Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cb81fcf7-f027-3146-8959-ed97fd895c7c.roa
File: cb81fcf7-f027-3146-8959-ed97fd895c7c.roa (raw, json)
Hash identifier: rTAepLVlorOm4iCTdIGuE+g3ogrHKW4TeaOAkp7dxIw=
Subject key identifier: 3B:0F:06:3D:91:C4:0C:9A:3B:6C:42:0D:41:F2:C4:CF:95:C8:11:7A
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F43285848C580E958B7CD8022F54A89B0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cb81fcf7-f027-3146-8959-ed97fd895c7c.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 30036
IP address blocks: 2604:2d80:b380::/41 maxlen: 41
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:80:e9:58:b7:cd:80:22:f5:4a:89:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=e8abc938-b7c1-4f05-8105-100fef38e4dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:5a:e3:70:67:ef:eb:58:60:70:f3:24:06:ea:
73:eb:b1:b3:37:d8:08:87:36:28:b2:fb:24:30:75:
d2:83:d1:29:cd:08:ad:be:5d:eb:00:6f:1f:f7:db:
40:dc:49:24:84:6d:ac:87:82:36:2f:c1:ff:1c:cb:
82:ae:f1:2a:d8:59:f3:7a:1d:13:c9:9d:d9:a6:a9:
5a:c9:a1:4b:5f:b1:0f:af:26:a0:07:3b:6c:5a:b1:
27:af:4e:b0:c8:ca:45:0b:c1:80:38:d5:de:59:bf:
4d:98:46:55:5f:ae:d8:4e:74:80:96:8a:3e:c6:22:
f6:78:16:b7:50:6e:7b:1c:b9:da:00:10:86:ac:5f:
f3:3e:45:bb:25:15:00:e4:3c:1a:ab:28:c0:3d:6c:
58:6d:b5:a6:b6:b1:5c:4a:67:c8:be:97:7d:e2:29:
6d:de:e2:f1:25:03:f0:f4:4d:3e:1f:d2:77:70:3a:
f6:0b:32:ec:4d:10:15:b0:14:f0:ef:11:ad:9d:17:
3b:4a:a6:6e:8a:45:9f:48:d8:37:44:e7:4d:5f:a3:
48:9c:b3:9d:37:b2:31:08:97:7c:cd:fc:ca:84:0b:
8f:76:89:a0:b4:a0:ef:df:36:4a:fc:f5:50:45:1a:
0d:51:7f:fa:1d:87:60:7b:59:9f:15:bf:4d:7c:04:
d3:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:0F:06:3D:91:C4:0C:9A:3B:6C:42:0D:41:F2:C4:CF:95:C8:11:7A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cb81fcf7-f027-3146-8959-ed97fd895c7c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2d80:b380::/41
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
22:a9:d1:8c:95:52:c9:80:2a:94:5d:13:d7:9c:55:c1:23:b3:
92:a1:4f:98:dc:bb:86:b7:9c:df:57:47:35:29:f6:09:88:b7:
b3:be:17:ef:af:2c:84:59:9e:51:e1:b7:40:88:d9:49:79:5c:
e7:e7:4f:f1:d0:53:ee:ef:0c:5d:ce:3e:17:5a:e8:0d:cc:51:
a6:67:e6:7f:7b:1d:50:e8:9e:39:84:40:77:cd:29:6e:c5:36:
39:04:f6:aa:83:b5:66:f9:6a:53:c4:97:f8:29:8d:21:2c:8e:
63:5e:ae:ed:a4:8c:d1:25:22:0e:ac:86:07:a0:f7:19:20:79:
ce:50:92:44:75:de:fb:fb:5e:f2:48:7d:96:ac:b2:c9:5f:89:
5d:c0:ee:ee:c1:09:64:8a:cd:c6:46:7b:73:cd:f5:77:8a:7b:
ab:82:ba:43:95:c2:fe:a4:8a:62:51:99:11:4a:c8:be:98:5d:
e9:6f:eb:db:4b:d2:cd:d5:d9:0a:30:8e:ca:a7:cf:76:46:5a:
3a:a2:7c:1a:4b:96:07:82:b5:8a:f5:6a:2a:18:f2:f2:db:0d:
af:e2:eb:5e:8f:f2:47:5c:72:d6:11:43:93:1d:8d:7f:92:6b:
dc:92:9b:b4:8f:41:71:a2:94:1f:0b:17:c8:ff:c3:fc:82:63:
23:61:56:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:55:01 2025 by rpki-client