Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/654d5092-1090-3824-8f45-42e73fd230e9.roa
File: 654d5092-1090-3824-8f45-42e73fd230e9.roa (raw, json)
Hash identifier: NcABejuiJs9VtGa4ik0kldBMjS4q4bGFvMAzS4AE/gQ=
Subject key identifier: 98:35:9F:4D:9A:68:8C:57:6F:55:29:3C:2E:48:8F:0B:B2:5E:53:88
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F43285848C55FE40466FE7BAF42D45980
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/654d5092-1090-3824-8f45-42e73fd230e9.roa
Signing time: Tue 04 Feb 2025 12:54:20 +0000
ROA not before: Tue 04 Feb 2025 12:54:20 +0000
ROA not after: Mon 05 May 2025 11:54:20 +0000
asID: 30036
IP address blocks: 2604:2e8c:8c00::/38 maxlen: 38
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:5f:e4:04:66:fe:7b:af:42:d4:59:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Feb 4 12:54:20 2025 GMT
Not After : May 5 11:54:20 2025 GMT
Subject: CN=5681c287-c3ab-4b41-bf77-128ca1744595
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:64:35:d3:d4:7d:5d:ed:b4:73:dc:7c:40:3e:
e1:2d:c5:79:33:91:44:d4:7f:aa:c5:f5:38:ac:7a:
2a:65:6b:0c:4a:88:3f:f9:b4:0c:e1:d0:fb:dd:6d:
28:c7:34:1f:30:ac:79:37:2c:a7:b6:a5:93:02:c4:
d7:90:17:fa:d2:26:7c:40:33:ca:3b:7c:b0:a8:6c:
15:aa:07:ba:7b:25:27:60:8d:e1:14:cc:32:1c:b4:
f1:81:1b:39:d1:ee:17:e5:08:07:88:e5:45:2a:25:
5f:72:5c:37:56:a3:a5:cc:03:3f:8c:74:97:e9:ce:
b3:05:a4:07:40:c5:eb:72:25:99:a8:1e:24:ea:fd:
5e:c0:c7:e7:80:fa:89:97:47:aa:b7:58:2f:a2:ac:
1a:b7:11:54:42:06:d4:e2:ef:66:fb:75:ce:16:c1:
98:50:8a:61:e9:5e:84:09:31:ce:84:64:fa:61:c7:
53:8f:07:9b:71:ce:8a:37:72:97:56:6a:a8:80:da:
0e:94:e3:42:14:d7:a1:57:59:27:ba:bc:e6:33:28:
e9:a6:ee:4b:0d:67:45:e4:0a:8d:dd:20:41:39:ef:
72:ca:be:cb:29:39:c0:71:e1:e8:03:df:21:ff:8c:
18:04:99:19:1d:7c:ba:ba:55:1e:35:56:2f:ee:29:
fb:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:35:9F:4D:9A:68:8C:57:6F:55:29:3C:2E:48:8F:0B:B2:5E:53:88
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/654d5092-1090-3824-8f45-42e73fd230e9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2e8c:8c00::/38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
35:da:ac:bc:19:3e:e7:00:ae:35:17:dc:c9:c2:1d:03:91:42:
20:a2:c5:a9:a3:f1:b1:6f:12:6f:6e:62:a6:01:f4:d9:12:4e:
1d:20:24:aa:b9:be:ed:ee:8f:e4:e9:89:83:96:eb:2e:37:ad:
12:5a:e9:d5:01:b8:da:f5:3c:dc:95:8e:e5:eb:bc:b3:cf:04:
89:b1:16:24:8c:b4:6d:7d:d2:f8:d9:46:fe:4e:a5:1f:50:ff:
1e:fd:f9:6e:4c:7c:97:3a:fd:fd:23:ca:77:75:ac:c0:ed:10:
5a:0b:61:bc:c2:6a:6c:b9:4a:94:8e:8f:ee:95:12:13:b7:31:
01:7a:a8:98:fc:a7:9f:82:ab:d9:19:cd:6d:71:b2:b5:d2:6c:
40:9a:ad:92:77:9a:61:2b:f0:4d:a6:1a:8a:54:bc:e8:39:d0:
f0:53:dc:6b:1d:8f:9d:53:5b:70:ff:9f:cf:47:a8:ab:44:71:
26:05:c3:35:1b:22:81:1b:be:c7:4d:f9:85:ca:c1:27:2b:ed:
43:66:ad:1c:37:18:dc:22:1c:ab:3b:93:dd:20:a4:35:fe:48:
7d:39:d8:35:35:f9:5a:e0:fa:ac:57:d4:0a:58:80:8b:65:46:
46:fc:ba:80:b3:01:a9:ee:05:4e:49:95:4a:87:5e:6a:02:3a:
fa:a0:86:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 05:37:20 2025 by rpki-client