Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/f339bdc8-a92d-30ce-8a38-de9d0640c5b2.roa
File: f339bdc8-a92d-30ce-8a38-de9d0640c5b2.roa (raw, json)
Hash identifier: e9sG4fUFOBU35cKEZstd9KjBBNz6L6yd0PZaBH32dxs=
Subject key identifier: D2:00:B3:AF:F3:B4:28:6B:3A:F0:79:B9:A9:A0:5B:37:27:FF:A8:0A
Certificate issuer: /CN=3efd7529-38b1-472c-9d5b-d87382d088a0
Certificate serial: 010D0C9F432858494B641836AA2C711042074940
Authority key identifier: 5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/f339bdc8-a92d-30ce-8a38-de9d0640c5b2.roa
Signing time: Mon 24 Mar 2025 13:00:53 +0000
ROA not before: Mon 24 Mar 2025 13:00:53 +0000
ROA not after: Sun 22 Jun 2025 13:00:53 +0000
asID: 394285
IP address blocks: 2606:a100:1000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:4b:64:18:36:aa:2c:71:10:42:07:49:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3efd7529-38b1-472c-9d5b-d87382d088a0
Validity
Not Before: Mar 24 13:00:53 2025 GMT
Not After : Jun 22 13:00:53 2025 GMT
Subject: CN=608a22b5-a62e-446a-b7a0-0e85c8f18161
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:16:d7:99:f3:ca:29:9a:39:e6:fe:67:e1:c6:
91:6b:87:bb:5a:71:70:6e:67:a6:09:a6:2d:9e:8f:
fa:12:42:b8:da:5f:35:c2:26:be:de:2c:5e:e1:3f:
bf:ad:f0:fd:c4:2c:4c:1e:d4:a9:74:9f:3d:51:6b:
d7:ed:85:be:92:c0:a3:63:d2:12:2a:5c:b8:49:bd:
52:e3:ad:e7:9d:cc:a2:02:10:0d:2d:78:48:f6:08:
61:e8:05:82:41:3b:1a:bd:53:30:86:b0:ea:b1:85:
0c:0e:84:00:e3:65:47:ec:2d:8f:13:aa:46:7c:20:
24:1d:52:34:ca:5a:ea:5f:47:11:17:52:cc:c6:35:
7e:91:a5:bd:8d:b6:da:01:a0:e9:3a:88:04:ab:f8:
cc:a9:a6:75:13:19:ea:c9:1b:3a:3d:1a:6e:d3:1b:
b8:4d:13:03:6f:eb:c8:ac:4e:92:87:6c:c7:29:e5:
77:c4:79:d6:ed:a5:3d:0f:f8:f9:07:7a:f3:a3:40:
43:30:39:5c:7f:64:fa:1b:c1:4f:f7:b2:b7:34:48:
68:9f:f0:99:e6:6a:a0:b9:dd:61:60:4d:d0:77:40:
90:bf:8f:db:d7:a7:2a:a0:5a:ab:ac:46:17:97:b1:
8f:71:9c:1d:d2:cd:da:13:70:50:b1:41:ff:fd:44:
05:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:00:B3:AF:F3:B4:28:6B:3A:F0:79:B9:A9:A0:5B:37:27:FF:A8:0A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/f339bdc8-a92d-30ce-8a38-de9d0640c5b2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl
X509v3 Authority Key Identifier:
keyid:5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer
sbgp-ipAddrBlock: critical
IPv6:
2606:a100:1000::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
02:fd:85:83:1e:39:85:06:24:49:33:4b:9c:b1:0f:58:11:73:
64:dd:d2:77:2c:46:d9:1e:87:b1:b2:71:80:a9:7c:8b:96:54:
aa:08:c0:70:d0:3e:1d:2c:d0:82:d7:7f:a1:d0:de:e6:d4:fc:
7f:d7:c6:7b:b4:33:06:00:4f:3b:aa:97:14:37:d0:50:d8:84:
f7:9b:17:8d:1c:5e:fe:76:ac:9d:11:98:94:7d:44:e3:1b:9e:
b9:d2:44:1b:52:d5:6f:cf:95:41:d1:d2:1b:4f:09:b0:48:22:
13:5e:7c:a9:3b:9b:2b:96:f4:0c:98:cc:33:d0:4b:ad:b4:fa:
ad:73:02:58:d9:01:67:e7:7c:de:61:f6:4e:83:99:69:87:95:
55:69:b3:c9:83:f9:1b:ed:40:a0:e0:1c:02:de:72:72:37:da:
82:d2:1d:89:6d:49:13:59:18:a8:0c:f2:cd:ef:22:af:38:9f:
cf:d0:49:b0:1b:ac:ec:2a:7a:00:3f:19:1f:51:89:d5:73:2f:
b5:6b:25:4b:90:25:60:d1:21:31:85:af:8e:1b:df:ee:09:fa:
63:35:37:25:50:95:25:16:b4:21:40:21:4d:e9:f1:57:ab:64:
6a:4e:b5:b1:54:69:64:fb:92:05:fe:9b:7a:1d:86:e8:8c:6d:
5b:79:66:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 20:10:43 2025 by rpki-client