Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d62c069a-b001-30e3-9b7f-cb1f98a5efb0.roa
File: d62c069a-b001-30e3-9b7f-cb1f98a5efb0.roa (raw, json)
Hash identifier: ahPiM7nGx+h6XDjHg0IWMrLAfQ/N7S4e4NqMWbPmXEY=
Subject key identifier: D8:3E:0B:B1:6F:4A:23:02:66:94:C0:B6:46:AB:E0:56:F8:5E:FB:15
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F43285848B737D049192A07A622E83280
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d62c069a-b001-30e3-9b7f-cb1f98a5efb0.roa
Signing time: Thu 30 Jan 2025 11:12:16 +0000
ROA not before: Thu 30 Jan 2025 11:12:16 +0000
ROA not after: Wed 30 Apr 2025 10:12:16 +0000
asID: 30036
IP address blocks: 2604:2d80:2600::/41 maxlen: 41
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b7:37:d0:49:19:2a:07:a6:22:e8:32:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Jan 30 11:12:16 2025 GMT
Not After : Apr 30 10:12:16 2025 GMT
Subject: CN=15a1f9c0-961d-4dcc-a90a-abf872589c69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:39:1a:71:60:82:c4:e4:d9:5b:17:60:dd:34:
37:05:92:56:99:f6:9e:b2:ea:d5:31:e5:82:e6:a7:
9b:ff:ad:e4:fb:83:19:b1:66:42:f6:2c:c6:71:9e:
76:c2:ea:37:72:ef:b9:46:f7:c8:da:3d:b9:21:e9:
11:7d:47:eb:80:62:aa:3d:59:bb:bd:9c:e5:23:67:
ed:41:2f:9f:14:65:92:43:50:7d:bc:a3:c1:87:77:
3e:0a:da:a4:2d:97:66:1c:fc:b9:f2:3b:a5:89:08:
8e:fe:b3:85:c3:2f:c1:22:87:1d:57:ad:bf:fd:e2:
89:55:71:62:e7:68:b9:35:39:5b:4e:75:88:78:8d:
c6:3f:3a:5d:e0:9a:e8:43:6c:1e:14:23:f5:7a:81:
9d:ef:e0:88:89:6f:3f:37:d6:4f:4e:25:e4:5a:b8:
8f:4a:ff:c9:87:33:fc:99:df:f4:0e:b9:f9:fa:4e:
4e:39:1f:82:01:f9:cb:18:fa:b3:57:50:65:b4:3b:
b5:34:de:40:7c:28:3b:d8:b5:76:20:94:51:3a:32:
fc:31:b1:3b:b3:1e:9d:56:16:28:c0:69:f3:79:a2:
0b:21:07:10:92:84:52:95:d6:cf:b0:68:22:71:43:
5e:0e:c0:c5:5f:a8:f7:6a:49:70:c4:cf:53:dc:f1:
0f:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:3E:0B:B1:6F:4A:23:02:66:94:C0:B6:46:AB:E0:56:F8:5E:FB:15
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d62c069a-b001-30e3-9b7f-cb1f98a5efb0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2d80:2600::/41
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1b:a2:a0:af:9e:67:b4:8a:b1:58:94:ed:18:7d:7e:e3:9a:64:
f3:fd:61:12:4d:3a:4e:19:1a:3b:8f:c7:7c:69:4b:3d:82:88:
51:bd:5b:6f:ee:f4:9d:e6:a5:e9:44:26:98:d8:7d:62:40:ca:
a5:c5:4f:d8:36:0c:2b:a9:ae:d7:d0:2f:66:b9:b5:59:50:62:
20:d8:fc:25:e7:5b:bf:69:ca:74:45:00:22:c9:58:dd:fe:3a:
c7:00:b0:02:52:0f:e0:c2:02:df:b5:4c:42:e5:db:56:26:67:
aa:88:0a:f9:d3:c1:06:81:17:90:83:26:d9:51:ee:31:a2:29:
fd:10:fe:e2:74:2b:a0:4f:1f:df:3e:12:01:01:5b:d7:61:93:
b0:e2:58:ab:3d:c3:d5:0b:b2:23:61:d3:d2:b8:39:7f:68:53:
e8:ad:17:9d:31:26:9e:2d:37:c9:b9:fa:ae:ec:84:52:54:4a:
c7:39:41:c3:e8:e1:04:b8:c1:27:74:4f:4b:72:95:c8:4c:1d:
d9:b9:b5:c7:a3:fe:75:ab:10:47:1d:15:2f:4d:11:a9:71:5c:
b5:2d:04:3f:1e:a2:98:80:7a:19:1d:cb:99:ea:a5:8d:e6:02:
74:c1:d5:39:08:fa:db:01:30:b8:9b:20:25:74:59:5c:15:e2:
32:1a:bf:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:53:41 2025 by rpki-client