Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/877a91b0-30c0-3d8b-aedb-9fc49da19a55.roa
File: 877a91b0-30c0-3d8b-aedb-9fc49da19a55.roa (raw, json)
Hash identifier: ac0LShLkck1fOCfEpRKhxIvi5wL6E3XA+JJqbTwm7Mc=
Subject key identifier: CC:6A:AB:1B:CA:AE:F9:7F:43:95:C1:04:E2:5E:C6:98:1B:2B:68:36
Certificate issuer: /CN=464a5304-974d-4c86-9829-2f4d8dc9b9b6
Certificate serial: 010D0C9F432858492AD85EDB1D4B5DC482460800
Authority key identifier: 72:07:A6:10:FC:33:25:75:21:16:48:2F:A4:4F:6D:D6:D5:77:30:D5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/877a91b0-30c0-3d8b-aedb-9fc49da19a55.roa
Signing time: Wed 12 Mar 2025 21:13:44 +0000
ROA not before: Wed 12 Mar 2025 21:13:44 +0000
ROA not after: Tue 10 Jun 2025 21:13:44 +0000
asID: 27539
IP address blocks: 2604:a900:2000::/35 maxlen: 35
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2a:d8:5e:db:1d:4b:5d:c4:82:46:08:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=464a5304-974d-4c86-9829-2f4d8dc9b9b6
Validity
Not Before: Mar 12 21:13:44 2025 GMT
Not After : Jun 10 21:13:44 2025 GMT
Subject: CN=58e917ff-5380-4aae-9add-9b4a64307f77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:60:6f:06:4d:aa:f3:70:94:c9:50:ce:3f:df:
d8:d8:a1:7c:c4:cd:fc:6d:a3:bd:90:a6:b0:ff:f4:
df:44:a1:1d:5f:c9:7f:80:fb:11:a9:39:f6:84:8d:
d8:7e:75:79:43:e9:27:da:3d:40:f6:0e:7f:0b:9e:
15:26:fc:a5:a3:a1:83:c0:79:89:10:a6:7c:d1:43:
fe:34:7c:de:9c:92:41:04:3a:4d:2b:88:01:93:e5:
88:95:80:27:e1:04:cc:35:03:b3:42:de:9f:b4:c0:
b1:1e:9d:58:13:2a:a2:28:4e:be:da:38:19:b4:67:
20:4e:91:01:ce:51:f3:d3:28:8c:d9:55:40:69:f4:
75:8e:e7:e4:a7:3a:ec:a7:6d:68:c8:d5:81:4b:61:
52:44:ef:49:84:52:03:37:6a:56:94:06:51:35:82:
76:35:da:fa:ab:32:0f:c3:c0:fe:cf:6a:c9:d0:96:
01:ae:e1:01:b3:0e:1d:89:0a:59:15:37:08:c6:d7:
a5:5d:0e:78:e2:a3:1f:d6:3e:bf:92:c4:6b:94:f7:
55:f1:ae:f9:85:78:a6:a6:b5:e0:67:c2:82:3d:48:
d2:c1:72:1f:62:a9:63:1d:62:46:d6:67:e8:86:c4:
20:11:c1:59:47:30:d6:5f:fe:19:e3:f9:b5:92:34:
59:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:6A:AB:1B:CA:AE:F9:7F:43:95:C1:04:E2:5E:C6:98:1B:2B:68:36
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/877a91b0-30c0-3d8b-aedb-9fc49da19a55.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/464a5304-974d-4c86-9829-2f4d8dc9b9b6.crl
X509v3 Authority Key Identifier:
keyid:72:07:A6:10:FC:33:25:75:21:16:48:2F:A4:4F:6D:D6:D5:77:30:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:a900:2000::/35
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7e:38:cc:50:15:77:9d:7e:66:2d:d2:36:06:6a:44:2b:a7:64:
e3:86:7c:69:d9:6b:5e:ff:5a:6e:34:63:c0:47:de:39:85:82:
14:3f:7e:89:89:ae:9f:f1:aa:22:90:e6:3c:81:c6:18:d4:e2:
fc:cd:51:13:4f:4b:c3:fa:b0:5c:12:2f:c4:a1:25:0c:cc:c8:
42:52:73:59:20:5d:d1:bf:8b:9e:88:84:ae:ff:24:57:cf:06:
e0:4b:a3:78:4c:7e:69:e1:5c:fc:ef:e6:53:ce:4c:3c:2a:b1:
03:a6:3f:fd:ae:08:b6:cb:92:1f:e7:0b:3a:f0:54:1c:d8:f0:
54:3f:46:d5:36:3e:a4:e7:f8:5f:60:c8:64:c3:9f:53:3d:be:
33:60:a5:2c:c7:4e:12:8b:fb:c8:e4:66:f6:88:d7:06:63:88:
d8:59:a1:76:2e:c3:12:9d:b4:ab:c2:c7:1d:36:83:9e:53:99:
ea:55:be:c2:95:b3:dd:00:bf:f0:7d:4d:7f:63:e9:63:fa:43:
e3:05:20:87:d5:ae:93:43:6e:06:62:62:ea:12:f5:93:c1:21:
2c:72:38:e9:6a:c7:8f:7a:51:74:29:38:e4:de:ab:40:44:be:
4e:7f:4b:57:69:ab:fa:26:50:dd:bc:1d:b6:19:3a:15:04:4b:
5a:c0:39:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:43:09 2025 by rpki-client