Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/78b8390b-0b0a-3674-9093-6e79b161d996.roa
File: 78b8390b-0b0a-3674-9093-6e79b161d996.roa (raw, json)
Hash identifier: wq82/32rHPdOLrBSMvDbMLWuHpmcbn67yqEDfoFympI=
Subject key identifier: 64:30:B1:11:0C:1A:0D:F9:C3:49:1F:E3:0E:D6:4E:92:75:BA:75:F3
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F43285848B737BDAAF4B8A63671533F00
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/78b8390b-0b0a-3674-9093-6e79b161d996.roa
Signing time: Thu 30 Jan 2025 11:12:08 +0000
ROA not before: Thu 30 Jan 2025 11:12:08 +0000
ROA not after: Wed 30 Apr 2025 10:12:08 +0000
asID: 30036
IP address blocks: 2604:2e8e:7000::/38 maxlen: 38
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b7:37:bd:aa:f4:b8:a6:36:71:53:3f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Jan 30 11:12:08 2025 GMT
Not After : Apr 30 10:12:08 2025 GMT
Subject: CN=dbe18ebb-1efc-4cec-9902-548a8f38c967
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:c7:b6:36:85:cf:85:cd:f0:85:e1:49:1e:44:
9d:cc:eb:33:24:24:af:10:94:ee:66:b0:08:4e:44:
3f:12:4d:82:38:b7:c6:c3:d7:4f:7e:11:23:9a:e2:
1a:35:0f:f7:a5:29:71:8f:ea:a0:ad:bc:24:f1:52:
01:ce:11:fa:70:06:50:72:a1:51:92:99:1d:61:1b:
83:17:52:41:0c:7d:a9:7f:94:e6:ad:ac:ab:35:88:
85:0d:a2:40:7c:09:d0:49:64:bf:e4:ae:b4:5a:81:
02:83:ba:67:69:31:7e:19:c3:83:2c:03:fe:8a:99:
36:72:1e:e4:94:a3:33:00:e6:b0:dd:8f:e7:de:53:
02:a8:0f:63:bd:8e:bb:d7:bb:8f:7f:4e:8b:95:26:
63:ea:c5:93:59:8d:d3:27:82:22:26:7e:cf:71:f2:
5c:5d:a6:9e:c6:3f:cf:ae:9c:c2:dd:61:f3:56:fa:
e5:1a:92:3f:7d:b3:a8:c0:ab:9d:45:f7:37:cf:14:
dc:94:22:a4:ef:50:12:fb:d9:7f:9b:04:87:4d:bb:
bd:ab:d6:9e:2a:a7:10:f2:01:7a:8d:aa:dc:44:8d:
50:d9:7c:2b:4d:9d:b4:16:89:3a:be:8f:be:cc:a9:
d8:6c:c7:fc:5a:dd:60:48:b5:8e:0a:71:f3:d3:75:
05:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:30:B1:11:0C:1A:0D:F9:C3:49:1F:E3:0E:D6:4E:92:75:BA:75:F3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/78b8390b-0b0a-3674-9093-6e79b161d996.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2e8e:7000::/38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
75:e2:aa:22:4f:a3:47:1f:3e:0e:14:a0:38:6e:e7:4e:e4:54:
49:a7:06:e8:ea:a7:d8:29:29:7f:e1:6f:22:93:7c:42:46:eb:
3a:07:27:70:68:ba:83:72:c2:02:95:b7:4c:d5:9f:e2:6f:1d:
a5:20:76:8b:63:1f:b0:4e:20:0b:45:a1:0c:70:98:63:43:38:
35:1e:e4:dd:06:38:06:35:44:3b:36:98:11:09:1a:b3:04:a1:
bd:f8:18:95:89:e3:06:25:28:06:c2:34:31:e2:e3:63:52:67:
74:50:5f:6c:54:2d:f8:0c:5f:b8:eb:e0:e4:0c:21:01:80:01:
f7:78:23:1a:15:14:75:06:e3:aa:2f:ee:66:3d:c4:f8:55:ad:
17:fc:ac:cc:bc:ad:b9:b2:8c:4d:fc:45:9c:5c:55:7c:8a:bc:
7f:b5:be:12:31:21:11:8f:1a:03:22:4c:10:08:99:a5:d3:c1:
e8:c8:c0:32:f1:0b:51:e7:e3:c1:ad:34:d8:ff:2a:b8:d9:24:
65:43:78:de:a1:29:2b:9f:16:77:7e:0a:e4:eb:2e:9c:f8:b6:
42:1e:4b:25:58:7f:46:47:c5:98:b0:32:08:bd:67:8c:9a:7b:
1d:24:11:6c:2f:f9:3d:2c:c8:62:3e:45:d4:1d:ca:2c:74:1b:
10:cf:47:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 03:21:29 2025 by rpki-client