Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/123f721a-ef6b-3594-aee1-809863a3160b.roa
File: 123f721a-ef6b-3594-aee1-809863a3160b.roa (raw, json)
Hash identifier: IiU5JDgTSwuTapmJ2SunXlg4tpVbhNE8m6v+0K5XYhw=
Subject key identifier: 29:B3:7D:37:55:82:66:C6:8B:DA:15:C4:F2:F4:33:E5:44:DF:FA:20
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F43285848B737A52934CF42EB9F40D280
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/123f721a-ef6b-3594-aee1-809863a3160b.roa
Signing time: Thu 30 Jan 2025 11:11:56 +0000
ROA not before: Thu 30 Jan 2025 11:11:56 +0000
ROA not after: Wed 30 Apr 2025 10:11:56 +0000
asID: 30036
IP address blocks: 2604:2e8c:a000::/38 maxlen: 38
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b7:37:a5:29:34:cf:42:eb:9f:40:d2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Jan 30 11:11:56 2025 GMT
Not After : Apr 30 10:11:56 2025 GMT
Subject: CN=0cbcabc8-6c58-4326-baa1-749be47a78de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:91:da:7a:d3:99:31:1d:37:62:1c:22:15:90:
1b:a4:05:e2:17:26:a4:b0:e5:b5:14:9b:04:68:7f:
db:9b:d1:86:9b:1c:2e:14:76:82:4b:db:31:dd:5e:
2f:ad:d0:3b:a5:81:1a:f5:2e:a8:f6:b7:39:73:64:
b0:fd:75:3e:39:3d:12:05:fa:50:7a:d7:3f:c9:54:
75:57:59:c1:dd:b4:25:57:9f:99:fd:a4:2c:7a:77:
86:75:97:69:9a:48:94:89:4c:38:3a:4b:62:d9:d9:
3a:6e:ae:77:76:6c:ac:0f:9e:da:67:86:5c:96:f8:
55:6f:57:9f:df:b5:87:b3:b0:de:26:41:12:7c:99:
b8:d9:0a:13:f4:39:66:37:bc:a6:17:7d:11:42:4b:
96:e5:65:14:4f:1c:98:ff:5e:c7:8f:8b:68:94:c8:
39:6b:c5:59:48:02:7f:4c:8a:2a:40:6e:5c:30:db:
64:0f:e4:75:bc:4f:b3:f4:35:24:50:63:2c:38:0a:
36:07:81:71:5a:a4:cf:14:06:ca:60:f0:cc:e5:61:
09:35:ef:55:7a:79:1a:5e:84:bd:65:93:7a:b9:64:
ca:0d:4d:0b:6c:bf:3d:5d:7a:6b:01:44:57:6f:b4:
5d:39:bc:e3:a6:e2:5f:08:67:7f:64:10:0e:cb:14:
bd:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:B3:7D:37:55:82:66:C6:8B:DA:15:C4:F2:F4:33:E5:44:DF:FA:20
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/123f721a-ef6b-3594-aee1-809863a3160b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2e8c:a000::/38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
08:36:1a:2a:3d:74:5a:b9:4e:99:41:17:4b:06:73:19:ca:1c:
ba:08:cf:22:5a:4b:92:29:6c:61:b4:7d:67:7f:76:06:69:13:
19:30:58:80:ca:6d:b7:30:48:69:63:55:0b:49:76:2f:00:0b:
9d:87:bb:68:00:a2:ef:ee:93:5f:e3:cd:87:ea:87:9a:3d:a9:
3f:13:c0:d1:ef:86:cb:d4:93:9a:6e:74:fa:b8:76:59:b4:ff:
79:5f:39:e3:7e:a3:7d:9d:8b:91:9e:8b:91:d8:3b:ea:a2:85:
02:77:94:b4:1e:f6:6a:51:60:88:19:45:15:14:e9:d0:df:a0:
4f:86:cc:85:1b:62:83:3d:fc:2c:47:80:bb:e1:49:a7:28:c7:
bc:30:c3:92:81:46:7e:bf:8c:8b:89:55:da:98:0a:b2:8a:89:
be:e4:88:a1:72:8d:50:f1:75:93:ab:ec:e4:de:8b:43:82:83:
09:6e:bb:bf:78:eb:71:01:be:b4:5f:de:bf:6f:2b:c8:26:5c:
ac:5a:f1:17:f6:cd:2a:6b:1a:92:48:2a:cf:7b:f2:63:0b:75:
f0:2a:46:4f:0e:f4:9f:92:13:5c:ac:0f:cf:b3:3e:fe:92:b3:
d0:06:d1:9e:5d:de:49:69:49:67:8b:94:5c:3f:fe:9c:a8:bc:
d9:29:d4:d4
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEi3N6UpNM9C659A0oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5
YTE1MB4XDTI1MDEzMDExMTE1NloXDTI1MDQzMDEwMTE1NlowLzEtMCsGA1UEAxMk
MGNiY2FiYzgtNmM1OC00MzI2LWJhYTEtNzQ5YmU0N2E3OGRlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo5HaetOZMR03YhwiFZAbpAXiFyaksOW1FJsE
aH/bm9GGmxwuFHaCS9sx3V4vrdA7pYEa9S6o9rc5c2Sw/XU+OT0SBfpQetc/yVR1
V1nB3bQlV5+Z/aQseneGdZdpmkiUiUw4Okti2dk6bq53dmysD57aZ4ZclvhVb1ef
37WHs7DeJkESfJm42QoT9DlmN7ymF30RQkuW5WUUTxyY/17Hj4tolMg5a8VZSAJ/
TIoqQG5cMNtkD+R1vE+z9DUkUGMsOAo2B4FxWqTPFAbKYPDM5WEJNe9VenkaXoS9
ZZN6uWTKDU0LbL89XXprAURXb7RdObzjpuJfCGd/ZBAOyxS94QIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFCmzfTdVgmbGi9oVxPL0M+VE3/ogMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw
Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMTIzZjcyMWEtZWY2Yi0z
NTk0LWFlZTEtODA5ODYzYTMxNjBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi
OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4
OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3
NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQujKAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEACDYaKj10WrlOmUEXSwZzGcocugjPIlpLkilsYbR9Z392BmkTGTBY
gMpttzBIaWNVC0l2LwALnYe7aACi7+6TX+PNh+qHmj2pPxPA0e+Gy9STmm50+rh2
WbT/eV85436jfZ2LkZ6Lkdg76qKFAneUtB72alFgiBlFFRTp0N+gT4bMhRtigz38
LEeAu+FJpyjHvDDDkoFGfr+Mi4lV2pgKsoqJvuSIoXKNUPF1k6vs5N6LQ4KDCW67
v3jrcQG+tF/ev28ryCZcrFrxF/bNKmsakkgqz3vyYwt18CpGTw70n5ITXKwPz7M+
/pKz0AbRnl3eSWlJZ4uUXD/+nKi82SnU1A==
-----END CERTIFICATE-----
Generated at Wed Apr 9 05:51:47 2025 by rpki-client