Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/16784cc8-b525-3f75-b2c2-a0dc7b803e98.roa
File: 16784cc8-b525-3f75-b2c2-a0dc7b803e98.roa (raw, json)
Hash identifier: 4EgG0DdQspFTVZSoyvQKnTHuqhh9JfyqfoLYr+L++nU=
Subject key identifier: 88:7A:FC:F0:34:2E:5A:AF:2B:3F:4B:8C:7A:32:57:1B:1F:13:63:9F
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F43285848C7FE242B5C0AD91FDA76D560
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/16784cc8-b525-3f75-b2c2-a0dc7b803e98.roa
Signing time: Wed 05 Feb 2025 11:24:49 +0000
ROA not before: Wed 05 Feb 2025 11:24:49 +0000
ROA not after: Tue 06 May 2025 10:24:49 +0000
asID: 30036
IP address blocks: 2604:2e88:b800::/38 maxlen: 38
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c7:fe:24:2b:5c:0a:d9:1f:da:76:d5:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Feb 5 11:24:49 2025 GMT
Not After : May 6 10:24:49 2025 GMT
Subject: CN=6a55685f-15ca-4ecd-b696-8b143789721a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:06:26:84:27:59:03:a4:7d:97:bb:e1:42:0f:
2a:9f:19:6b:46:3c:74:78:47:b4:f5:df:37:fc:1e:
6c:17:a4:0c:18:e9:81:c5:21:04:eb:5d:2d:43:8d:
13:67:e9:12:70:c6:58:f7:78:8a:79:70:d6:42:73:
24:2e:46:b7:bb:f2:10:ae:2a:de:53:07:01:3e:a6:
d2:ee:10:d6:53:e7:01:f8:f8:03:94:04:66:2a:80:
f0:f5:f7:ee:e2:12:4f:70:69:2a:c0:12:9b:2f:7d:
05:6f:81:72:06:62:e6:c4:63:6c:bd:95:be:03:4c:
42:ca:e9:f6:82:d0:87:83:16:de:2c:a5:26:db:65:
0f:28:f6:ab:39:4c:6f:45:35:d2:a7:4b:6e:b5:5f:
47:94:dc:69:52:4c:15:84:41:17:31:b3:bd:77:0a:
30:96:83:c1:f8:16:22:ae:9f:a4:71:cb:ad:90:58:
ef:41:ec:06:ea:04:a0:75:ad:42:4f:9a:72:f5:08:
a3:01:d9:9f:57:4b:5e:bf:63:0d:f2:2c:45:38:b2:
28:11:18:63:3a:91:c0:20:48:73:ca:7c:a0:35:79:
57:1d:33:42:7c:4a:0d:cc:4d:dd:0a:8a:7a:a0:25:
63:87:3e:28:e6:bc:35:45:70:58:33:f6:e3:77:68:
bb:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:7A:FC:F0:34:2E:5A:AF:2B:3F:4B:8C:7A:32:57:1B:1F:13:63:9F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/16784cc8-b525-3f75-b2c2-a0dc7b803e98.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2e88:b800::/38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
65:c7:69:61:98:74:7e:c3:ae:8a:2c:62:f9:6f:fe:fc:dd:f0:
23:e6:36:ef:87:e7:b3:25:03:e5:99:c6:e9:59:83:f2:77:ba:
ce:d2:fe:13:8e:39:11:09:7e:0d:4a:df:14:94:f6:b1:94:40:
2f:bd:24:d5:e6:69:6a:27:6b:27:7f:93:93:1e:be:fd:27:61:
bc:28:0b:45:21:81:16:c5:25:00:df:53:fe:94:9c:26:c2:14:
c4:b2:48:e3:4b:ea:c7:1e:3f:09:d2:b0:35:36:b2:58:90:74:
15:33:78:c8:41:a2:37:c0:7c:7f:69:45:f4:30:08:e0:05:b4:
7f:43:d7:b5:49:3c:74:6c:7d:a2:f4:12:aa:84:d5:44:69:68:
26:fa:d7:96:a6:12:ea:c2:7f:55:37:e4:f0:f3:c7:e2:da:16:
51:31:eb:b7:18:82:22:9f:8d:4a:be:1a:e9:aa:48:a4:99:39:
0d:7b:ef:db:53:8f:0c:ac:98:6c:3f:ad:9d:9e:46:80:cf:c1:
71:ec:2e:42:d2:b0:02:71:4d:db:0a:97:9a:d4:91:e5:17:5c:
a5:0a:eb:79:88:f1:59:0d:54:e8:ba:cc:3b:5f:08:d8:e8:fc:
96:8b:26:5f:56:89:f4:9b:c1:99:75:4f:25:d5:9f:11:87:7f:
0c:a2:fa:fc
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEjH/iQrXArZH9p21WAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5
YTE1MB4XDTI1MDIwNTExMjQ0OVoXDTI1MDUwNjEwMjQ0OVowLzEtMCsGA1UEAxMk
NmE1NTY4NWYtMTVjYS00ZWNkLWI2OTYtOGIxNDM3ODk3MjFhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgAYmhCdZA6R9l7vhQg8qnxlrRjx0eEe09d83
/B5sF6QMGOmBxSEE610tQ40TZ+kScMZY93iKeXDWQnMkLka3u/IQrireUwcBPqbS
7hDWU+cB+PgDlARmKoDw9ffu4hJPcGkqwBKbL30Fb4FyBmLmxGNsvZW+A0xCyun2
gtCHgxbeLKUm22UPKParOUxvRTXSp0tutV9HlNxpUkwVhEEXMbO9dwowloPB+BYi
rp+kccutkFjvQewG6gSgda1CT5py9QijAdmfV0tev2MN8ixFOLIoERhjOpHAIEhz
ynygNXlXHTNCfEoNzE3dCop6oCVjhz4o5rw1RXBYM/bjd2i7pwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFIh6/PA0LlqvKz9LjHoyVxsfE2OfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw
Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMTY3ODRjYzgtYjUyNS0z
Zjc1LWIyYzItYTBkYzdiODAzZTk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi
OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4
OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3
NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuiLgw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAZcdpYZh0fsOuiixi+W/+/N3wI+Y274fnsyUD5ZnG6VmD8ne6ztL+
E445EQl+DUrfFJT2sZRAL70k1eZpaidrJ3+Tkx6+/SdhvCgLRSGBFsUlAN9T/pSc
JsIUxLJI40vqxx4/CdKwNTayWJB0FTN4yEGiN8B8f2lF9DAI4AW0f0PXtUk8dGx9
ovQSqoTVRGloJvrXlqYS6sJ/VTfk8PPH4toWUTHrtxiCIp+NSr4a6apIpJk5DXvv
21OPDKyYbD+tnZ5GgM/BcewuQtKwAnFN2wqXmtSR5RdcpQrreYjxWQ1U6LrMO18I
2Oj8losmX1aJ9JvBmXVPJdWfEYd/DKL6/A==
-----END CERTIFICATE-----
Generated at Wed Apr 9 00:08:53 2025 by rpki-client