Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/1dd6cccd-855a-303b-a442-afccc8bd9115.roa
File: 1dd6cccd-855a-303b-a442-afccc8bd9115.roa (raw, json)
Hash identifier: ocfc/GbLTczyJmBcHnJOCLG8voQ4anokvnLUTGsVzBQ=
Subject key identifier: 99:97:C1:4B:32:00:FD:DB:62:DD:00:29:B4:66:4E:FA:69:C2:14:50
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F43285848C53488B24C716DAA639F1000
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/1dd6cccd-855a-303b-a442-afccc8bd9115.roa
Signing time: Tue 04 Feb 2025 11:26:59 +0000
ROA not before: Tue 04 Feb 2025 11:26:59 +0000
ROA not after: Mon 05 May 2025 10:26:59 +0000
asID: 30036
IP address blocks: 2604:2e8d:8000::/38 maxlen: 38
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:34:88:b2:4c:71:6d:aa:63:9f:10:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Feb 4 11:26:59 2025 GMT
Not After : May 5 10:26:59 2025 GMT
Subject: CN=faafd530-ac94-43f7-a1f7-db8b474363b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c9:19:8e:9c:09:2b:39:d9:ef:02:97:77:f2:
8d:ea:33:12:ef:82:67:f9:3b:4d:40:ee:9c:9d:e5:
6a:a7:25:92:d4:55:d7:9d:95:8d:be:01:a0:b5:71:
8f:01:9f:c8:cb:e1:a6:e3:44:78:48:b7:fa:14:96:
3a:67:cd:b8:5c:7a:33:cc:c6:c3:ca:7c:3f:f6:59:
4a:1f:cd:a1:be:15:c2:77:4e:09:24:98:f0:79:70:
89:3c:24:70:01:6c:fe:06:a2:6f:3c:af:2a:fb:4c:
11:a9:49:e2:32:9d:e4:72:13:6b:40:ca:24:6c:22:
6a:e8:fd:07:f0:99:8e:fa:f9:20:72:72:a4:ef:5c:
a7:06:05:e1:db:12:90:c5:70:64:15:c2:88:9c:37:
34:dc:0d:4e:54:6d:e0:78:20:89:ec:52:fd:48:e3:
e2:52:d7:1f:3e:54:5f:f5:a7:ed:03:93:4d:b5:46:
a3:fa:ac:87:01:fe:ee:a2:de:76:f6:13:4e:4d:ec:
d0:85:80:10:b0:80:8c:00:48:83:88:5f:d7:84:99:
18:be:fb:69:60:69:88:6c:94:ef:b4:e6:c5:bf:45:
10:70:85:ce:a6:37:c3:d0:0c:06:f0:7f:7d:44:f2:
ad:d1:de:ea:24:d0:7c:ea:b6:44:27:23:aa:e0:28:
41:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:97:C1:4B:32:00:FD:DB:62:DD:00:29:B4:66:4E:FA:69:C2:14:50
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/1dd6cccd-855a-303b-a442-afccc8bd9115.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2e8d:8000::/38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
46:45:cd:46:4b:0a:b5:5f:5d:c3:6c:26:3b:00:11:a7:f7:30:
10:7c:50:7a:8c:49:de:dc:9a:be:f4:f3:4b:26:a2:bf:9e:d0:
f7:64:80:40:6b:fe:b2:41:a1:cd:bb:c7:50:62:f3:fb:c0:1b:
17:bf:ee:0f:2c:e8:ff:97:cc:3d:60:c6:5f:c8:93:54:54:0f:
1a:db:04:ac:89:18:54:2d:66:43:7e:24:bf:99:77:33:03:9d:
c0:33:3d:bd:c1:6e:74:65:87:cc:ce:a5:0b:56:f1:8c:04:af:
31:32:e3:a5:22:dd:96:16:6c:3a:88:62:3a:5f:9a:6f:18:2c:
50:c3:17:f0:8d:d1:b9:9b:44:59:d3:30:f9:2d:62:08:f4:8d:
f5:e3:ef:91:57:83:bf:ac:c0:b6:2b:6e:50:3a:a1:0b:0f:0c:
45:32:34:58:c7:b9:9e:65:e0:6a:c9:2a:7f:3f:43:e4:3c:49:
d9:ec:09:b3:e1:fd:db:e8:57:ae:00:80:00:bd:4a:14:3f:a3:
e5:3c:7b:c6:3f:74:74:18:c9:f5:8d:33:31:31:70:7d:79:d5:
80:35:dd:ca:82:30:53:f5:81:ce:0a:c3:e4:8e:fa:99:4a:94:
c0:f6:90:23:84:6a:9e:74:21:54:67:b4:e2:b7:c7:de:7b:18:
cd:dc:97:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 00:23:40 2025 by rpki-client