Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/7cacff8a-da2b-36a9-8bb2-f514d78ba690.roa
File: 7cacff8a-da2b-36a9-8bb2-f514d78ba690.roa (raw, json)
Hash identifier: BheKgvWFaVP+woyH7kcddCiECYFg8VkNJwH7uk2YmrY=
Subject key identifier: B0:B0:99:E7:13:22:44:13:DB:75:5F:46:33:E6:7A:00:4C:B6:9B:E0
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F43285848C264CA40A59203D8B8447B40
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/7cacff8a-da2b-36a9-8bb2-f514d78ba690.roa
Signing time: Mon 03 Feb 2025 11:16:47 +0000
ROA not before: Mon 03 Feb 2025 11:16:47 +0000
ROA not after: Sun 04 May 2025 10:16:47 +0000
asID: 30036
IP address blocks: 2604:2e89:8400::/38 maxlen: 38
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c2:64:ca:40:a5:92:03:d8:b8:44:7b:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Feb 3 11:16:47 2025 GMT
Not After : May 4 10:16:47 2025 GMT
Subject: CN=0cf533f7-c515-4d92-a48d-a148d492c249
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:35:99:87:72:9c:04:82:ab:13:ad:67:ed:9f:
d3:fb:7a:c4:50:9e:3b:df:11:de:c0:a2:f7:70:c0:
38:79:16:1e:a5:63:be:57:d3:b2:94:cc:b8:fd:4a:
08:7a:00:80:ae:d4:ef:1f:40:80:d4:e4:5f:23:88:
81:7e:dd:cd:99:87:e1:f7:af:7b:cb:ef:c2:73:ab:
5a:fd:e2:15:78:fc:17:26:bf:64:e9:7c:c7:7d:fc:
41:21:ce:22:51:68:a2:e2:2c:82:ee:bc:8c:26:2a:
43:24:2b:9e:40:f6:4e:d1:61:46:e6:10:89:e8:38:
d7:5b:51:a6:9e:d5:19:fe:13:d4:24:65:49:c2:88:
5e:c7:33:ce:1e:21:4b:fa:46:18:91:00:f9:88:6b:
73:7d:ad:97:f1:02:58:9a:fb:3f:10:bd:e5:10:fd:
d9:29:a1:9a:fe:d0:3c:10:ff:34:38:f7:e6:ed:6e:
92:a9:6d:42:f3:f7:1d:10:d5:37:79:9d:d6:77:34:
18:47:13:fc:a2:fa:b0:c5:39:8e:39:9e:c2:ba:b8:
67:9c:86:d1:ef:52:fd:c9:f0:29:4f:26:9f:c0:dc:
68:e9:76:d7:12:10:ce:e2:db:f9:a7:a2:9c:8e:5b:
57:b8:18:0e:95:4a:51:17:52:b7:9d:9e:31:a0:e1:
e6:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:B0:99:E7:13:22:44:13:DB:75:5F:46:33:E6:7A:00:4C:B6:9B:E0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/7cacff8a-da2b-36a9-8bb2-f514d78ba690.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2e89:8400::/38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7a:60:d6:fe:45:69:81:28:fb:92:40:bc:a2:66:f4:6b:f4:e4:
e8:82:35:32:ae:00:ec:22:ee:2f:43:13:5f:be:96:34:59:f6:
fd:bc:79:14:38:4b:66:82:63:2a:6e:bb:2d:12:ac:b8:7a:82:
d4:68:de:bf:2a:32:82:9e:07:04:a4:df:c1:bc:56:38:53:c2:
9b:56:db:10:c8:1c:0d:7c:6d:74:2c:29:1a:54:bc:e3:95:8f:
30:98:26:4c:da:6d:97:c6:ec:9c:7d:29:c7:7a:17:64:96:da:
e8:cc:89:b7:39:4c:3b:3a:4d:e4:a0:32:d5:b0:a0:93:a7:a4:
ad:b9:16:68:53:7d:d3:7c:2a:2d:09:67:69:4a:70:23:4d:2c:
7d:98:7f:55:67:69:7a:7d:1f:3f:1e:2f:96:0d:dc:68:d1:0a:
1a:bd:03:ba:8c:b8:0f:f6:99:82:16:65:67:bb:15:d7:80:48:
e1:a0:2d:c6:bb:e9:ad:9e:0e:8e:32:74:91:b4:a3:a0:1e:95:
ee:ef:d5:d5:d1:59:78:21:12:03:2d:af:a9:61:5f:5e:37:1d:
d9:a2:b8:89:7f:88:48:86:6e:86:68:c6:8d:7c:74:94:e3:9f:
a6:e7:db:c9:a2:0e:c6:98:0c:a5:1c:90:fb:96:72:74:c9:3c:
57:16:a6:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 00:08:58 2025 by rpki-client