Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/7f0b66ae-f3c1-3e11-8694-55ca344f7c2d.roa
File: 7f0b66ae-f3c1-3e11-8694-55ca344f7c2d.roa (raw, json)
Hash identifier: XX29hDwfhNcsJxxgZ+YxaoPtBB/AN5EccrNYpaBYOc0=
Subject key identifier: 8E:23:F9:39:09:90:42:3B:99:55:A5:06:E0:96:58:C7:AD:91:02:71
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F43285848C7FE28FB0D3F402522A84300
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/7f0b66ae-f3c1-3e11-8694-55ca344f7c2d.roa
Signing time: Wed 05 Feb 2025 11:24:51 +0000
ROA not before: Wed 05 Feb 2025 11:24:51 +0000
ROA not after: Tue 06 May 2025 10:24:51 +0000
asID: 30036
IP address blocks: 2604:2e88:c000::/38 maxlen: 38
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c7:fe:28:fb:0d:3f:40:25:22:a8:43:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Feb 5 11:24:51 2025 GMT
Not After : May 6 10:24:51 2025 GMT
Subject: CN=3ea8f446-8525-4a22-97ec-dc8a2e870922
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:54:8c:a4:dc:b4:53:4f:32:8a:6c:83:fe:d9:
e9:63:c9:87:44:73:fd:86:64:74:e1:57:9f:66:83:
49:31:fd:62:5e:9d:b3:76:26:eb:b8:5e:45:50:5c:
e6:c6:30:8c:b6:af:e6:e7:de:7d:e9:0e:01:3d:80:
fe:87:d8:f8:39:6e:13:2f:a1:e8:fa:7b:0d:44:0c:
75:5f:d5:df:ca:b2:2d:14:0f:8c:2a:fd:ce:00:ed:
ce:c9:7d:6b:93:bb:a7:14:d9:65:21:e6:90:c1:c5:
32:c6:7c:06:5e:02:5c:04:8a:fa:49:33:56:b3:68:
88:c1:4d:c8:32:b2:50:f9:b0:6b:af:a6:21:f4:de:
25:6e:cc:66:89:af:72:00:1f:bb:0a:9a:88:e4:de:
f2:00:50:92:67:87:b5:8e:18:96:e0:a5:dd:82:32:
83:4a:ff:43:2b:1e:bc:8c:5e:8e:a3:c9:81:39:fb:
d2:8c:cb:1a:92:d0:1d:d4:90:79:b5:60:b9:1c:20:
1e:e8:03:f4:6b:a5:7d:c3:41:0f:f2:19:2a:91:f1:
33:c2:91:97:c6:ac:ab:a2:97:f1:7d:bc:22:f6:63:
d2:3e:55:22:03:9e:17:c2:01:f6:e1:6b:c7:6a:c2:
b6:93:d3:9f:61:ae:2e:8e:14:e5:a3:69:40:82:c0:
8d:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:23:F9:39:09:90:42:3B:99:55:A5:06:E0:96:58:C7:AD:91:02:71
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/7f0b66ae-f3c1-3e11-8694-55ca344f7c2d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2e88:c000::/38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
51:ee:65:87:62:70:0b:02:a1:21:3b:f5:e2:db:7c:16:d1:b3:
43:20:dc:87:9a:b3:7c:e8:39:f4:e5:28:a4:ac:92:4a:dc:1e:
06:20:4d:37:f4:d3:58:18:18:79:d8:7b:50:15:88:92:94:5d:
01:04:54:9e:a5:8d:f8:b2:26:c6:3d:56:cd:3c:b2:fb:e2:0a:
52:e7:3b:e8:88:7c:7e:08:f6:66:7c:82:e2:10:a0:2c:45:be:
73:fc:0c:0d:f6:40:af:d8:b0:cd:cc:4f:9d:7d:53:e5:70:d3:
93:fd:dd:dc:0f:9a:e6:bc:38:8f:eb:11:11:b6:27:c4:d8:de:
8a:aa:10:c4:b9:93:a2:6e:46:ea:f5:21:9d:ab:d9:da:4e:a0:
ab:f1:f9:0a:08:b7:75:6e:b5:1c:a4:71:46:f3:5e:af:c2:78:
83:6f:9e:1b:40:22:f3:2b:f1:3e:83:2b:ac:96:99:5f:4a:52:
f5:8c:2d:08:a4:cd:b5:ec:3d:ba:ed:f4:e3:19:fb:02:a4:a8:
2d:b0:17:f5:b7:0b:7b:68:8d:dd:cf:6c:c3:cb:b1:d3:8f:ab:
3c:a3:e8:c4:85:da:85:35:a4:ed:cc:6a:dd:e5:98:9b:b3:84:
0e:09:78:20:67:ab:ce:81:8c:9f:4f:af:a6:0d:af:85:25:cb:
b3:13:af:92
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEjH/ij7DT9AJSKoQwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5
YTE1MB4XDTI1MDIwNTExMjQ1MVoXDTI1MDUwNjEwMjQ1MVowLzEtMCsGA1UEAxMk
M2VhOGY0NDYtODUyNS00YTIyLTk3ZWMtZGM4YTJlODcwOTIyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh1SMpNy0U08yimyD/tnpY8mHRHP9hmR04Vef
ZoNJMf1iXp2zdibruF5FUFzmxjCMtq/m59596Q4BPYD+h9j4OW4TL6Ho+nsNRAx1
X9XfyrItFA+MKv3OAO3OyX1rk7unFNllIeaQwcUyxnwGXgJcBIr6STNWs2iIwU3I
MrJQ+bBrr6Yh9N4lbsxmia9yAB+7CpqI5N7yAFCSZ4e1jhiW4KXdgjKDSv9DKx68
jF6Oo8mBOfvSjMsaktAd1JB5tWC5HCAe6AP0a6V9w0EP8hkqkfEzwpGXxqyropfx
fbwi9mPSPlUiA54XwgH24WvHasK2k9OfYa4ujhTlo2lAgsCN6wIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFI4j+TkJkEI7mVWlBuCWWMetkQJxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw
Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvN2YwYjY2YWUtZjNjMS0z
ZTExLTg2OTQtNTVjYTM0NGY3YzJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi
OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4
OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3
NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuiMAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAUe5lh2JwCwKhITv14tt8FtGzQyDch5qzfOg59OUopKySStweBiBN
N/TTWBgYedh7UBWIkpRdAQRUnqWN+LImxj1WzTyy++IKUuc76Ih8fgj2ZnyC4hCg
LEW+c/wMDfZAr9iwzcxPnX1T5XDTk/3d3A+a5rw4j+sREbYnxNjeiqoQxLmTom5G
6vUhnavZ2k6gq/H5Cgi3dW61HKRxRvNer8J4g2+eG0Ai8yvxPoMrrJaZX0pS9Ywt
CKTNtew9uu304xn7AqSoLbAX9bcLe2iN3c9sw8ux04+rPKPoxIXahTWk7cxq3eWY
m7OEDgl4IGerzoGMn0+vpg2vhSXLsxOvkg==
-----END CERTIFICATE-----
Generated at Wed Apr 9 00:06:22 2025 by rpki-client