Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/71d18cee-db23-31f0-a085-148e8652110d.roa
File: 71d18cee-db23-31f0-a085-148e8652110d.roa (raw, json)
Hash identifier: spQi/gebdQm/kGGGqC7LD60GTIg77XiEs7G4cnHv4fI=
Subject key identifier: 38:9F:BE:13:20:89:11:AB:C7:24:80:8D:D7:6A:5E:C8:1B:EF:5F:8A
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F43285848C5800CBC1AA93709F5DA95C0
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/71d18cee-db23-31f0-a085-148e8652110d.roa
Signing time: Tue 04 Feb 2025 13:59:08 +0000
ROA not before: Tue 04 Feb 2025 13:59:08 +0000
ROA not after: Mon 05 May 2025 12:59:08 +0000
asID: 30036
IP address blocks: 2604:2e89:a000::/38 maxlen: 38
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:80:0c:bc:1a:a9:37:09:f5:da:95:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Feb 4 13:59:08 2025 GMT
Not After : May 5 12:59:08 2025 GMT
Subject: CN=3776b6e4-f852-469a-80d8-76857555d2b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:31:0b:3a:79:44:de:1e:6a:d9:3e:13:f6:72:
93:ee:37:31:17:46:e8:0e:14:ac:b2:4a:af:a4:2d:
ac:61:d6:91:15:8b:fe:5a:83:2c:65:2f:76:6f:b2:
8e:22:ea:75:3d:1d:bc:ee:37:66:b1:91:01:15:c0:
96:ed:c1:46:e9:8d:0c:88:c1:78:8c:d4:68:f0:2b:
1b:6b:70:88:dc:1d:a3:5f:9b:5c:31:d7:93:48:b5:
bb:1a:1d:85:1e:35:b8:88:fe:fb:0a:68:dd:7c:d6:
7f:e2:6f:ac:96:fd:8e:7e:c3:04:4e:41:bc:e8:85:
f9:33:c2:91:87:7a:a0:fc:2f:22:0d:84:b3:4d:af:
da:92:aa:52:a0:1a:f7:63:d8:a3:62:8a:ba:8f:f5:
dc:20:f7:33:e6:95:1a:d9:e4:3b:21:60:97:51:27:
61:57:f0:ce:5a:30:02:85:f2:34:7a:75:6b:30:b0:
1f:0b:5f:eb:3b:95:26:f4:53:ce:fd:f3:26:e0:35:
81:39:6c:e1:8b:1b:d1:0e:03:e2:88:61:3a:85:3a:
15:4f:ff:fe:d9:e9:84:56:2f:51:94:33:3e:52:66:
b9:b7:b8:dd:18:97:1c:20:d1:2b:80:a4:21:30:9d:
1b:96:f9:cd:5a:de:e9:87:c4:93:43:c6:df:02:7c:
0e:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:9F:BE:13:20:89:11:AB:C7:24:80:8D:D7:6A:5E:C8:1B:EF:5F:8A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/71d18cee-db23-31f0-a085-148e8652110d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2e89:a000::/38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
60:7b:bd:c5:d8:d0:b2:88:9d:50:e1:a5:b9:2f:1c:d0:dd:95:
24:39:a6:6b:00:15:44:fc:5b:fe:3a:5f:80:fd:84:a0:f5:e6:
09:f8:84:01:8a:4e:e1:71:31:4d:96:2f:9a:06:07:df:71:9e:
0c:2d:4e:64:3d:79:44:dc:82:d6:32:79:76:46:c4:ed:4e:c3:
f8:e4:c5:ee:f0:7b:d3:bf:d2:51:d6:3f:45:35:52:2d:b3:e6:
40:29:c8:8a:a2:10:58:a7:8d:07:0e:b3:e2:be:d2:b8:8d:65:
47:82:30:f9:8d:51:2b:f5:83:b6:c1:5c:96:79:cf:10:35:fc:
a7:9d:b2:d6:35:6a:b3:dc:73:55:61:4d:e5:7e:7f:24:7b:3b:
0e:54:a1:39:30:5a:ef:78:52:7a:62:cc:0c:07:fc:be:56:e9:
6d:64:6b:ca:83:7d:27:af:a2:b3:5a:b1:02:9e:3a:39:51:2e:
50:ba:2f:f7:03:95:39:27:95:f1:99:0f:d8:bc:de:03:25:c5:
f8:13:f2:21:63:91:db:3e:66:c6:e1:d7:13:88:bc:e8:3e:4c:
9b:ef:62:a5:91:11:4c:6f:71:66:d3:d5:45:06:22:d8:0a:22:
66:e5:0f:94:29:c3:1c:8c:7f:40:94:52:a4:c0:13:24:29:ed:
6d:41:e5:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 23:46:21 2025 by rpki-client