Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/a31b7ee3-6430-3b45-b786-7b55ca0b7b34.roa
File: a31b7ee3-6430-3b45-b786-7b55ca0b7b34.roa (raw, json)
Hash identifier: Yo0ahZ4pP5oTij7s3QWHPzM2aadJJOumR4dgtNCWbZg=
Subject key identifier: 72:71:36:39:26:DE:12:0B:EE:98:79:82:43:7D:05:5F:F1:D4:E1:C2
Certificate issuer: /CN=d6d708e8-5964-4587-8db1-e22545ec38a3
Certificate serial: 010D0C9F432858494BDAD45F4143F6D5888AD580
Authority key identifier: 96:4F:71:53:38:88:DA:C6:95:AE:5A:82:6F:EC:AF:3A:1A:5F:2C:74
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/a31b7ee3-6430-3b45-b786-7b55ca0b7b34.roa
Signing time: Mon 24 Mar 2025 17:00:22 +0000
ROA not before: Mon 24 Mar 2025 17:00:22 +0000
ROA not after: Sun 22 Jun 2025 17:00:22 +0000
asID: 21947
IP address blocks: 2604:300::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:4b:da:d4:5f:41:43:f6:d5:88:8a:d5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6d708e8-5964-4587-8db1-e22545ec38a3
Validity
Not Before: Mar 24 17:00:22 2025 GMT
Not After : Jun 22 17:00:22 2025 GMT
Subject: CN=5034f4c1-f8ba-4ce9-9324-a121fd6bc65c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:72:85:27:1c:15:d8:26:22:ba:4f:ec:3c:7b:
c7:62:61:41:f7:b0:55:f0:5a:bc:7b:03:0b:1e:8e:
a5:1b:49:9e:da:5a:d0:01:c1:6e:3b:a5:fb:19:da:
6f:a9:cc:40:90:12:30:09:cb:ad:6c:d2:a4:09:37:
3a:9c:c7:8e:42:35:bb:d6:fb:c3:36:ca:93:48:b8:
46:a1:1a:a8:0b:ec:90:f6:9f:0b:e4:8c:27:20:34:
ed:32:c0:bf:ab:a1:44:27:bd:65:e8:77:7a:b1:15:
fc:12:f4:51:69:35:cc:f9:ed:7d:78:12:6e:52:36:
b4:02:06:a2:ab:15:81:29:bb:90:92:a0:d9:ef:ee:
86:f3:a4:a7:1c:9d:47:0e:05:6e:a1:23:ef:b2:76:
90:52:2e:54:96:d5:99:99:c9:a9:84:9b:ae:70:5b:
8a:8a:f8:37:f3:bc:86:f9:fe:93:df:a1:d1:d5:e5:
2b:09:ca:3d:67:3a:aa:31:66:95:77:d1:4a:6c:ad:
b0:ca:14:83:56:ad:fe:2d:ae:2c:89:b9:67:bb:9d:
a6:96:56:c9:e2:e1:c8:ac:e4:14:26:4e:94:1b:d2:
5a:e6:d7:09:e7:af:38:79:71:7a:45:29:f1:18:5e:
27:eb:46:f3:89:86:38:25:2f:7e:85:6c:58:16:68:
6d:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:71:36:39:26:DE:12:0B:EE:98:79:82:43:7D:05:5F:F1:D4:E1:C2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/a31b7ee3-6430-3b45-b786-7b55ca0b7b34.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.crl
X509v3 Authority Key Identifier:
keyid:96:4F:71:53:38:88:DA:C6:95:AE:5A:82:6F:EC:AF:3A:1A:5F:2C:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:300::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
64:e6:07:55:80:be:fd:a6:f1:8e:d5:11:00:c0:4d:1c:e9:7d:
ae:6e:38:4a:6b:8c:80:ca:d1:6d:ca:7f:71:c0:de:fe:a9:68:
b9:e4:c6:fb:fb:dd:f5:93:60:4d:eb:c3:f4:c0:6b:bc:ba:d1:
a0:d0:55:f1:15:5f:20:53:0c:bf:e5:15:25:94:36:99:c3:b0:
17:9e:e1:2b:cd:6c:ce:5a:0f:b3:3a:e2:21:59:f8:7a:a4:6c:
05:11:c4:6c:b1:7b:9c:96:dd:d9:87:3f:f4:fe:c0:b0:b9:cd:
97:45:7e:12:2f:17:42:6c:fb:f9:e2:71:40:3b:43:49:d5:20:
d2:9a:b5:d8:c7:50:e1:6f:93:f0:79:40:70:73:9d:44:21:08:
b5:f2:9c:97:a5:e8:52:17:8a:cf:77:c5:a9:84:2d:67:aa:b7:
cd:a6:26:a0:ab:88:44:18:05:30:c9:a0:9e:5e:54:41:78:6a:
64:8e:e0:50:b3:72:b3:45:08:f4:0b:e4:f2:05:3f:fd:dc:5b:
cf:56:06:61:02:40:98:8c:3c:d8:58:9d:56:60:7c:da:3a:38:
bd:ec:1f:8e:12:02:16:95:b4:75:66:23:67:58:af:41:8b:0b:
49:21:dc:98:ba:9e:c8:0e:9e:c4:66:c0:4c:03:82:82:41:df:
3a:ae:1d:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:40:37 2025 by rpki-client