Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3b98607c-312f-3adf-a754-290a30263a4d.roa
File: 3b98607c-312f-3adf-a754-290a30263a4d.roa (raw, json)
Hash identifier: GZYBRiTZz5Fjcgki0Q7ot9utxUf+5+4+VaaFxitozR0=
Subject key identifier: 54:67:58:1D:BD:0E:85:1D:E3:BA:43:F9:EC:68:4A:BA:A1:89:14:E8
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F43285848B73755FE3D9FEDA54746D400
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3b98607c-312f-3adf-a754-290a30263a4d.roa
Signing time: Thu 30 Jan 2025 11:11:19 +0000
ROA not before: Thu 30 Jan 2025 11:11:19 +0000
ROA not after: Wed 30 Apr 2025 10:11:19 +0000
asID: 30036
IP address blocks: 2604:2e88:2800::/38 maxlen: 38
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b7:37:55:fe:3d:9f:ed:a5:47:46:d4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Jan 30 11:11:19 2025 GMT
Not After : Apr 30 10:11:19 2025 GMT
Subject: CN=706577fb-737e-41dd-81fa-866a16cad945
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:9c:b0:c5:0e:73:77:67:e8:f8:5c:c3:76:81:
13:09:d0:d4:4e:30:5b:c8:92:14:7a:e3:be:20:cd:
b9:df:57:2c:e6:e0:78:3d:d4:a0:08:f5:82:9e:fd:
e7:af:63:73:a1:6a:a7:3f:80:6b:8e:ac:91:17:f8:
95:5d:fe:e6:94:67:ae:37:07:92:db:f2:13:e1:e9:
d8:80:9b:c3:6c:10:d1:f5:53:aa:83:08:0c:5d:33:
67:3f:a8:1a:6e:69:72:af:a5:60:3b:12:4e:aa:98:
00:75:3f:21:fc:68:d2:00:7f:ed:d3:7f:2e:ea:4e:
f4:b5:af:70:40:32:05:b2:23:0e:8b:57:6a:d3:3c:
2f:43:fc:08:e4:05:68:5d:b9:bd:e8:50:36:57:88:
07:58:58:d2:0a:2f:8c:2e:93:aa:92:0b:94:44:e0:
bd:58:4e:d8:8c:65:d1:91:8f:dd:5f:07:3d:5c:bd:
37:57:fa:60:a4:ea:cb:8c:37:2b:b0:0f:8a:f5:b9:
ef:86:4d:2a:62:dc:38:2b:45:e3:86:ff:3d:3c:05:
b4:60:6c:90:da:b5:a3:eb:d4:d3:3f:6d:18:a4:7b:
8c:2e:bf:29:9e:7c:11:7f:47:d6:be:aa:07:78:cd:
59:c9:27:e6:3e:e2:88:8f:c8:a4:5f:ab:57:ab:b7:
d4:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:67:58:1D:BD:0E:85:1D:E3:BA:43:F9:EC:68:4A:BA:A1:89:14:E8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3b98607c-312f-3adf-a754-290a30263a4d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2e88:2800::/38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3c:4e:ac:cc:e7:cb:2c:a8:98:b6:56:c4:cf:90:f6:a8:be:c6:
53:ec:03:f3:24:b1:76:ee:f0:07:48:4a:42:2b:32:3e:8d:9c:
4d:69:e3:f2:38:7d:86:25:5e:e0:70:ee:d3:bc:46:4c:24:c3:
16:b9:56:40:85:5f:41:b5:b5:c8:ac:14:99:12:c2:dc:e3:0e:
84:23:f6:bc:8b:01:c9:59:2e:d8:97:a5:dc:ce:34:10:1a:8d:
a2:3c:09:0a:e5:5c:d5:e7:85:8b:fb:d1:92:6a:43:ed:6b:26:
f2:23:7e:b8:ed:8a:4a:27:5c:a6:4b:bf:db:ab:a2:9e:cb:e2:
0c:e5:ef:73:fc:df:9a:c2:32:cc:6b:fc:8d:ee:ad:3a:15:ce:
91:d5:b9:85:08:28:a2:f3:9a:dd:d6:d9:e7:e9:ab:a5:68:5c:
3b:d5:ca:e7:df:18:a5:1a:5a:67:7d:86:c7:24:50:4f:1d:52:
f9:c7:2c:e4:e9:8c:08:4d:ed:db:3d:a4:6c:3b:64:60:b7:3b:
38:06:e4:72:d3:f6:f8:cf:4e:02:f7:20:e1:8f:eb:44:87:a4:
2e:4a:18:8c:8d:87:2c:47:4b:62:53:8b:17:49:d4:3a:05:64:
84:3e:b0:47:dd:b1:42:25:57:6a:fd:1c:db:ad:87:f6:1f:bd:
cf:39:a3:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 23:53:45 2025 by rpki-client