Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/7c4f48a4-e960-3cf9-afe3-234540a4db6d.roa
File: 7c4f48a4-e960-3cf9-afe3-234540a4db6d.roa (raw, json)
Hash identifier: QdXkRTJMftbWVHYIeBWIwFmOQ8hTy6v3a1KOwsuvciU=
Subject key identifier: B7:01:17:CF:5A:84:70:11:3B:98:85:18:A2:B4:B7:E4:96:A9:4C:71
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F43285849389EF54A814866E5D5E31280
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/7c4f48a4-e960-3cf9-afe3-234540a4db6d.roa
Signing time: Mon 17 Mar 2025 19:39:22 +0000
ROA not before: Mon 17 Mar 2025 19:39:22 +0000
ROA not after: Sun 15 Jun 2025 19:39:22 +0000
asID: 30036
IP address blocks: 2604:2e8d:e000::/38 maxlen: 38
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:38:9e:f5:4a:81:48:66:e5:d5:e3:12:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Mar 17 19:39:22 2025 GMT
Not After : Jun 15 19:39:22 2025 GMT
Subject: CN=e7905531-d9bc-4fc3-a993-9bd599d84315
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:aa:b2:eb:e4:8e:5e:c5:24:59:9a:3c:6e:3a:
68:72:a0:84:86:0d:0f:8a:fe:38:5c:96:1d:d0:58:
37:ec:d2:7c:85:82:df:40:a7:ce:c3:ec:67:7c:1e:
93:f4:68:7b:a3:cd:3e:a5:3f:2d:10:9f:01:05:62:
ab:34:5a:ce:ce:c6:7c:28:28:94:de:21:5a:e9:41:
b7:b2:30:1f:46:e8:9a:20:86:1b:85:fd:e8:2f:5a:
47:73:c9:65:0c:d7:95:d3:df:09:59:3d:c4:c8:41:
fe:34:3e:8e:67:3e:61:26:4c:3e:49:f6:5a:67:73:
94:2c:2c:6f:ae:47:af:1e:13:b0:35:36:0b:d2:cb:
fc:d2:86:81:b0:f2:e2:04:e8:1a:b6:d1:9a:a6:60:
e7:be:2c:db:1a:9c:d0:13:7b:0d:09:d8:61:f1:cc:
54:08:0c:15:68:d1:a0:f3:d5:e1:90:79:f9:a0:80:
e9:4b:90:66:50:c5:d4:31:39:6e:1e:94:01:4e:c8:
03:7e:01:69:28:85:bc:38:d5:d3:ef:0f:36:1a:11:
50:d8:bf:6f:93:97:bc:ad:a1:65:21:6a:0d:0e:74:
3b:6c:93:0c:cf:9c:a0:04:09:a1:61:18:77:0a:78:
09:5b:b3:f9:17:a6:33:f2:2e:13:17:90:ae:d2:14:
db:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:01:17:CF:5A:84:70:11:3B:98:85:18:A2:B4:B7:E4:96:A9:4C:71
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/7c4f48a4-e960-3cf9-afe3-234540a4db6d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2e8d:e000::/38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6e:89:6c:3e:a1:79:6f:36:b3:2c:1f:82:ca:a5:36:e1:10:9f:
16:15:b6:19:0e:47:6c:27:42:5f:16:4f:50:26:03:8c:91:77:
fb:d8:b4:96:ca:05:8e:01:17:b9:a3:66:e8:4d:64:28:d2:02:
81:81:54:d7:36:bd:78:20:90:6d:a7:28:d6:ec:ac:56:4e:46:
94:50:d0:40:c2:13:55:b8:74:6d:53:8a:7d:54:15:28:4b:c5:
6a:32:34:56:1d:83:16:29:92:e3:e3:c4:83:0e:98:4a:d5:4d:
2d:43:0d:e7:31:2a:2a:39:a6:51:fc:4d:ac:c8:50:bc:89:7a:
bb:1b:4c:86:54:ae:41:7c:e5:ca:94:fb:96:39:ab:8b:57:cd:
47:a9:90:4f:ef:5a:6b:31:93:d1:d1:a9:ac:7e:42:be:eb:ab:
1b:a1:c5:86:e5:ea:5e:4e:f2:99:66:91:b2:64:ff:ce:0f:af:
2a:c5:56:da:e3:54:fe:99:d1:e8:c8:6a:62:24:f6:77:92:72:
a4:11:07:4a:a5:b3:89:cf:e9:e6:7e:d3:75:4c:27:2c:14:81:
59:a9:7c:2c:0b:b9:b1:a1:1b:18:aa:62:5a:e9:77:83:eb:d5:
f0:cf:40:4e:7f:f7:a7:c4:93:3a:22:a0:15:08:eb:e9:fb:0a:
b7:09:71:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 00:01:11 2025 by rpki-client