Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436/2d7daa58-218f-39af-b1a6-d801c0aa78ec.roa
File: 2d7daa58-218f-39af-b1a6-d801c0aa78ec.roa (raw, json)
Hash identifier: V8/1MSF/osXZMBj8ZuHMNdb//1o0DSeRwnCqo65ZoOo=
Subject key identifier: D7:CE:F9:1C:FA:29:19:3A:C0:65:74:A5:B9:33:C5:E4:C6:61:F9:52
Certificate issuer: /CN=03b51393-7784-45a0-9621-168719782436
Certificate serial: 010D0C9F432858494C5E38D2BE1D3720C4730660
Authority key identifier: EC:99:4B:99:9B:94:26:05:74:C3:31:52:EC:B9:D2:FA:8E:3F:05:22
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436/2d7daa58-218f-39af-b1a6-d801c0aa78ec.roa
Signing time: Mon 24 Mar 2025 21:25:06 +0000
ROA not before: Mon 24 Mar 2025 21:25:06 +0000
ROA not after: Sun 22 Jun 2025 21:25:06 +0000
asID: 10384
IP address blocks: 2604:700::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:4c:5e:38:d2:be:1d:37:20:c4:73:06:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b51393-7784-45a0-9621-168719782436
Validity
Not Before: Mar 24 21:25:06 2025 GMT
Not After : Jun 22 21:25:06 2025 GMT
Subject: CN=38dddb0a-7530-44d3-a94c-2f3315fa81a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:60:21:30:83:56:30:b8:b5:d6:80:1b:5e:e4:
91:ad:02:d7:c0:3b:76:bb:cf:89:ec:7c:e3:a4:17:
3c:b0:60:98:89:9f:6d:6b:3b:39:11:11:de:f0:4e:
ed:5d:21:37:b0:24:4d:56:88:c6:2a:27:39:33:77:
9b:56:9b:8e:ac:48:37:37:01:b6:9e:9d:89:23:0d:
07:85:c6:14:5e:fc:37:15:00:40:7a:d8:85:ef:92:
24:83:a4:e0:4f:a0:13:db:c1:d5:d6:c8:81:01:87:
3e:23:b9:1d:69:dd:54:e1:de:81:4c:e9:4f:33:da:
e9:a7:f3:ed:4c:07:fb:5f:f5:f8:2c:aa:3e:a1:77:
8a:fd:a2:03:05:10:17:e3:a4:e4:19:94:0b:4c:48:
d1:e8:fa:80:9f:d8:fd:14:93:fe:73:d1:62:2f:93:
11:43:7e:90:9f:53:57:59:f8:04:46:4b:c9:bc:bd:
e5:2d:73:3d:71:3a:8f:d5:c6:fa:86:e9:d3:65:b1:
15:51:69:90:a7:2e:42:d8:4e:a5:f4:65:fe:41:12:
fd:af:67:ee:37:45:c3:e1:8c:c4:81:6d:61:d5:df:
50:98:5f:de:63:9d:73:de:ab:bf:0e:26:f8:90:1f:
f2:7e:5e:c4:07:13:cb:ef:70:54:81:72:18:9b:7c:
e7:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:CE:F9:1C:FA:29:19:3A:C0:65:74:A5:B9:33:C5:E4:C6:61:F9:52
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436/2d7daa58-218f-39af-b1a6-d801c0aa78ec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436/03b51393-7784-45a0-9621-168719782436.crl
X509v3 Authority Key Identifier:
keyid:EC:99:4B:99:9B:94:26:05:74:C3:31:52:EC:B9:D2:FA:8E:3F:05:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:700::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
17:19:82:c0:fa:ef:66:84:fe:12:4a:e4:8f:19:a6:37:3e:7d:
71:72:8e:77:a7:06:c5:0b:ab:a0:c2:46:ee:12:54:b0:8d:72:
5f:56:58:0c:e6:27:c0:c6:a9:26:3b:64:0e:e7:d8:18:d3:08:
8a:53:5d:03:9f:c8:9b:3b:5d:0c:05:c4:10:27:24:36:75:4e:
e0:79:f8:0e:d0:4b:68:7b:37:d1:f0:c4:9c:19:5a:b8:94:3b:
44:11:2c:54:33:8f:30:a1:97:91:00:56:45:f9:ca:23:b3:f8:
5f:2d:4b:82:66:b4:b6:43:32:90:16:9b:e8:e2:dd:47:3b:78:
0a:b5:3c:10:cf:6b:db:d5:a9:5a:1e:a2:32:25:71:80:6d:80:
6e:2f:be:1d:da:8f:06:0f:df:0a:e3:68:32:af:ed:04:50:44:
e8:5c:ba:a5:e4:8b:d5:42:48:6b:2b:18:01:f8:32:9d:ce:5f:
ae:37:40:7c:d8:14:9d:01:6d:8b:df:2a:c1:45:52:82:b0:36:
82:75:04:4c:28:31:43:d6:3d:84:03:a0:52:b7:9b:ee:a2:76:
15:c2:88:66:ec:fa:4b:42:09:2b:fc:f0:46:96:f9:ab:2d:8f:
db:6c:7c:95:40:1b:68:94:53:3e:0a:39:5a:d0:1a:89:d6:f4:
33:ec:41:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:35:56 2025 by rpki-client