Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/29ee85f6-e59c-3002-9c41-0f227449f9cd.roa
File: 29ee85f6-e59c-3002-9c41-0f227449f9cd.roa (raw, json)
Hash identifier: d5G0Z2V4zz5XB9LjQbJtVYCBHLfeM+N3f/1h5ozvWt0=
Subject key identifier: 9A:DF:36:82:FC:4A:82:E1:63:22:2C:AC:EC:16:F4:17:3B:21:26:4A
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F43285848C55FDA7B50F1FFA9082B6680
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/29ee85f6-e59c-3002-9c41-0f227449f9cd.roa
Signing time: Tue 04 Feb 2025 12:54:16 +0000
ROA not before: Tue 04 Feb 2025 12:54:16 +0000
ROA not after: Mon 05 May 2025 11:54:16 +0000
asID: 30036
IP address blocks: 2604:2e8b:7c00::/38 maxlen: 38
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:5f:da:7b:50:f1:ff:a9:08:2b:66:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Feb 4 12:54:16 2025 GMT
Not After : May 5 11:54:16 2025 GMT
Subject: CN=f8cf6846-ce6c-4a60-a06d-462c63263c2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:34:fd:3e:b7:4a:72:66:d2:59:fe:3a:4f:48:
a8:73:ac:c4:13:63:51:ac:4c:0e:5e:e2:e0:d2:78:
06:bb:a1:04:5c:48:da:86:de:1e:98:39:91:18:aa:
51:3a:54:6a:17:34:b9:ee:25:78:8a:24:42:ef:8f:
42:14:0f:47:9d:a8:3f:83:c1:18:96:b4:da:e0:1c:
ff:63:b7:4f:d5:1a:dd:4b:29:43:64:ea:6c:ac:50:
df:10:99:d4:3e:a2:2b:7a:1b:a6:ed:97:bd:72:ed:
8e:6c:93:7d:cd:58:f4:be:d4:f8:50:7d:c4:53:ec:
5f:a2:8f:99:13:11:67:5a:c2:7b:3f:d9:fc:18:8a:
ef:bd:e9:3f:21:87:97:31:23:f9:d2:eb:e8:ee:c9:
26:40:19:f2:2b:95:c7:3c:31:d2:6d:6f:74:54:c8:
41:8c:ae:dd:cd:4e:b7:34:33:ba:ad:15:30:38:56:
c0:48:0f:83:04:df:0c:99:c9:47:e0:61:3f:56:98:
ca:50:e8:fb:f9:db:3b:76:da:73:84:bd:d3:11:ad:
7f:8f:31:00:87:47:80:1b:bf:0c:9f:26:80:0a:60:
c3:36:49:94:60:09:a6:93:b8:e1:35:58:57:ad:17:
e5:3e:65:4c:0d:fc:26:c7:dd:99:93:d8:c1:70:e2:
d5:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:DF:36:82:FC:4A:82:E1:63:22:2C:AC:EC:16:F4:17:3B:21:26:4A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/29ee85f6-e59c-3002-9c41-0f227449f9cd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2e8b:7c00::/38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5a:f2:a1:38:d2:9c:db:ff:30:42:0d:c6:43:c5:7d:65:5a:05:
47:4a:9f:2b:87:32:85:d9:d9:87:48:8b:0c:18:7d:1f:10:02:
60:41:5c:ff:8f:b6:24:2c:db:ed:eb:df:14:46:f7:d5:8f:14:
2f:f2:2e:ff:f8:99:6b:06:15:f2:31:1a:3b:ac:27:9f:78:5f:
6e:2f:c4:a6:f1:5e:21:fb:be:4f:77:cd:2f:dc:8b:0a:10:cc:
45:08:41:df:7c:c8:fe:ff:38:ce:46:22:f3:b1:ba:78:87:01:
b4:4a:7c:85:08:a4:b7:77:b5:0e:57:2c:84:a7:a5:a9:4a:e0:
2d:ee:ff:f3:6c:18:5b:5f:78:17:df:62:74:46:d2:df:f8:64:
47:6b:8c:81:b9:3a:97:81:35:a6:0f:98:4b:30:b0:2f:50:56:
5c:fa:fc:bb:20:7a:0d:1b:6b:62:a6:37:70:c6:56:13:99:2d:
14:44:84:1f:42:72:31:ba:b8:29:a0:03:0c:98:89:06:61:a8:
f9:aa:cf:6e:9c:da:ec:e6:09:67:f1:32:a8:f2:63:6e:c8:ef:
93:88:bb:a3:6e:03:f4:10:cc:dd:ba:d2:1f:a1:0b:7d:5f:e2:
3a:5e:c3:70:18:e2:42:0a:52:f9:df:fc:3a:88:92:07:21:4e:
c4:ea:df:9e
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEjFX9p7UPH/qQgrZoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5
YTE1MB4XDTI1MDIwNDEyNTQxNloXDTI1MDUwNTExNTQxNlowLzEtMCsGA1UEAxMk
ZjhjZjY4NDYtY2U2Yy00YTYwLWEwNmQtNDYyYzYzMjYzYzJiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqTT9PrdKcmbSWf46T0ioc6zEE2NRrEwOXuLg
0ngGu6EEXEjaht4emDmRGKpROlRqFzS57iV4iiRC749CFA9Hnag/g8EYlrTa4Bz/
Y7dP1RrdSylDZOpsrFDfEJnUPqIrehum7Ze9cu2ObJN9zVj0vtT4UH3EU+xfoo+Z
ExFnWsJ7P9n8GIrvvek/IYeXMSP50uvo7skmQBnyK5XHPDHSbW90VMhBjK7dzU63
NDO6rRUwOFbASA+DBN8MmclH4GE/VpjKUOj7+ds7dtpzhL3TEa1/jzEAh0eAG78M
nyaACmDDNkmUYAmmk7jhNVhXrRflPmVMDfwmx92Zk9jBcOLV7QIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFJrfNoL8SoLhYyIsrOwW9Bc7ISZKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw
Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMjllZTg1ZjYtZTU5Yy0z
MDAyLTljNDEtMGYyMjc0NDlmOWNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi
OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4
OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3
NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQui3ww
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAWvKhONKc2/8wQg3GQ8V9ZVoFR0qfK4cyhdnZh0iLDBh9HxACYEFc
/4+2JCzb7evfFEb31Y8UL/Iu//iZawYV8jEaO6wnn3hfbi/EpvFeIfu+T3fNL9yL
ChDMRQhB33zI/v84zkYi87G6eIcBtEp8hQikt3e1DlcshKelqUrgLe7/82wYW194
F99idEbS3/hkR2uMgbk6l4E1pg+YSzCwL1BWXPr8uyB6DRtrYqY3cMZWE5ktFESE
H0JyMbq4KaADDJiJBmGo+arPbpza7OYJZ/EyqPJjbsjvk4i7o24D9BDM3brSH6EL
fV/iOl7DcBjiQgpS+d/8OoiSByFOxOrfng==
-----END CERTIFICATE-----
Generated at Wed Apr 9 00:13:09 2025 by rpki-client