Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/18c79d16-043b-3a0c-888b-f8ebff8d75a2.roa
File: 18c79d16-043b-3a0c-888b-f8ebff8d75a2.roa (raw, json)
Hash identifier: 2BAlq32B5WiRxWbpAo+FzRIvCsF+7eeBz++qpYDG2vw=
Subject key identifier: D2:A2:19:21:D6:12:9D:76:0E:58:7D:56:A4:AB:AA:43:11:89:54:D3
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F43285849134FED75723D58F8B3A6EC80
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/18c79d16-043b-3a0c-888b-f8ebff8d75a2.roa
Signing time: Tue 04 Mar 2025 10:55:14 +0000
ROA not before: Tue 04 Mar 2025 10:55:14 +0000
ROA not after: Mon 02 Jun 2025 09:55:14 +0000
asID: 30036
IP address blocks: 2604:2e8e:5c00::/38 maxlen: 38
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:13:4f:ed:75:72:3d:58:f8:b3:a6:ec:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Mar 4 10:55:14 2025 GMT
Not After : Jun 2 09:55:14 2025 GMT
Subject: CN=4fe3d551-b21a-4c36-b7e6-a77b394e795f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:16:ed:c6:47:d2:dc:71:cb:05:13:cb:a7:81:
df:09:d5:06:33:8b:1a:8c:bf:28:20:85:18:60:e3:
9d:61:71:2a:98:4e:80:be:f4:82:71:8a:19:62:d4:
44:62:ab:3b:14:6b:9d:43:58:ec:e4:8f:c4:32:92:
bd:8b:53:18:49:36:6a:dd:3a:65:d0:b9:cb:18:32:
03:d0:e7:80:64:70:f5:7d:75:d1:bf:3e:ed:61:6c:
c5:a3:8c:a3:0c:28:b3:45:f3:52:a1:bf:40:49:0f:
52:b7:ff:c3:ba:03:eb:92:c1:5c:20:37:ea:b0:78:
18:ff:da:88:92:d8:2a:89:fe:bc:d2:90:b7:49:de:
65:40:f2:42:88:12:4a:d2:2a:d5:d6:53:31:04:58:
36:46:a0:81:07:c6:0f:98:2b:16:40:aa:08:7c:1e:
2b:e2:37:c3:12:4e:17:7e:73:90:a2:e7:20:c5:36:
2a:e7:b4:76:f2:c8:e9:b6:e0:8f:46:bd:e5:a2:e0:
34:89:e9:ca:f1:16:58:1b:56:d8:b7:6a:b1:ec:d9:
95:bc:70:b2:da:e3:4d:71:56:fc:ff:3d:0c:12:d2:
ef:93:dd:de:84:fe:7a:af:8d:48:50:b2:e0:d6:59:
c9:ba:21:5e:71:a0:c3:53:a1:d4:d0:bb:9b:fd:40:
2c:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:A2:19:21:D6:12:9D:76:0E:58:7D:56:A4:AB:AA:43:11:89:54:D3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/18c79d16-043b-3a0c-888b-f8ebff8d75a2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2e8e:5c00::/38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
25:ff:07:98:64:d7:12:96:6a:26:b8:af:11:49:7a:be:a1:ba:
80:9b:ab:e6:93:65:c9:84:13:22:d6:ef:94:28:41:79:6b:38:
0c:55:ca:8b:6f:7f:6a:24:ed:71:6b:80:1b:f3:e5:a0:e5:b0:
7c:55:3d:3e:92:9b:b3:2b:f7:79:f9:c5:c5:32:db:95:05:de:
e2:f8:c5:6d:c5:19:d9:dd:a4:cc:de:b5:5e:cb:8a:9e:55:1f:
05:56:27:1e:99:c0:0e:48:5d:d4:83:43:11:2e:89:67:cf:84:
bb:42:6b:9e:14:27:73:1a:0b:08:42:c3:6c:6b:b2:52:34:39:
50:c6:0f:47:62:5c:7c:c5:3b:45:a3:80:e0:6d:e2:75:ff:ab:
cd:89:96:9d:3a:fc:12:80:0e:c0:96:de:88:89:c9:3a:3b:6c:
43:74:6d:a7:74:b1:9f:2a:55:7a:f1:41:84:15:3f:10:64:14:
1d:39:3c:36:38:2a:fa:02:54:7b:77:89:aa:f2:ec:b8:ef:70:
2a:73:39:c4:a4:00:1f:9e:f0:ef:84:68:50:3a:3d:4c:00:17:
24:97:53:ee:ca:14:bb:6f:ba:09:c8:1b:c7:e3:c9:8f:d3:5a:
35:23:81:5a:05:df:a8:9f:ac:da:ca:29:ab:8c:74:80:25:40:
d1:ea:51:5a
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEkTT+11cj1Y+LOm7IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5
YTE1MB4XDTI1MDMwNDEwNTUxNFoXDTI1MDYwMjA5NTUxNFowLzEtMCsGA1UEAxMk
NGZlM2Q1NTEtYjIxYS00YzM2LWI3ZTYtYTc3YjM5NGU3OTVmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0BbtxkfS3HHLBRPLp4HfCdUGM4sajL8oIIUY
YOOdYXEqmE6AvvSCcYoZYtREYqs7FGudQ1js5I/EMpK9i1MYSTZq3Tpl0LnLGDID
0OeAZHD1fXXRvz7tYWzFo4yjDCizRfNSob9ASQ9St//DugPrksFcIDfqsHgY/9qI
ktgqif680pC3Sd5lQPJCiBJK0irV1lMxBFg2RqCBB8YPmCsWQKoIfB4r4jfDEk4X
fnOQoucgxTYq57R28sjptuCPRr3louA0ienK8RZYG1bYt2qx7NmVvHCy2uNNcVb8
/z0MEtLvk93ehP56r41IULLg1lnJuiFecaDDU6HU0Lub/UAsoQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFNKiGSHWEp12Dlh9VqSrqkMRiVTTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw
Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMThjNzlkMTYtMDQzYi0z
YTBjLTg4OGItZjhlYmZmOGQ3NWEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi
OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4
OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3
NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQujlww
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAJf8HmGTXEpZqJrivEUl6vqG6gJur5pNlyYQTItbvlChBeWs4DFXK
i29/aiTtcWuAG/PloOWwfFU9PpKbsyv3efnFxTLblQXe4vjFbcUZ2d2kzN61XsuK
nlUfBVYnHpnADkhd1INDES6JZ8+Eu0JrnhQncxoLCELDbGuyUjQ5UMYPR2JcfMU7
RaOA4G3idf+rzYmWnTr8EoAOwJbeiInJOjtsQ3Rtp3SxnypVevFBhBU/EGQUHTk8
Njgq+gJUe3eJqvLsuO9wKnM5xKQAH57w74RoUDo9TAAXJJdT7soUu2+6Ccgbx+PJ
j9NaNSOBWgXfqJ+s2sopq4x0gCVA0epRWg==
-----END CERTIFICATE-----
Generated at Tue Apr 8 23:46:20 2025 by rpki-client