Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/1709fa4c-bb86-3fd2-9d2d-7651d02de31e.roa
File: 1709fa4c-bb86-3fd2-9d2d-7651d02de31e.roa (raw, json)
Hash identifier: 4w2dWlgP+nB8jwqF4uDYCNNO+gvSWSkSGCmiH+pJaCU=
Subject key identifier: 6F:63:44:75:AB:FD:CF:E6:2A:DE:45:30:AA:35:3A:DE:6C:AE:A7:64
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F43285848C577CADD576B24A657E03C80
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/1709fa4c-bb86-3fd2-9d2d-7651d02de31e.roa
Signing time: Tue 04 Feb 2025 13:42:30 +0000
ROA not before: Tue 04 Feb 2025 13:42:30 +0000
ROA not after: Mon 05 May 2025 12:42:30 +0000
asID: 30036
IP address blocks: 2604:2e8a:6800::/38 maxlen: 38
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:77:ca:dd:57:6b:24:a6:57:e0:3c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Feb 4 13:42:30 2025 GMT
Not After : May 5 12:42:30 2025 GMT
Subject: CN=554eade1-94ab-4682-9942-34bad13b2788
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:45:b8:42:59:ec:eb:76:66:1c:26:ca:3e:ad:
85:0c:cb:b6:e3:87:29:4c:ff:52:d0:2f:c8:6b:7f:
73:01:be:d4:5f:ec:54:fa:69:40:5e:24:67:f8:fd:
98:29:21:7c:11:4a:ab:86:63:ab:46:c4:9c:06:e9:
e9:ac:7e:87:15:77:42:2b:02:a0:9d:9c:5b:40:2e:
33:ed:1b:86:04:81:a1:f5:b6:44:6a:ee:e3:32:50:
d9:02:5d:69:93:29:5c:61:08:db:40:52:2c:48:9e:
e7:51:7e:61:18:fd:06:71:fe:49:d1:4d:d9:52:fc:
35:65:34:33:e2:61:ad:46:b2:df:32:47:ba:1e:d7:
9c:4c:15:dc:7f:fa:df:e7:98:66:aa:5e:d8:bf:ba:
40:f0:7f:e7:c4:99:9c:25:12:1b:ae:6f:2b:2c:37:
b7:19:9b:5d:36:65:51:9a:39:32:2a:be:1b:1a:b3:
b9:bc:14:05:ff:fc:fe:ae:5a:81:31:93:9a:17:e0:
3a:65:ce:da:0f:c5:36:b8:99:20:89:04:db:67:62:
0b:35:c6:b2:e7:03:1e:6c:84:66:4c:1e:68:d8:27:
33:81:c8:15:5e:10:2f:2b:d0:0c:f8:f9:64:08:97:
0a:32:c0:92:4d:c3:d5:3f:e0:53:a3:6e:4e:30:44:
9e:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:63:44:75:AB:FD:CF:E6:2A:DE:45:30:AA:35:3A:DE:6C:AE:A7:64
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/1709fa4c-bb86-3fd2-9d2d-7651d02de31e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2e8a:6800::/38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a0:22:5b:58:9c:74:f5:b7:65:f6:fe:4a:32:c1:b3:ab:fc:94:
66:6c:77:90:bb:a4:5c:83:3c:bf:df:dd:71:b3:fd:3b:75:8a:
4f:11:2c:e4:4d:49:5c:5f:f6:f1:17:dc:78:e8:6c:30:70:42:
4c:43:61:d2:d2:23:1d:53:81:5e:22:9f:51:fe:6f:55:77:44:
e8:eb:54:19:4a:2f:df:5e:0d:20:40:19:bd:05:ff:c5:5b:88:
5f:1c:68:2e:f0:18:11:50:d7:60:70:79:96:65:e3:18:b1:3f:
af:ad:15:66:5e:c9:4b:ec:be:dc:b3:59:b5:57:4d:28:ae:95:
be:34:f4:ea:77:c8:54:d1:71:e5:a1:e0:1d:7f:dd:4f:0a:80:
69:8a:3a:6e:0a:72:3d:b8:ad:8f:8d:71:4e:fa:6a:5e:6b:a5:
06:7a:89:d5:66:f4:c7:e3:a7:cf:cd:6d:eb:1a:fd:a8:9d:72:
a2:3c:d2:78:08:a0:78:a3:08:1d:55:10:a0:28:e2:95:e6:c8:
e6:d7:bb:50:36:57:7f:9d:e4:7a:30:83:f9:a8:6a:5e:f5:e8:
74:34:84:fb:0b:14:c7:00:9c:6b:93:6d:c4:80:56:3c:9d:19:
9b:76:3d:1d:c5:3a:db:ad:7f:2a:54:72:52:43:21:7a:00:de:
1d:03:e2:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 23:58:43 2025 by rpki-client