Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/446233f4-3382-3504-a7dc-acdaf2c59a7f.roa
File: 446233f4-3382-3504-a7dc-acdaf2c59a7f.roa (raw, json)
Hash identifier: LQ4KK2gyoCUE4NG1Ai7pfKeY0yVuW8eRYjdhimY0wdE=
Subject key identifier: 68:B2:AE:05:47:BA:74:7C:F6:11:00:29:D7:9F:AB:64:AD:E9:C9:C4
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F43285848B7376A09C4303E55D00B7C80
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/446233f4-3382-3504-a7dc-acdaf2c59a7f.roa
Signing time: Thu 30 Jan 2025 11:11:28 +0000
ROA not before: Thu 30 Jan 2025 11:11:28 +0000
ROA not after: Wed 30 Apr 2025 10:11:28 +0000
asID: 30036
IP address blocks: 2604:2e88:4c00::/38 maxlen: 38
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b7:37:6a:09:c4:30:3e:55:d0:0b:7c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Jan 30 11:11:28 2025 GMT
Not After : Apr 30 10:11:28 2025 GMT
Subject: CN=bcda1c85-72f6-4a36-a4aa-fd5698b48976
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:7d:c1:7b:df:19:e3:85:ed:0f:45:e9:62:69:
a9:4e:a3:a2:de:ef:d1:89:fb:4d:88:5d:b2:83:e0:
96:82:5e:ab:d5:5a:cd:4a:3f:e0:c4:64:4a:b8:2b:
72:bd:51:0d:1e:ce:5f:75:5f:bd:73:b8:c2:68:48:
5d:cd:92:ef:6c:02:d9:6e:82:19:75:52:9c:96:9d:
fe:60:1f:7f:60:61:4d:ec:83:a6:1a:78:1f:84:e7:
c9:a6:7c:10:92:4f:81:cd:e1:78:e7:b6:32:60:0c:
1f:d0:a4:1b:f3:c5:12:59:f9:e3:8a:c8:7d:d0:60:
29:b1:7d:1c:d5:8c:1a:7e:78:52:55:83:9f:fd:ce:
61:52:e7:91:9e:a9:5a:32:5e:d4:87:a8:c8:3e:fe:
9f:68:64:66:00:cc:38:07:8e:3a:0a:4e:2c:50:86:
ca:8e:a8:ac:4c:95:27:c6:ed:27:c3:1f:f3:d9:76:
ab:bc:c4:38:38:23:63:a2:e1:45:97:0e:08:97:f9:
17:93:85:aa:e0:29:36:d4:c5:06:f4:54:2f:31:f5:
79:2d:c0:29:2d:87:3f:64:1c:8e:b9:d1:46:c1:50:
e5:21:ca:87:52:e2:02:08:16:93:e6:b3:23:2d:90:
6f:bc:df:26:50:d1:4d:32:3d:07:42:f7:db:d6:d3:
fc:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:B2:AE:05:47:BA:74:7C:F6:11:00:29:D7:9F:AB:64:AD:E9:C9:C4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/446233f4-3382-3504-a7dc-acdaf2c59a7f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2e88:4c00::/38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
26:7d:65:d1:8f:b1:92:a0:64:7c:f7:ce:1e:3f:26:43:e4:76:
a9:62:e2:b3:93:f3:90:46:92:51:55:3a:c7:2e:bd:47:3e:75:
79:2e:92:77:13:76:fc:73:9a:32:ad:7b:c3:be:43:44:46:49:
98:eb:1f:fe:4b:6f:23:a2:a8:f9:c5:7b:f4:46:b1:b0:30:63:
91:97:57:6e:61:5b:34:02:a9:19:e8:7e:c0:ab:24:68:e6:a8:
6b:87:31:33:76:47:e5:24:6d:b3:d1:76:9f:7d:ae:d0:e2:bf:
7c:79:91:d1:6e:9a:74:7f:97:42:ee:c7:12:ed:21:b6:11:9a:
bd:cc:20:10:b6:87:fe:04:5d:bd:c7:54:63:6a:f8:a2:92:87:
57:63:25:d8:51:83:18:f1:dd:70:bc:35:16:a3:2d:b3:f4:e9:
ec:3d:ca:ae:13:04:1a:d3:d6:0b:32:87:2f:ee:57:f2:0c:06:
cd:8e:fb:6d:66:2b:00:6e:90:fe:0e:42:e2:08:8e:c2:7a:b1:
da:58:1d:3c:c8:61:f0:27:50:29:37:2b:f3:25:03:01:9b:f9:
09:c5:8f:fe:62:56:c7:09:af:d6:90:bd:49:ce:e3:cf:4a:87:
61:b9:e5:c7:51:be:71:df:b1:48:1c:8e:af:05:8a:f1:94:65:
86:c4:b3:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 00:09:00 2025 by rpki-client