Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/774857a1-aa71-36ab-8d75-2e7bd4b8a2ad.roa
File: 774857a1-aa71-36ab-8d75-2e7bd4b8a2ad.roa (raw, json)
Hash identifier: JjlXlPax5/WO37+tzR1uJPwcPkLb0RAWFKNKdv9D2S4=
Subject key identifier: 38:F4:A5:10:13:13:12:00:E8:55:69:A7:65:DB:C5:38:0B:45:71:DE
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F43285848C7FE21D6030BD69F4A24CC80
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/774857a1-aa71-36ab-8d75-2e7bd4b8a2ad.roa
Signing time: Wed 05 Feb 2025 11:24:48 +0000
ROA not before: Wed 05 Feb 2025 11:24:48 +0000
ROA not after: Tue 06 May 2025 10:24:48 +0000
asID: 30036
IP address blocks: 2604:2e88:b400::/38 maxlen: 38
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c7:fe:21:d6:03:0b:d6:9f:4a:24:cc:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Feb 5 11:24:48 2025 GMT
Not After : May 6 10:24:48 2025 GMT
Subject: CN=397c3059-0465-411a-a93d-f1d6c2d8d103
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:23:f6:85:cb:fa:a7:79:83:f3:8f:f7:59:30:
f8:69:3f:0c:9d:04:ae:9d:d1:ce:f0:3d:13:f1:98:
49:fc:d0:cf:81:f5:02:46:21:49:16:8d:ba:e8:28:
8e:1e:30:ca:d7:9a:cc:20:55:76:54:2c:0f:96:92:
c9:2d:9a:b3:6b:ea:f6:a0:2a:62:bc:dd:c4:69:51:
7b:28:a2:86:b4:33:37:86:4a:09:e6:37:c0:5a:33:
4c:db:e5:c5:37:a0:53:02:68:97:45:fd:9c:34:e9:
e5:fe:56:fc:82:4e:8f:28:c1:93:5e:18:ca:3e:79:
f0:69:a7:da:ce:31:b7:b0:28:6f:41:48:f6:0e:8b:
d1:d4:6d:09:48:e5:ea:a2:db:5f:62:08:33:f7:89:
e0:ca:37:da:81:55:60:db:02:d0:2a:3b:6a:32:bf:
e0:b1:b3:7a:a4:74:5b:d2:dc:6b:25:ac:56:68:ca:
d9:7a:7c:b5:75:f6:d6:30:f8:30:da:35:40:26:fb:
73:cc:af:51:cc:72:b5:94:6c:14:64:fe:b9:f0:ec:
c5:c2:ec:50:cc:44:a0:5f:51:b9:25:a1:f9:d6:9d:
af:d5:b4:e1:09:97:5d:a8:9c:8a:e5:88:3f:51:d1:
42:f7:4b:91:73:b5:c8:0c:a6:91:50:19:8f:ce:f1:
2c:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:F4:A5:10:13:13:12:00:E8:55:69:A7:65:DB:C5:38:0B:45:71:DE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/774857a1-aa71-36ab-8d75-2e7bd4b8a2ad.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2e88:b400::/38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
97:7f:93:5f:47:54:6d:95:70:68:34:71:2c:9f:9e:c4:fb:fc:
26:c6:72:ee:42:69:5e:61:ea:c7:9a:be:88:65:56:3f:ff:6c:
af:40:f5:ca:58:62:f1:45:55:d8:db:61:9d:27:3a:4e:74:87:
d9:54:13:50:52:52:6a:ea:cd:e8:9d:7f:c3:cb:8f:7a:74:3d:
3b:e2:87:96:0e:4d:8c:c8:15:77:a8:2c:ff:44:34:af:35:7d:
d0:17:d5:46:89:56:83:10:88:0a:30:cf:d1:87:dc:91:a8:f7:
e4:6e:2a:dc:20:e1:35:72:b6:6c:a0:6a:0a:6c:b5:89:2d:c3:
e1:46:bc:05:29:66:ff:a1:35:08:f5:c8:9c:ee:03:b7:e3:22:
63:bb:59:f9:76:1e:54:26:60:6a:a3:f2:aa:cd:41:91:af:4e:
b7:71:9f:75:c9:e5:56:53:ed:2e:9e:a7:24:ae:62:91:b6:d4:
80:f5:fd:50:38:1d:c9:ed:25:be:11:0a:38:cd:3e:10:40:8f:
10:57:b2:77:cc:d7:55:57:04:04:4b:59:7b:50:0c:ea:71:d3:
d7:e8:a0:01:af:b0:f3:fe:e3:ab:f5:aa:5d:ce:2b:63:97:cf:
df:0c:e8:50:29:7e:45:09:f7:98:8c:07:0e:f4:1f:79:78:9a:
08:39:83:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 23:58:47 2025 by rpki-client