Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/51c99d71-8bf3-3701-b8c9-bc7f347602e5.roa
File: 51c99d71-8bf3-3701-b8c9-bc7f347602e5.roa (raw, json)
Hash identifier: b7NPP7JpiACbu3vGGqZwE4CDIo6bye3cuoQX473mERg=
Subject key identifier: F5:CB:C3:B8:6A:C5:B4:2F:7D:94:7C:CB:60:DB:1F:6A:1B:45:9C:68
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F43285848C7F7EE9E71ED916C4C9D1F00
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/51c99d71-8bf3-3701-b8c9-bc7f347602e5.roa
Signing time: Wed 05 Feb 2025 11:12:18 +0000
ROA not before: Wed 05 Feb 2025 11:12:18 +0000
ROA not after: Tue 06 May 2025 10:12:18 +0000
asID: 30036
IP address blocks: 2604:2e8b:800::/38 maxlen: 38
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c7:f7:ee:9e:71:ed:91:6c:4c:9d:1f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Feb 5 11:12:18 2025 GMT
Not After : May 6 10:12:18 2025 GMT
Subject: CN=bf7e4803-a9fb-42e4-a6ec-5a10f181205e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:5f:69:f5:3c:22:49:dd:4b:e1:f8:7f:ca:e9:
da:44:00:20:7e:09:b3:2d:8c:c8:b5:21:71:9b:d6:
4c:17:1b:8c:a1:1f:80:40:f3:2e:16:91:05:83:06:
e8:0a:63:05:d6:dd:9f:84:81:bf:fa:d9:ee:35:bf:
a5:78:45:05:62:54:e1:42:97:31:ba:9b:81:bd:61:
9a:78:c2:08:38:c6:6c:2c:8b:25:22:fc:69:6d:bc:
b0:d5:45:3f:c4:a6:90:eb:44:4d:e3:42:bc:9d:a0:
d8:44:b6:f4:3e:93:36:52:0d:3f:0a:a9:8f:3b:0b:
10:58:d7:54:6b:24:a4:57:18:be:d2:04:c5:2b:1f:
ef:8c:98:a1:1f:74:3e:cd:df:ac:32:30:07:57:f5:
84:d8:9a:54:23:17:8d:4f:7f:f8:c6:6d:9a:a0:85:
3f:b7:4e:dc:49:33:bd:0c:bb:ff:83:76:84:e8:0a:
e5:d2:c2:9d:e6:a7:6e:f0:5d:b3:74:71:ec:58:b6:
40:b8:1f:2d:49:5d:66:62:d2:51:22:b3:4e:d7:6b:
45:98:75:42:d0:c4:18:2d:63:e2:24:18:23:91:77:
49:18:3b:93:c4:f5:7d:ec:e2:b7:21:97:aa:14:2d:
7b:3e:6d:68:75:c1:48:fb:f2:3e:31:f1:c1:d7:2e:
89:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:CB:C3:B8:6A:C5:B4:2F:7D:94:7C:CB:60:DB:1F:6A:1B:45:9C:68
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/51c99d71-8bf3-3701-b8c9-bc7f347602e5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2e8b:800::/38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0a:0b:35:65:40:f1:4c:61:e3:3a:d6:dc:4c:a5:9d:79:d1:f8:
80:c9:e9:16:da:b7:b8:8c:18:9f:78:e1:9d:db:05:00:59:56:
3a:db:01:d5:c2:61:67:8c:e3:9e:66:fc:c8:d3:8e:0a:47:04:
11:75:79:53:93:11:4e:33:64:e5:36:44:c5:be:dd:5e:71:99:
68:c7:a7:5a:dc:e6:ce:93:b1:64:40:f9:2c:7f:44:b3:2c:4b:
b0:e2:49:3c:0f:7a:d9:66:87:81:10:65:f1:97:f8:1f:5d:1f:
3a:58:f7:a9:46:1a:bc:b4:ed:ad:81:ab:73:23:14:ec:27:85:
3e:b3:8e:58:7a:18:4f:d2:00:a1:39:b6:b5:7d:45:74:16:e1:
6c:f0:c9:f4:61:95:cb:89:19:b5:29:eb:ec:d9:73:cf:f2:36:
ad:13:45:8a:b1:3c:2b:da:59:4a:cf:c7:33:31:39:48:6f:b8:
c5:a6:67:3c:8d:c3:16:43:d5:ad:7c:a3:27:43:bd:b8:88:52:
15:50:ec:d4:1e:e3:1c:f8:89:3b:ae:8e:43:d9:15:80:10:f6:
51:b8:81:f8:82:f2:11:6f:5b:4d:e2:06:df:43:10:10:5b:41:
6f:9c:bb:f4:76:de:8a:ed:62:5e:52:63:5b:24:07:a8:24:24:
a8:10:56:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 00:09:00 2025 by rpki-client