Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c1d9c2c1-8fb3-4b38-b6d6-9799b4e3772f/4038b20b-42b0-34fd-ab16-9e3f170db289.roa
File: 4038b20b-42b0-34fd-ab16-9e3f170db289.roa (raw, json)
Hash identifier: 5fkp2EPGra3vYBeRx2Sx1nOKfj3gLg4UFO/YslAT0Lc=
Subject key identifier: 41:9C:DE:78:8E:B1:73:40:FF:E9:56:62:65:6C:97:A3:D6:23:B5:67
Certificate issuer: /CN=c1d9c2c1-8fb3-4b38-b6d6-9799b4e3772f
Certificate serial: 010D0C9F43285848EA6F38A115759B55997D8000
Authority key identifier: 34:D2:66:90:77:48:44:01:19:74:D3:59:D7:85:15:C6:DA:CC:AC:CE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c1d9c2c1-8fb3-4b38-b6d6-9799b4e3772f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c1d9c2c1-8fb3-4b38-b6d6-9799b4e3772f/4038b20b-42b0-34fd-ab16-9e3f170db289.roa
Signing time: Mon 17 Feb 2025 19:30:08 +0000
ROA not before: Mon 17 Feb 2025 19:30:08 +0000
ROA not after: Sun 18 May 2025 18:30:08 +0000
asID: 397301
IP address blocks: 2604:30::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ea:6f:38:a1:15:75:9b:55:99:7d:80:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1d9c2c1-8fb3-4b38-b6d6-9799b4e3772f
Validity
Not Before: Feb 17 19:30:08 2025 GMT
Not After : May 18 18:30:08 2025 GMT
Subject: CN=1daffaca-ce47-4b0c-b266-c0d18f6e41a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:52:13:e9:6a:66:e1:02:e3:cd:dd:e5:0b:fc:
6a:f8:30:4c:c8:27:ad:7b:9a:b2:16:ac:4a:ef:b3:
95:cc:e4:ff:f6:2b:05:11:83:40:ef:87:85:ea:2b:
50:fb:53:37:51:23:a6:f4:b8:4f:5b:f5:ef:e9:83:
85:22:11:8e:f7:69:5d:26:b0:6b:5b:f9:80:aa:0f:
9e:f7:b5:50:0a:91:fb:a8:e0:bc:4f:a2:13:22:5b:
97:05:e4:1c:05:3e:30:0b:c9:f8:a6:2a:54:a5:d6:
5a:04:1c:2e:16:d7:a8:c9:64:04:e1:08:b0:ad:88:
e6:ba:1a:01:36:94:76:1b:f4:a6:dc:12:14:55:8c:
e9:11:c1:eb:1d:bc:b1:ce:1b:f5:f3:3f:c9:b1:80:
4f:46:74:7a:c0:8f:f1:52:16:c3:29:5f:d8:7a:e7:
31:11:cc:3b:c3:af:64:f2:e8:97:16:be:e3:11:e3:
56:be:66:b8:9c:8a:f0:df:c5:4d:bd:42:6e:33:4c:
c3:f8:fa:b6:75:cc:7a:1c:e1:71:03:8a:9b:32:a6:
84:cc:74:78:13:cc:d1:4c:0b:8e:c8:d9:f0:3c:51:
7e:00:dd:ba:6c:cc:62:7a:27:70:24:31:da:ba:6e:
b6:b2:b8:69:48:d3:fd:8e:03:ce:47:b1:73:b9:eb:
d7:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:9C:DE:78:8E:B1:73:40:FF:E9:56:62:65:6C:97:A3:D6:23:B5:67
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c1d9c2c1-8fb3-4b38-b6d6-9799b4e3772f/4038b20b-42b0-34fd-ab16-9e3f170db289.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c1d9c2c1-8fb3-4b38-b6d6-9799b4e3772f/c1d9c2c1-8fb3-4b38-b6d6-9799b4e3772f.crl
X509v3 Authority Key Identifier:
keyid:34:D2:66:90:77:48:44:01:19:74:D3:59:D7:85:15:C6:DA:CC:AC:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c1d9c2c1-8fb3-4b38-b6d6-9799b4e3772f.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:30::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
56:ff:3a:e8:29:cd:3f:5e:6d:5b:f9:65:61:8d:c5:61:c1:06:
31:29:ee:d3:73:94:e7:32:16:df:5c:6f:e4:9e:a2:5d:88:df:
96:2a:07:3f:d4:a4:7e:10:e0:e7:af:0b:9d:a7:02:28:bb:2d:
ce:12:e5:a9:1e:b8:2b:25:64:cd:f7:8e:36:85:63:95:71:d5:
76:e9:01:72:53:37:83:e0:ae:39:3b:d1:be:0e:06:49:db:4f:
f1:3c:39:1a:9b:24:af:90:7c:73:56:6b:a1:8a:b7:72:e8:ed:
a7:51:5f:cc:62:16:25:d3:50:f4:5c:54:49:bf:36:dd:1a:a0:
25:d9:1c:e7:f0:7f:9b:02:b2:43:a9:0b:2d:b0:ab:1f:a2:e4:
69:f1:37:a4:36:f6:8d:c3:fb:04:52:d3:78:ad:24:b2:cd:46:
b1:c5:67:39:e0:5d:4b:0d:b7:a4:cf:2d:37:2c:ec:22:d6:90:
a5:f4:7b:ad:87:72:52:29:8c:0a:b4:d0:01:2b:75:f7:4d:23:
24:8b:9f:86:a1:a7:8f:59:f9:02:e9:98:e9:3b:b1:ea:c6:1d:
97:a6:16:d3:f8:15:23:2c:b4:0b:61:86:9c:6d:a4:88:f2:2d:
29:39:34:5f:84:a9:60:a3:4c:8e:50:a0:7a:70:a7:46:ad:b2:
fa:5d:72:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:09:00 2025 by rpki-client