FC:D5:95:08:C8:B2:A4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a36c10f5-5c87-363c-bdfc-b8a859794fe4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2d80:380::/41
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
07:5c:f8:7a:62:fe:43:ae:cc:b5:91:2b:76:85:83:ea:fa:d6:
9b:ac:82:17:3a:af:10:a8:fc:f8:06:5d:99:f5:60:9f:86:c9:
1d:02:5d:2a:53:fe:47:ca:86:ff:3d:39:3e:a7:3a:ac:47:19:
6d:af:ad:f2:d0:52:7e:e2:58:89:8f:48:fd:c5:94:90:87:1a:
fa:e9:c4:09:01:cf:99:6a:1c:fb:73:2d:84:b0:52:b6:89:57:
89:1e:38:1c:e7:e8:b4:6f:19:04:25:2d:71:1b:f1:ad:16:3b:
b4:59:07:3e:0e:e6:9f:5e:2d:71:a8:fa:9e:42:60:33:e9:be:
d6:16:6e:ec:eb:6b:96:b9:d5:40:75:09:0f:98:74:95:f5:56:
9c:18:69:03:e7:7f:12:31:f3:25:48:4d:ff:77:23:7b:43:ff:
bf:c0:aa:3d:3a:53:8f:27:00:49:bd:ea:6f:1e:92:95:42:a7:
1c:de:a7:bc:a6:1e:74:cc:1a:89:de:6a:9e:fb:b8:4c:be:9a:
c7:6f:ce:d0:e7:cd:ac:4a:ba:69:e2:f8:d2:a5:ab:8e:aa:c8:
fa:6c:3b:43:24:e2:1f:c0:24:62:5f:c2:20:34:2e:e3:41:6f:
37:08:1b:06:fe:b1:4d:84:4f:b5:6c:40:1a:bf:88:5c:b9:83:
30:9d:80:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:54:31 2025 by rpki-client