Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a74ba2db-ac8b-3056-993e-e2081fb5cd1e.roa
File: a74ba2db-ac8b-3056-993e-e2081fb5cd1e.roa (raw, json)
Hash identifier: i9CVbEoshwQclBh8KZ2v+t3Crm+X+Bod5I00J7DIGM8=
Subject key identifier: E7:30:8B:22:98:79:48:C6:F3:A5:EC:FD:4D:85:2A:11:24:89:51:14
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F43285848C5602714309221654DAD5D80
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a74ba2db-ac8b-3056-993e-e2081fb5cd1e.roa
Signing time: Tue 04 Feb 2025 12:54:52 +0000
ROA not before: Tue 04 Feb 2025 12:54:52 +0000
ROA not after: Mon 05 May 2025 11:54:52 +0000
asID: 30036
IP address blocks: 2604:2d80:bc00::/41 maxlen: 41
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:60:27:14:30:92:21:65:4d:ad:5d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Feb 4 12:54:52 2025 GMT
Not After : May 5 11:54:52 2025 GMT
Subject: CN=77fee41f-4fc7-4c7a-b42e-19a7d43b8cd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:24:ec:b7:4c:09:aa:35:4b:da:c7:c1:c3:da:
09:25:15:0a:8a:31:3c:28:f6:25:fd:23:98:64:9f:
e7:82:e0:88:c5:2e:8a:71:ba:18:8e:3a:9c:14:81:
90:79:94:7e:4f:47:64:53:98:26:b6:68:6c:c2:12:
f5:3f:4e:97:d0:d7:b0:ff:6c:5a:49:7e:27:11:f3:
69:50:04:15:c3:1e:d9:19:62:c1:3f:52:a1:3e:46:
10:fb:94:84:fc:18:ae:d5:ef:e2:1b:6f:18:e1:1c:
61:b1:a4:14:34:fc:08:2f:56:e9:28:2c:90:f2:1a:
c1:85:36:06:b9:f4:83:01:33:eb:5c:31:fc:00:70:
89:e9:18:c0:9a:a4:b4:c5:63:75:b0:aa:6d:c5:8a:
39:bd:53:fa:24:19:dd:17:69:75:a5:61:fd:28:6e:
89:94:74:5b:d0:4b:3e:c9:b8:78:5e:41:36:11:8a:
af:0e:15:90:2b:78:b6:d6:d9:be:d4:0b:1d:6b:4b:
f1:5d:43:20:3b:d1:48:77:ed:70:01:e4:03:4f:0b:
53:3e:d3:35:75:90:06:aa:a6:3d:88:89:a0:85:46:
2b:f6:3c:fa:81:d3:72:04:37:c3:0f:67:1f:ce:8c:
fb:3d:61:10:fc:87:b1:0e:2d:a1:80:61:b9:51:20:
40:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:30:8B:22:98:79:48:C6:F3:A5:EC:FD:4D:85:2A:11:24:89:51:14
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a74ba2db-ac8b-3056-993e-e2081fb5cd1e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2d80:bc00::/41
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6a:a9:7f:14:ef:5f:b6:9e:4a:90:e0:23:bc:99:b6:2c:bc:d1:
df:93:be:f4:b2:48:80:69:a5:42:ba:ae:1d:80:7d:34:e9:3d:
1e:8d:7f:9a:6a:3d:ce:ed:3a:fe:44:cb:0b:31:bf:56:c6:ff:
b7:05:91:9e:2d:f3:af:76:25:62:5a:4b:cc:44:2e:5f:93:b6:
4e:bd:bc:b0:d4:5a:21:7f:1b:24:83:aa:85:e8:f4:b4:76:3c:
9d:0e:8e:34:68:d4:0a:cf:a9:77:77:47:87:af:d2:26:1c:b6:
55:64:fb:e7:89:c4:54:7e:c5:d6:0c:51:98:eb:82:e2:d0:d6:
ff:e4:af:a6:57:85:12:66:5a:9d:7b:a8:ab:b9:3a:5a:bf:5a:
3f:d9:1e:e8:30:08:8f:61:7b:b2:97:4d:77:42:96:e8:ab:ca:
9e:d7:2c:b7:f3:40:ee:af:1f:8c:00:9b:c4:7c:95:f2:cd:9b:
f0:ca:a7:58:5b:18:32:90:34:23:c0:a4:cc:eb:84:6e:4b:ac:
dd:52:b9:fd:7b:0e:28:7a:2e:6e:10:c5:ed:84:27:e6:60:bf:
74:bb:16:1f:a6:af:36:31:22:65:46:5a:b3:b1:00:df:33:6d:
f9:81:3d:8b:57:5c:c4:3c:f4:7e:50:fa:29:bb:62:8d:ac:b9:
61:3e:a8:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:52:59 2025 by rpki-client