Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/653596ff-f00e-342f-88fc-09d456825ec7.roa
File: 653596ff-f00e-342f-88fc-09d456825ec7.roa (raw, json)
Hash identifier: PbvraB3Ip+Rrzc89QzqCsfMcydJymes0om5hZiJPfRY=
Subject key identifier: BA:7F:68:31:F9:17:CD:54:14:D9:CF:46:44:3C:7B:B5:25:68:ED:80
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F43285848C264A340CC2AD69D98082080
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/653596ff-f00e-342f-88fc-09d456825ec7.roa
Signing time: Mon 03 Feb 2025 11:16:29 +0000
ROA not before: Mon 03 Feb 2025 11:16:29 +0000
ROA not after: Sun 04 May 2025 10:16:29 +0000
asID: 30036
IP address blocks: 2604:2e89:3000::/38 maxlen: 38
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c2:64:a3:40:cc:2a:d6:9d:98:08:20:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Feb 3 11:16:29 2025 GMT
Not After : May 4 10:16:29 2025 GMT
Subject: CN=0d0e956c-a815-4bba-8133-7a135b1b0804
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:a4:11:d3:f0:fd:07:62:65:e0:96:dc:e2:a7:
05:7d:59:3e:31:dd:08:a7:12:47:f2:1e:cc:6b:c4:
ac:73:02:44:37:18:4a:38:fb:a2:91:11:dd:e0:9d:
e7:66:bc:4e:46:a1:74:bd:50:ea:8d:80:db:4b:6d:
93:16:34:12:6a:64:de:e7:27:3c:e0:61:29:27:48:
1b:14:f9:0a:6a:7a:8f:41:57:f4:dc:63:14:d0:57:
1b:b2:32:e7:dd:e9:15:ae:30:62:42:0c:a8:5e:ad:
8c:98:68:5f:3c:bf:39:e3:81:da:a9:3e:00:eb:34:
23:6e:df:f2:92:c7:f9:22:be:66:18:37:ae:49:3d:
94:35:77:a0:a9:82:fd:96:91:9b:a2:cc:4f:16:08:
73:ab:89:63:92:de:00:7a:0c:5f:f1:c3:b7:e7:b1:
d1:0a:dd:f5:07:56:c1:0d:11:a5:88:e6:05:76:d3:
75:c6:0b:83:14:88:ec:05:18:c0:ab:4b:81:20:6b:
f7:01:03:f0:f0:14:66:e5:df:33:1f:7c:f6:8e:05:
b8:76:da:98:e4:51:2e:46:70:9b:9f:12:d4:53:1c:
4d:2b:da:06:14:12:bd:89:64:fc:c7:f7:79:ed:9d:
15:f2:3e:b0:9e:e8:c7:f2:bd:f6:08:8d:04:ad:c8:
bd:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:7F:68:31:F9:17:CD:54:14:D9:CF:46:44:3C:7B:B5:25:68:ED:80
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/653596ff-f00e-342f-88fc-09d456825ec7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2e89:3000::/38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0a:b3:a9:9f:88:ff:a9:af:c2:b7:74:6d:d8:a3:14:05:1f:5d:
2b:c0:e4:d2:60:6e:18:ee:f9:a1:1f:81:49:c9:62:d9:0e:53:
17:e4:28:ff:e5:e8:84:52:37:81:28:2e:74:e0:3b:a7:12:a8:
ae:f8:91:c0:17:f0:a3:e0:c9:66:5d:04:23:48:ff:13:7c:dc:
e9:39:19:12:4e:f6:ab:65:21:1e:42:95:98:04:53:5f:0a:84:
8b:ca:be:dc:ff:b0:b1:e2:ed:9e:46:dd:d7:95:78:c1:ea:8e:
3a:a5:71:be:0f:b8:5b:4d:97:0e:be:ce:c6:20:c2:22:50:47:
c3:a6:af:ce:c9:81:eb:a5:52:4b:9d:01:9a:51:ba:df:b7:bf:
62:37:f5:e8:66:1e:32:4d:51:b8:75:41:f6:e5:25:47:77:dc:
3b:0e:4a:c3:a8:21:a6:71:a6:bf:c2:6c:24:67:92:7f:86:2c:
3b:a3:78:8e:40:d5:84:4a:25:71:f5:e8:53:aa:6b:af:25:5e:
e8:e9:8a:c5:30:b2:30:5d:84:81:fe:62:3a:21:5a:3c:5e:f7:
65:be:79:69:8b:73:ec:89:59:2d:6b:4f:37:0a:67:90:d4:76:
9c:e2:2e:bd:40:ff:9c:76:10:62:7b:f3:a8:53:bd:91:31:a2:
b4:5a:57:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 23:58:41 2025 by rpki-client