Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/45c81aa7-70d6-3374-8990-ffa452705003.roa
File: 45c81aa7-70d6-3374-8990-ffa452705003.roa (raw, json)
Hash identifier: oJ0ZvVJ2V95dee12srSwJ0S/GpV6Vdbi8Jx5SaZhzNY=
Subject key identifier: 2F:D7:21:00:59:C0:DF:F3:A6:B1:3F:F3:42:27:D1:14:72:87:08:2A
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F432858494BADD0DBFBC246AF50E6B200
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/45c81aa7-70d6-3374-8990-ffa452705003.roa
Signing time: Mon 24 Mar 2025 15:29:40 +0000
ROA not before: Mon 24 Mar 2025 15:29:40 +0000
ROA not after: Sun 22 Jun 2025 15:29:40 +0000
asID: 30036
IP address blocks: 2604:2e8d:5400::/38 maxlen: 38
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:4b:ad:d0:db:fb:c2:46:af:50:e6:b2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Mar 24 15:29:40 2025 GMT
Not After : Jun 22 15:29:40 2025 GMT
Subject: CN=5f7b1e9b-3ec4-414e-bb14-7fcad908d478
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:7e:8d:03:d8:2e:72:48:0e:00:e2:88:b9:1a:
cc:25:f8:0a:b8:9f:81:c4:4f:1a:bf:3a:6c:f7:ea:
a1:09:e5:bf:5d:fa:9b:a7:04:34:e7:10:31:64:50:
40:54:8b:83:37:d6:b7:be:05:ea:ae:ec:0b:72:60:
75:f2:7a:1a:eb:89:79:05:df:4a:50:22:36:4d:8c:
ae:aa:34:d8:06:59:c2:88:eb:04:66:72:e4:04:4a:
f4:e4:77:fc:69:53:51:26:03:ca:dc:1b:a5:c8:3f:
95:c4:1e:c8:db:50:7d:7a:00:6c:c2:04:a4:33:3e:
de:73:09:d7:93:37:d6:ba:04:02:5f:d5:2a:38:26:
d0:15:8c:43:81:2a:ba:1d:43:bf:cb:0b:f3:7e:44:
d0:d9:93:d2:86:7e:6b:d9:e3:ec:30:62:ed:3d:ff:
31:31:12:2f:2c:1d:da:44:f2:a5:b6:f3:ff:b8:a2:
11:9d:9b:57:21:3a:00:65:e7:87:26:ac:bd:00:6e:
10:43:88:33:a1:6a:3f:6c:14:bd:23:2e:f2:c1:1f:
29:37:7a:15:d9:9a:12:32:55:0e:78:39:c3:29:9e:
b9:9f:bf:9d:e2:f0:35:4b:7f:01:81:28:84:5c:e6:
6a:b6:16:36:55:46:2a:8d:24:75:cb:d7:38:58:68:
b9:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:D7:21:00:59:C0:DF:F3:A6:B1:3F:F3:42:27:D1:14:72:87:08:2A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/45c81aa7-70d6-3374-8990-ffa452705003.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2e8d:5400::/38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6d:51:07:6a:d8:2d:6c:57:72:61:4b:6a:0c:18:10:c5:36:e1:
83:45:f5:8d:d4:a0:30:ca:49:9c:45:c1:f2:7b:e9:3c:a3:99:
37:bc:eb:2c:9e:45:40:84:ad:a3:85:21:e8:c9:d7:35:cc:ae:
b5:bc:2a:79:32:8f:a0:6b:46:0f:0b:a3:6c:81:16:8b:6f:6d:
97:39:13:46:33:18:a4:d2:ef:2b:8c:b3:01:f3:ec:a0:d3:ba:
04:e4:c7:fe:5b:a4:f8:36:52:5f:02:4b:92:50:ee:2e:d9:95:
c0:28:ce:7f:ca:aa:f9:e1:93:9c:4b:e9:b4:61:6c:48:18:36:
16:c7:4e:eb:d6:16:bb:16:42:5d:a0:82:84:4a:a7:5e:22:26:
02:a1:d0:71:93:0c:9a:11:13:a3:cd:61:da:90:42:8e:4c:23:
22:f0:16:cd:61:71:70:af:b8:50:5e:f7:91:31:80:f0:ea:6f:
59:e1:4c:a1:12:d4:94:c7:2a:1a:9f:05:6d:76:bf:c0:3e:ff:
fe:fd:80:8f:79:92:c8:cb:4c:01:2d:a4:23:ba:f6:2f:a7:28:
e0:bf:2a:2d:ec:8f:75:7c:5e:1a:cc:ec:2f:3d:6f:06:c2:b8:
b1:31:1a:a5:0f:7e:cc:3c:98:ce:cb:b6:2d:8e:2d:db:73:43:
a4:c1:a6:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 00:23:51 2025 by rpki-client