Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/847045ff-3181-3e08-878d-a4ff98da9a42.roa
File: 847045ff-3181-3e08-878d-a4ff98da9a42.roa (raw, json)
Hash identifier: YKRtup+PESk940pLQNg8NHIMS+ToD8CxTGESSx36CQ8=
Subject key identifier: 4A:13:3A:34:FA:41:22:07:71:C5:30:DC:B0:8B:CC:F5:23:51:EB:51
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F43285848C2646695909658C644A394A0
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/847045ff-3181-3e08-878d-a4ff98da9a42.roa
Signing time: Mon 03 Feb 2025 11:16:00 +0000
ROA not before: Mon 03 Feb 2025 11:16:00 +0000
ROA not after: Sun 04 May 2025 10:16:00 +0000
asID: 30036
IP address blocks: 2604:2e88::/38 maxlen: 38
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c2:64:66:95:90:96:58:c6:44:a3:94:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Feb 3 11:16:00 2025 GMT
Not After : May 4 10:16:00 2025 GMT
Subject: CN=2a7fcfd1-b81a-40e8-9a96-121bf49ffbd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:88:d6:5b:53:5f:38:56:45:70:15:61:9c:11:
e6:43:d4:6f:0b:cb:0b:19:58:9a:0b:89:0d:03:58:
30:b2:b9:c6:09:72:a1:b3:fb:a0:a7:e6:b9:fe:42:
60:8a:26:d2:c8:fa:15:49:bc:d5:c2:dd:6b:11:45:
93:3a:a7:5a:ab:0b:61:76:76:26:56:d0:83:7f:66:
c6:e2:fe:62:d9:1e:b0:b6:ae:df:b1:98:ab:7e:8b:
3d:e4:30:b3:d2:06:80:64:1a:e3:a2:fe:e4:56:a1:
7d:e7:a3:4e:35:e5:91:82:f8:dc:bc:9c:3a:35:e5:
7e:35:8d:7f:11:44:4b:c2:c0:a7:69:94:ad:88:ef:
22:53:6d:14:22:18:e7:30:e1:7f:9a:11:d6:ed:a6:
bc:89:ac:20:e9:30:59:4a:4f:09:dc:26:d5:7f:bb:
2b:a0:14:fc:bf:97:b7:0c:d9:79:bc:6d:f4:c6:06:
ab:ef:aa:3b:46:3d:d9:ff:e4:64:af:6e:ea:07:20:
3f:56:3c:5b:64:9f:6b:e2:05:f6:c2:5d:2d:a7:a4:
1e:da:a3:0d:1b:d5:d0:b7:48:17:7d:ac:d1:96:4e:
d9:39:fd:23:0d:90:90:1e:2c:25:b7:0d:81:b5:04:
c0:40:9b:c1:93:b8:9a:ea:2e:dc:47:6f:dc:f8:22:
a0:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:13:3A:34:FA:41:22:07:71:C5:30:DC:B0:8B:CC:F5:23:51:EB:51
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/847045ff-3181-3e08-878d-a4ff98da9a42.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2e88::/38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
53:27:b5:7d:49:ca:82:1a:92:13:99:c6:9b:bf:3a:dd:bc:2d:
9b:aa:1e:0c:cb:c7:ca:0b:fc:84:18:85:de:94:7e:38:76:0e:
35:8e:d3:5e:ef:02:ec:53:ef:0f:52:54:d3:63:bd:2a:72:1e:
3c:e2:77:2c:ee:7c:bf:73:1f:7b:56:d7:43:f1:b9:b8:e4:0c:
97:26:f6:99:ab:fd:a1:0e:2c:63:33:d2:c4:50:d6:f5:db:7c:
28:81:50:df:e8:8d:57:85:1b:77:10:f1:72:a6:3c:5f:b8:99:
e3:12:dd:83:ca:28:66:fe:52:91:9d:76:d9:25:b9:85:64:c9:
ad:db:73:da:98:11:29:02:3c:e7:a4:54:9f:4f:29:57:78:49:
02:7a:52:70:72:33:e5:1e:9f:a0:d8:9d:6b:64:1f:94:e2:b9:
28:14:92:22:f0:c3:b8:b0:0d:a1:92:53:ac:76:e0:04:0d:6e:
e6:96:d5:8f:a0:e9:26:e0:cb:76:2a:cc:64:d2:25:02:30:37:
0d:de:3f:cf:8d:07:92:b3:2a:b4:78:48:12:79:91:2a:4e:3e:
3d:80:6d:64:16:a8:a6:1b:be:8a:94:49:cb:9b:d0:6f:ca:0d:
6b:b3:cc:87:b0:83:4f:2e:b3:44:65:a8:c8:e5:52:e2:88:b5:
94:eb:02:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 01:58:16 2025 by rpki-client