Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/da325a2d-d4ce-325d-aa23-f0d25fcc7f5d.roa
File: da325a2d-d4ce-325d-aa23-f0d25fcc7f5d.roa (raw, json)
Hash identifier: 3w9ubTOFnFXcGMpDKH0Z75psE6Hke0wAjAMDqfdoqu0=
Subject key identifier: 93:17:2A:B9:5E:13:E4:34:E5:BA:74:5A:22:7B:98:BA:C6:42:A6:9A
Certificate issuer: /CN=3efd7529-38b1-472c-9d5b-d87382d088a0
Certificate serial: 010D0C9F432858494B6418AF0A5107DA4AFDC380
Authority key identifier: 5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/da325a2d-d4ce-325d-aa23-f0d25fcc7f5d.roa
Signing time: Mon 24 Mar 2025 13:00:53 +0000
ROA not before: Mon 24 Mar 2025 13:00:53 +0000
ROA not after: Sun 22 Jun 2025 13:00:53 +0000
asID: 394285
IP address blocks: 2606:a100:6000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:4b:64:18:af:0a:51:07:da:4a:fd:c3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3efd7529-38b1-472c-9d5b-d87382d088a0
Validity
Not Before: Mar 24 13:00:53 2025 GMT
Not After : Jun 22 13:00:53 2025 GMT
Subject: CN=ff6e0a22-0195-4682-b5b8-6b41b829c44f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:30:84:7e:84:71:d0:ea:c1:ad:5e:e3:a8:83:
13:99:dc:36:09:e2:46:7a:48:cf:82:d1:4b:6f:0b:
c5:cf:ee:66:9c:a1:b2:22:54:9f:58:86:e6:7e:00:
28:e5:2e:54:02:bd:06:ef:3c:fe:3f:28:61:4f:cd:
0f:99:6f:d4:b7:5c:3e:f5:d8:5d:64:cb:3e:50:28:
ed:33:e7:da:c2:fe:4c:8f:1b:02:02:ef:09:70:f5:
3e:ff:cd:6a:65:42:93:99:cd:aa:05:c5:d3:28:96:
67:09:1f:58:f2:00:1b:02:3a:3f:10:f7:b8:93:76:
6e:3c:e0:67:96:9d:60:a9:76:f5:c5:18:93:d4:45:
5f:ac:18:de:78:ad:b8:30:42:b0:65:33:bc:94:44:
88:c8:53:9a:fc:5e:25:1e:50:25:58:b4:83:c4:cb:
ed:be:b8:36:99:2d:58:1b:fd:df:67:c5:3f:3c:04:
33:ff:4a:81:b5:12:73:70:04:9e:d0:82:29:b7:e3:
15:05:bc:1b:3d:5f:10:97:bb:c6:81:eb:dd:f0:bc:
9e:52:e2:5d:86:e2:0b:0f:6a:ec:95:51:54:09:87:
cb:dd:a4:97:ce:81:81:67:b7:a9:4f:d7:27:59:4b:
72:50:85:e5:53:cf:9c:e7:17:bd:bb:ac:f3:11:be:
7c:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:17:2A:B9:5E:13:E4:34:E5:BA:74:5A:22:7B:98:BA:C6:42:A6:9A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/da325a2d-d4ce-325d-aa23-f0d25fcc7f5d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl
X509v3 Authority Key Identifier:
keyid:5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer
sbgp-ipAddrBlock: critical
IPv6:
2606:a100:6000::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
51:94:3a:4a:cb:5e:b9:cd:7e:7c:80:f6:56:1a:19:67:ad:86:
47:31:f6:5a:89:e4:e9:04:dd:d0:bd:69:2f:97:12:e7:0b:9e:
23:51:ee:c9:56:c2:b1:7f:07:90:c7:d3:62:00:d3:72:9a:99:
b3:a0:92:5d:7d:fa:ed:b4:f3:f2:0b:17:4e:31:06:a8:99:0f:
3f:df:88:c0:87:eb:68:1e:45:fe:82:be:4e:73:e0:84:f5:06:
9a:e4:4d:d5:61:3d:ac:0b:aa:77:9b:18:74:33:46:23:79:69:
8f:5e:62:75:a2:9d:c6:25:3b:52:20:03:f9:55:b4:ea:2e:18:
ec:c2:cc:53:9e:84:99:57:8c:e3:e8:ee:f9:37:40:c9:01:cb:
0e:aa:a3:22:b4:e9:0d:9f:64:e2:a1:54:07:53:22:e6:00:34:
80:79:38:73:cc:2a:62:5e:87:77:bc:4a:84:8e:04:0b:a4:5d:
c7:13:95:f4:81:a5:1b:29:22:2a:39:fb:82:78:e0:7f:cb:a3:
91:84:97:5f:af:e1:12:32:c5:4b:cf:a6:6d:f3:83:19:c2:08:
71:92:77:e5:65:e8:61:66:97:e4:5d:71:78:ce:20:0f:3b:f1:
fd:7e:0d:a4:84:3f:aa:fa:8b:bc:4f:36:a6:49:6c:49:fc:ac:
70:ea:80:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 20:12:51 2025 by rpki-client