Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/23b995c7-549c-38fb-bd7c-688d1fb7c72f.roa
File: 23b995c7-549c-38fb-bd7c-688d1fb7c72f.roa (raw, json)
Hash identifier: e7wsiDOvatG5Ey5UZvj/22csskwHeEGtJ3oYQgH5P9Q=
Subject key identifier: 31:AA:74:02:22:41:9A:6C:6D:30:99:7C:89:B8:FD:BC:37:F5:28:D8
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F43285848C577B3D9CBB7D021C2837700
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/23b995c7-549c-38fb-bd7c-688d1fb7c72f.roa
Signing time: Tue 04 Feb 2025 13:42:19 +0000
ROA not before: Tue 04 Feb 2025 13:42:19 +0000
ROA not after: Mon 05 May 2025 12:42:19 +0000
asID: 30036
IP address blocks: 2604:2e89:5c00::/38 maxlen: 38
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:77:b3:d9:cb:b7:d0:21:c2:83:77:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Feb 4 13:42:19 2025 GMT
Not After : May 5 12:42:19 2025 GMT
Subject: CN=4b013480-5ac5-476e-9a23-c820e50046ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:8b:5f:29:fd:5b:27:0d:dc:d9:d4:32:ed:27:
b7:e7:e7:14:d2:b9:9a:98:67:48:72:8c:80:23:c7:
10:b1:8e:5f:2e:9e:cb:19:d2:bb:85:bf:92:ef:ba:
d9:b4:d9:32:ac:65:a8:71:97:da:f9:ad:85:38:a0:
01:9a:a0:a9:b2:b0:0a:a6:6e:0a:49:d8:1d:ff:64:
ae:95:c2:5f:9f:34:6b:b9:26:3f:e5:c8:58:95:14:
fc:56:e6:a0:49:7f:f8:ff:7e:ad:c4:45:6b:9d:02:
ae:c7:3f:ea:e4:3f:a5:5b:98:16:ea:e6:41:a5:30:
44:d9:b4:d6:c8:14:0f:53:c4:bf:a0:8d:a9:f1:40:
32:5c:59:eb:ab:1b:c2:5a:fd:a7:c5:63:92:9f:26:
58:2b:d1:92:fd:bf:ca:48:c5:54:97:15:55:8f:eb:
64:3d:c0:72:ee:76:43:7f:12:c1:14:61:18:18:8a:
bf:c9:d7:ed:8e:36:d5:6c:d5:04:49:9a:af:cd:74:
29:88:ee:95:82:7d:35:b5:04:76:f3:4c:40:58:9c:
ef:07:ae:12:8e:1e:e0:3f:bd:39:ac:47:67:aa:d0:
15:93:78:05:e1:6e:ca:46:1d:4e:cf:5e:87:07:55:
00:a0:39:d2:3d:2b:6e:90:03:db:f6:84:a9:64:81:
e7:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:AA:74:02:22:41:9A:6C:6D:30:99:7C:89:B8:FD:BC:37:F5:28:D8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/23b995c7-549c-38fb-bd7c-688d1fb7c72f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2e89:5c00::/38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0c:68:66:ce:38:06:e0:ff:01:1a:56:1c:eb:90:48:fc:b8:fe:
a9:d5:b0:c9:f7:94:5b:cb:d0:06:7c:b2:99:1a:bd:5c:0c:3d:
b6:5e:cd:d8:5c:7b:4e:1c:1e:b1:ad:d7:ff:4c:13:a1:6a:01:
f8:43:5c:c6:5a:1c:22:1e:e9:7a:19:33:62:ec:3f:87:2b:4b:
f1:a0:35:d7:77:32:58:b2:51:d4:82:18:dc:e7:d1:eb:b5:f9:
b6:3b:0e:51:5f:76:a9:ed:b9:be:08:9b:e0:eb:09:0e:1a:a8:
02:ac:5a:73:db:e9:e1:f9:5f:42:89:5b:d2:5f:24:91:77:f1:
47:28:05:d3:3a:d3:6c:c4:d9:ec:ce:8e:15:35:1a:b0:d9:54:
54:c9:55:d3:c4:bf:a0:df:1c:38:f0:fc:5e:91:3d:17:7d:16:
17:ac:50:06:80:0e:93:58:ff:56:17:b3:46:09:b2:54:53:b4:
e6:ed:22:e9:29:d2:16:e8:97:5b:66:70:ea:f1:57:76:8a:cb:
f8:fc:b8:04:dc:9b:5a:2b:a2:de:0a:34:01:44:b8:5d:44:cc:
06:ac:ee:4a:88:1a:a6:18:da:02:7b:ac:f4:5a:92:44:bd:e1:
0e:70:2f:c3:a5:50:2e:2a:44:96:11:11:46:3c:ca:6d:b6:cf:
0b:90:a6:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 23:48:53 2025 by rpki-client