Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/21a650b6-0f13-3acf-b4cf-17e2acc25fc7.roa
File: 21a650b6-0f13-3acf-b4cf-17e2acc25fc7.roa (raw, json)
Hash identifier: a+FW74gPeC1nA+wIo5RkPhsN4kVAN0szb0b6hq3KKfg=
Subject key identifier: 5B:B8:8B:8C:C4:8B:20:04:14:A4:74:3B:69:AA:0C:08:02:90:00:F5
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F43285848C558FA8187B21A2DEA8F9180
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/21a650b6-0f13-3acf-b4cf-17e2acc25fc7.roa
Signing time: Tue 04 Feb 2025 12:40:25 +0000
ROA not before: Tue 04 Feb 2025 12:40:25 +0000
ROA not after: Mon 05 May 2025 11:40:25 +0000
asID: 30036
IP address blocks: 2604:2e8c:c800::/38 maxlen: 38
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:58:fa:81:87:b2:1a:2d:ea:8f:91:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Feb 4 12:40:25 2025 GMT
Not After : May 5 11:40:25 2025 GMT
Subject: CN=1bc714ae-cfd7-455f-825c-ac7d332e31aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:08:b9:1b:45:81:5f:71:17:f0:00:a4:d7:a0:
d2:7f:8e:3e:71:81:fe:00:76:c2:92:5b:d0:b4:a4:
cd:c6:c5:44:07:5d:7a:35:2b:63:bf:d5:30:c8:f0:
00:00:75:a2:13:aa:c7:40:8d:79:0c:1f:02:3a:27:
d6:bc:c7:2d:2a:19:75:3e:53:dd:b1:37:95:a0:14:
1c:18:48:50:fd:34:11:5d:bb:b5:82:7c:e5:30:d3:
6c:5b:80:c4:d9:af:d9:6c:5d:9f:80:44:c1:94:2d:
f5:a7:fb:bc:39:e9:ec:5d:6b:87:5f:b6:55:ff:70:
1c:7d:b3:93:9a:94:c0:62:40:92:47:b2:13:c2:f5:
85:00:fc:04:58:e5:7d:19:79:43:ea:f3:7a:68:0e:
62:5a:ea:9d:e0:48:c6:76:e4:af:3c:bc:81:93:eb:
7b:75:01:aa:37:31:9c:fe:20:08:7a:5e:28:c7:c6:
be:5d:e9:76:94:0a:8b:34:3a:fc:38:f5:1e:0e:fd:
37:5e:a8:3c:41:c0:4c:ba:96:5c:fd:b4:84:d4:61:
f9:eb:7e:8a:bf:20:50:62:f1:06:b5:45:7d:21:1d:
a3:67:e0:d8:f1:fd:98:cf:de:38:a7:d8:7e:6b:de:
5e:fb:63:17:c7:21:70:97:55:24:f7:d5:63:52:d2:
d9:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:B8:8B:8C:C4:8B:20:04:14:A4:74:3B:69:AA:0C:08:02:90:00:F5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/21a650b6-0f13-3acf-b4cf-17e2acc25fc7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2e8c:c800::/38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
08:24:6b:f9:84:4f:d4:eb:09:b9:3b:39:1a:1b:ee:3a:ac:25:
4f:1c:96:59:ca:d8:6e:19:bb:c5:45:34:6c:6d:01:2c:29:34:
de:53:86:e1:7c:08:d2:85:b9:45:34:1d:0f:df:ba:50:51:06:
49:72:89:70:23:a0:96:3f:80:ec:75:6a:77:46:b9:c2:d9:41:
79:9d:a5:6b:ab:32:b8:03:81:9f:49:99:3d:47:e5:be:42:36:
f9:1b:5e:1a:5a:00:a6:b5:0c:a1:11:69:a8:69:48:87:dd:27:
e9:07:97:45:0e:92:6e:0e:3d:78:03:51:7b:bf:d8:73:0c:38:
b8:a0:fb:a6:bd:01:90:03:c7:15:d9:f6:98:46:01:0c:9b:1b:
76:15:01:42:f7:f8:dd:15:b3:f5:5d:ae:5c:74:4c:85:12:13:
6b:57:96:ec:ca:cf:89:bd:09:44:99:d9:58:9d:da:42:ed:4f:
70:b1:82:a2:1a:df:70:79:a2:18:8a:07:92:91:25:d1:37:43:
1f:94:bd:05:6a:bb:cb:ed:31:8e:f5:2e:69:ad:a9:81:39:f2:
2e:36:8d:d9:14:c7:2e:91:19:28:9e:ce:a2:a8:50:dc:3e:96:
9f:ed:1a:97:42:64:95:49:13:8c:a7:8d:57:e0:e3:1d:c3:41:
e3:e6:6c:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 00:01:19 2025 by rpki-client