Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6/574c2d5e-1fe1-3d9c-9a50-a9527888b0ef.roa
File: 574c2d5e-1fe1-3d9c-9a50-a9527888b0ef.roa (raw, json)
Hash identifier: CHaiQCRBijQ3VmvPErw8m2ywXOnEAsctxeoiMKZZovY=
Subject key identifier: C3:C3:1D:26:E8:C0:5B:E6:B6:EB:5D:3B:6F:71:B2:DF:FA:59:E6:77
Certificate issuer: /CN=3d291b6a-1b30-4fc0-b1dd-582ab98347d6
Certificate serial: 010D0C9F43285848617C1F7517CBD77C9B6B1A60
Authority key identifier: BC:F7:6D:C8:7E:F4:7A:0B:B2:C7:B8:46:A4:17:5E:45:ED:F8:72:11
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6/574c2d5e-1fe1-3d9c-9a50-a9527888b0ef.roa
Signing time: Mon 30 Dec 2024 18:10:23 +0000
ROA not before: Mon 30 Dec 2024 18:10:23 +0000
ROA not after: Sun 30 Mar 2025 17:10:23 +0000
asID: 36850
IP address blocks: 2610:28:3090::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:61:7c:1f:75:17:cb:d7:7c:9b:6b:1a:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d291b6a-1b30-4fc0-b1dd-582ab98347d6
Validity
Not Before: Dec 30 18:10:23 2024 GMT
Not After : Mar 30 17:10:23 2025 GMT
Subject: CN=e7f33d72-7f67-4f2f-9f69-b9461785ad2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:bd:6d:49:b1:fa:9b:66:b2:55:87:eb:2f:86:
e0:0a:4e:ba:34:e0:84:9e:25:65:f9:17:71:5d:10:
5c:c2:50:19:09:82:6b:07:8c:76:d5:b6:fd:f9:6e:
7c:f8:42:ab:9e:43:ea:fd:97:e9:e9:0d:01:5d:a4:
64:f3:c5:7c:c3:60:36:26:93:f9:a7:8d:17:52:1f:
a5:90:55:ca:75:c8:aa:55:4c:21:00:e6:0e:a6:b3:
3d:52:50:83:dc:b0:48:bf:6b:53:42:83:a9:ee:5b:
cb:92:13:4d:53:1e:30:2f:38:52:02:2c:94:e2:1d:
98:b7:fa:ae:16:cc:39:f4:75:b8:18:76:41:b7:7a:
80:be:d5:11:14:46:9f:f5:5c:de:5e:c5:5f:5e:60:
b9:3b:5f:51:a7:9f:c1:7c:e6:fd:a9:59:59:e0:17:
34:dc:0a:1d:5a:3e:58:9b:8f:8a:9c:2b:02:0d:ed:
2b:69:64:d9:53:65:33:a5:ab:3d:de:cb:bd:2b:ac:
ed:f5:0b:fa:72:ff:71:6e:08:68:4a:11:de:e5:e6:
81:36:49:29:8c:4a:10:ae:d8:12:06:99:5e:ea:99:
c6:f9:77:4d:fa:fd:87:f8:17:76:2b:ff:7d:55:49:
55:fe:cc:8c:03:b7:09:52:cb:60:19:b2:f2:eb:e9:
22:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:C3:1D:26:E8:C0:5B:E6:B6:EB:5D:3B:6F:71:B2:DF:FA:59:E6:77
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6/574c2d5e-1fe1-3d9c-9a50-a9527888b0ef.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6/3d291b6a-1b30-4fc0-b1dd-582ab98347d6.crl
X509v3 Authority Key Identifier:
keyid:BC:F7:6D:C8:7E:F4:7A:0B:B2:C7:B8:46:A4:17:5E:45:ED:F8:72:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6.cer
sbgp-ipAddrBlock: critical
IPv6:
2610:28:3090::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7e:92:3c:0e:15:f3:c2:59:5a:45:7e:92:ce:f8:94:dd:07:31:
a2:38:c2:28:16:60:f3:59:dd:d7:e8:bf:b5:f1:eb:8e:a7:7d:
3d:3f:7a:b5:70:ed:34:6b:61:c7:f4:4e:48:83:6f:21:d4:6b:
fb:59:a1:77:3c:ad:c9:a2:e8:18:d2:ec:7b:64:89:aa:74:c2:
04:00:a3:3b:07:12:c7:b7:f6:da:6f:63:f6:06:3f:e9:99:65:
db:38:77:21:1a:78:e1:b4:65:44:80:5f:bb:69:0c:0e:fe:ce:
57:7c:76:65:e8:00:5a:95:d7:c7:e8:8a:0f:91:49:8e:cb:f0:
7e:f3:c7:1a:e1:3f:83:ba:8f:6a:01:ed:94:8b:9a:f1:f4:ca:
fc:b2:e0:15:da:35:38:aa:c4:7a:86:25:16:f4:7c:7d:a3:be:
ec:60:44:58:0a:e9:b0:27:f8:84:dd:ec:39:a3:92:43:bc:25:
73:f0:ef:e6:f2:67:4f:65:b0:ad:02:de:eb:a7:59:f5:87:f3:
b1:83:59:b6:dc:92:3b:15:d7:1b:a0:4a:b8:c9:31:80:76:1f:
25:7e:f3:9b:a9:02:82:62:b3:f6:5b:b1:3c:a6:05:36:e7:fa:
fb:c8:2b:4f:f1:1c:7f:cf:e1:cf:67:f3:53:4c:cb:72:4f:67:
5c:cc:d2:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:22:30 2025 by rpki-client