Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/239849b7-f817-3a68-aefe-cc03f9cfbf15.roa
File: 239849b7-f817-3a68-aefe-cc03f9cfbf15.roa (raw, json)
Hash identifier: Y8YEQjNSthKIGiCuPB8uHMrrHdtWuijCqphqw/4I2P8=
Subject key identifier: 63:FA:EA:77:4C:F7:72:26:A2:34:38:DF:97:23:CA:4F:BB:A5:DD:74
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F43285849134FC26179AF06886ED01960
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/239849b7-f817-3a68-aefe-cc03f9cfbf15.roa
Signing time: Tue 04 Mar 2025 10:54:53 +0000
ROA not before: Tue 04 Mar 2025 10:54:53 +0000
ROA not after: Mon 02 Jun 2025 09:54:53 +0000
asID: 30036
IP address blocks: 2604:2e80:1c00::/38 maxlen: 38
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:13:4f:c2:61:79:af:06:88:6e:d0:19:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Mar 4 10:54:53 2025 GMT
Not After : Jun 2 09:54:53 2025 GMT
Subject: CN=ecc0f9f4-776f-46db-ba8e-b846af209bba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c3:ce:f5:71:53:ea:fc:1f:64:7a:44:db:f6:
a5:fc:94:71:b8:3b:67:39:c1:6d:cc:59:ea:7e:af:
48:08:df:15:15:80:9e:f9:f9:0f:92:20:f4:9b:bd:
24:12:8d:5a:0b:66:20:02:bb:f5:df:f0:34:67:8b:
54:b7:ff:52:7f:1c:5e:fc:e2:d8:3d:16:a4:5f:91:
37:f9:ad:1f:77:f6:d0:1f:2b:00:e8:13:b9:ea:02:
6d:e8:fc:fb:62:1b:f6:4f:af:86:81:d0:05:44:31:
e8:66:5b:51:c3:44:cd:ca:83:d0:b2:d4:f8:1b:80:
06:59:15:26:03:b8:26:1f:80:17:7d:89:96:81:e5:
16:ee:22:37:78:01:14:09:77:7d:b6:a2:3d:df:65:
70:25:09:d2:c8:6e:9a:cc:96:55:7c:96:15:8c:4b:
27:ea:27:2d:8a:75:ca:a9:ac:ea:fa:a8:f4:17:9d:
75:92:ea:32:97:59:c8:73:7b:85:20:cb:d9:89:f9:
f8:2d:27:ab:c9:8a:ab:78:61:90:db:f3:d3:3c:3f:
88:1b:eb:f3:de:a7:cb:e2:13:ec:59:0b:36:87:50:
82:a1:56:01:c5:ee:dc:e2:8b:ed:31:84:d6:ec:92:
73:7f:de:b9:46:80:75:fe:da:d5:1f:db:13:d4:2b:
d2:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:FA:EA:77:4C:F7:72:26:A2:34:38:DF:97:23:CA:4F:BB:A5:DD:74
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/239849b7-f817-3a68-aefe-cc03f9cfbf15.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2e80:1c00::/38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4f:1f:4b:e3:d9:cc:33:06:2e:30:18:d9:61:d5:3e:07:e2:f6:
dd:f2:1c:f6:5a:81:50:63:41:6a:09:d2:3a:44:f6:b4:87:0c:
74:31:2d:d4:84:d7:57:a8:7d:4f:96:2b:1c:47:d8:a7:81:df:
1a:df:2d:f2:92:27:ea:8a:e7:47:7c:6a:37:7b:93:32:3e:37:
ee:ad:87:ad:45:2f:7b:9c:d4:1b:69:72:be:64:ef:03:d9:36:
10:51:6f:1a:7b:42:a3:f1:00:c9:3c:2e:35:00:30:93:07:d2:
3a:5e:9a:a2:a6:a1:13:9a:7b:3e:10:94:de:c5:80:49:46:d1:
12:40:3f:b8:28:ba:98:9a:5a:0a:4d:1f:d8:6a:a4:19:93:45:
e3:63:57:8b:6b:85:9a:d1:77:5d:3b:6e:f4:ad:e9:a7:29:fb:
14:a4:ec:ce:fe:b1:a7:c7:41:d5:5f:51:11:bc:a1:1f:f7:7c:
53:31:79:78:e2:bb:fa:fc:04:35:98:57:35:f3:ab:cb:86:cd:
b1:41:33:32:32:9f:ec:64:e5:02:d5:01:ee:b0:ef:9a:05:bb:
1a:3c:f3:33:a5:54:76:09:d5:3c:93:8f:22:be:2a:ea:3d:9c:
a8:ed:72:9a:45:d7:5c:bc:d0:56:35:01:07:01:11:35:e9:fe:
57:be:09:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 23:51:16 2025 by rpki-client