Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bfe6bbcb-7705-3b1b-9527-65e2aac5558f.roa
File: bfe6bbcb-7705-3b1b-9527-65e2aac5558f.roa (raw, json)
Hash identifier: BfKQg6ZxI8bEmz9uTYWGj6cF3+sQKjCHnfsKnJHS4m0=
Subject key identifier: 5E:68:93:E9:40:AC:AF:8F:6A:F2:ED:53:64:5B:2B:B1:66:36:8C:2B
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F43285848C5780CDE9E1E2E48760B1940
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bfe6bbcb-7705-3b1b-9527-65e2aac5558f.roa
Signing time: Tue 04 Feb 2025 13:43:01 +0000
ROA not before: Tue 04 Feb 2025 13:43:01 +0000
ROA not after: Mon 05 May 2025 12:43:01 +0000
asID: 30036
IP address blocks: 2604:2d80:2f00::/41 maxlen: 41
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:78:0c:de:9e:1e:2e:48:76:0b:19:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Feb 4 13:43:01 2025 GMT
Not After : May 5 12:43:01 2025 GMT
Subject: CN=e5691da4-11d2-49de-a892-a487e322c218
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:7e:b4:77:a4:a3:56:48:65:c5:d9:8f:3c:1d:
fb:78:69:1c:d7:0e:2f:7f:a5:35:cf:50:cc:f2:03:
65:69:b1:5b:17:15:fc:2d:63:52:03:c5:3e:11:b8:
27:d6:1e:f9:3d:87:12:13:a1:02:9d:78:1b:5d:e4:
66:f0:3a:7e:93:7b:5c:1c:6f:ff:34:5f:b0:e9:57:
df:3a:da:b5:c5:29:c7:0f:69:e1:3b:87:b7:e0:de:
7e:02:24:3f:23:69:09:db:57:7f:85:6c:52:5a:44:
c2:4c:f8:7a:7b:6d:11:b3:e0:03:e2:31:55:27:f6:
fa:21:2e:5c:54:42:b1:ee:58:ec:ef:22:8d:83:54:
12:78:98:76:31:cc:85:77:7d:d1:8f:f1:1f:73:8e:
55:89:a1:79:c1:f0:28:3d:f2:2a:82:66:20:30:54:
c7:e0:92:aa:ac:69:ee:42:9f:a0:34:c3:c0:00:f8:
30:b4:08:44:f1:38:b3:2a:b3:d5:69:d0:64:6a:86:
bd:73:63:48:e1:d3:d1:73:f3:40:1b:96:51:40:26:
b4:e6:b3:e3:d4:a8:05:0e:b4:5e:dd:47:b8:0f:9e:
1d:7b:ee:66:d4:c7:4c:e9:12:a0:b7:54:eb:d1:79:
96:e2:f2:5a:6f:37:23:a7:20:85:70:80:e7:4b:9c:
de:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:68:93:E9:40:AC:AF:8F:6A:F2:ED:53:64:5B:2B:B1:66:36:8C:2B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bfe6bbcb-7705-3b1b-9527-65e2aac5558f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2d80:2f00::/41
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
85:0a:bc:46:eb:e9:03:90:84:17:c9:20:06:6f:f3:00:9d:9b:
2b:59:ac:f4:da:85:e3:6d:cf:e7:a3:0b:6b:db:7c:10:ca:12:
38:39:4e:cf:78:60:5c:ba:6f:a5:b1:1e:16:10:ed:12:f6:2d:
09:28:af:34:a6:92:09:24:e7:04:67:2c:f2:4f:14:1a:b6:92:
24:8c:70:85:9b:66:e5:a0:ff:5c:8b:e3:45:c3:e6:85:01:36:
be:df:23:f2:4e:a1:b4:f8:f6:e1:c1:f0:f2:e9:46:de:91:58:
42:d9:e8:6f:2d:03:e4:a7:1a:47:c6:14:4d:38:ad:51:1b:e5:
65:d9:8e:a8:c1:fe:f1:77:28:36:b1:a2:40:b2:e4:8a:72:29:
ab:e1:a3:e1:f1:af:c8:5a:31:1e:c1:23:d1:ed:6b:a7:31:e6:
5d:f4:dd:5f:92:cc:20:33:c1:17:4c:e3:88:6c:67:d1:64:78:
04:62:7d:9f:e7:9a:e5:6a:a1:7f:ef:93:e0:1f:4a:81:79:e1:
e5:8b:8d:a9:c1:ef:52:aa:c2:d2:14:79:75:47:20:9c:7f:31:
19:6f:cb:66:92:41:47:c0:e6:4e:fa:99:4f:bb:9f:dd:34:68:
6d:19:42:7f:2d:ea:87:d5:e3:dc:55:a3:33:3a:66:2d:85:2d:
6b:03:30:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:27:57 2025 by rpki-client