Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/683ad58c-cddc-3c5a-b1f4-9da1d1d01436.roa
File: 683ad58c-cddc-3c5a-b1f4-9da1d1d01436.roa (raw, json)
Hash identifier: OIAAH3K7/4yvXuNE1mHhVNZNZ0+yXWHHBKOnbkI2Bfo=
Subject key identifier: 64:CF:41:9D:74:89:6E:16:46:C3:F3:A4:86:AB:8F:2C:83:B9:F4:CD
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F43285848C577DFF902B295F3CDB85480
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/683ad58c-cddc-3c5a-b1f4-9da1d1d01436.roa
Signing time: Tue 04 Feb 2025 13:42:40 +0000
ROA not before: Tue 04 Feb 2025 13:42:40 +0000
ROA not after: Mon 05 May 2025 12:42:40 +0000
asID: 30036
IP address blocks: 2604:2e8b:b800::/38 maxlen: 38
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:77:df:f9:02:b2:95:f3:cd:b8:54:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Feb 4 13:42:40 2025 GMT
Not After : May 5 12:42:40 2025 GMT
Subject: CN=8415d5cf-f551-4350-afb5-805aeca81453
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:cd:46:26:d7:56:d7:f3:99:76:bf:b4:c1:36:
43:1e:9f:c4:01:8f:65:35:ee:1e:05:cb:30:e5:31:
1e:7f:f2:02:d3:91:6d:84:87:c1:e4:4b:68:58:bd:
5d:44:64:d0:77:a0:1d:a1:1f:2b:85:22:a6:4e:bb:
b9:9a:54:cc:3c:2b:7e:8b:8b:35:7e:4b:20:47:40:
c0:fe:16:0e:a2:a6:49:d0:de:30:d6:5f:fc:4a:63:
ca:df:1b:66:e0:88:f8:9d:86:b3:eb:4b:29:3f:8b:
dc:9a:93:61:f8:ef:5b:60:a1:7f:d8:9e:db:25:72:
f2:4a:41:61:ec:c1:11:17:e5:9d:a6:d8:b2:f9:23:
20:f8:3c:38:91:14:9f:c6:09:1f:f9:c7:54:29:30:
d2:56:8a:f5:68:72:28:ef:ea:54:2c:3d:af:9e:95:
a4:09:e4:9a:95:da:3a:90:ae:e3:c6:51:0c:d4:7c:
35:0a:a9:17:39:0b:d5:fa:1e:99:86:1f:c3:94:8d:
b7:b1:51:1d:4f:5d:28:94:2c:f0:f0:a5:33:cc:6b:
56:b3:15:28:73:9b:d2:ad:01:1d:cd:07:7c:c2:ab:
e9:0e:62:0e:07:92:8a:94:59:54:30:78:08:c6:cc:
24:15:ef:a8:06:85:18:07:63:76:80:53:48:96:fd:
25:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:CF:41:9D:74:89:6E:16:46:C3:F3:A4:86:AB:8F:2C:83:B9:F4:CD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/683ad58c-cddc-3c5a-b1f4-9da1d1d01436.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2e8b:b800::/38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
66:cf:ab:a9:14:65:c2:73:8b:86:7b:47:9d:1f:ea:ed:57:53:
ca:8e:fb:1f:b0:8f:82:fb:92:9c:de:f5:ec:1c:78:5f:1a:f5:
c6:a3:fe:fd:fc:75:98:05:ce:ef:81:92:66:fc:a2:89:a5:2a:
d5:70:a7:73:89:0b:bd:b0:df:a1:78:ca:3f:42:d8:18:8f:5f:
08:dc:07:5a:5c:13:db:73:4b:73:2f:6b:57:91:ad:9f:1b:d7:
ea:3b:85:ab:de:37:37:b0:e3:d5:35:11:e5:72:3d:ce:63:6e:
38:08:74:eb:43:f6:cc:f7:fd:1c:d3:17:8c:7a:68:a3:68:af:
ba:ce:8c:0b:40:e7:69:1f:dd:6a:9b:67:e1:39:3c:c0:bc:f8:
c7:d1:a2:13:3a:9b:90:08:cc:de:ea:d7:d9:cf:dc:a3:b3:b2:
32:c7:ed:11:67:70:98:8e:5a:6f:ad:dc:9b:e8:45:1b:7e:d8:
f7:4e:0a:c7:52:03:aa:ad:b2:9c:cd:4d:14:5e:b7:cf:06:8b:
43:f6:cd:32:66:34:63:d4:30:81:78:fd:8b:d5:6e:cf:84:47:
91:31:86:c9:09:93:c4:e9:e5:90:19:8d:16:de:42:cc:06:b5:
0e:59:81:c6:16:23:01:ab:8f:77:5f:e1:11:b5:70:47:3c:a4:
19:11:26:ab
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEjFd9/5ArKV8824VIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5
YTE1MB4XDTI1MDIwNDEzNDI0MFoXDTI1MDUwNTEyNDI0MFowLzEtMCsGA1UEAxMk
ODQxNWQ1Y2YtZjU1MS00MzUwLWFmYjUtODA1YWVjYTgxNDUzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoM1GJtdW1/OZdr+0wTZDHp/EAY9lNe4eBcsw
5TEef/IC05FthIfB5EtoWL1dRGTQd6AdoR8rhSKmTru5mlTMPCt+i4s1fksgR0DA
/hYOoqZJ0N4w1l/8SmPK3xtm4Ij4nYaz60spP4vcmpNh+O9bYKF/2J7bJXLySkFh
7MERF+Wdptiy+SMg+Dw4kRSfxgkf+cdUKTDSVor1aHIo7+pULD2vnpWkCeSaldo6
kK7jxlEM1Hw1CqkXOQvV+h6Zhh/DlI23sVEdT10olCzw8KUzzGtWsxUoc5vSrQEd
zQd8wqvpDmIOB5KKlFlUMHgIxswkFe+oBoUYB2N2gFNIlv0luQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFGTPQZ10iW4WRsPzpIarjyyDufTNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw
Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvNjgzYWQ1OGMtY2RkYy0z
YzVhLWIxZjQtOWRhMWQxZDAxNDM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi
OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4
OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3
NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQui7gw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAZs+rqRRlwnOLhntHnR/q7VdTyo77H7CPgvuSnN717Bx4Xxr1xqP+
/fx1mAXO74GSZvyiiaUq1XCnc4kLvbDfoXjKP0LYGI9fCNwHWlwT23NLcy9rV5Gt
nxvX6juFq943N7Dj1TUR5XI9zmNuOAh060P2zPf9HNMXjHpoo2ivus6MC0DnaR/d
aptn4Tk8wLz4x9GiEzqbkAjM3urX2c/co7OyMsftEWdwmI5ab63cm+hFG37Y904K
x1IDqq2ynM1NFF63zwaLQ/bNMmY0Y9QwgXj9i9Vuz4RHkTGGyQmTxOnlkBmNFt5C
zAa1DlmBxhYjAauPd1/hEbVwRzykGREmqw==
-----END CERTIFICATE-----
Generated at Tue Apr 8 23:51:23 2025 by rpki-client