Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/87ba9799-00ce-307b-99a3-aef0fd849c5c.roa
File: 87ba9799-00ce-307b-99a3-aef0fd849c5c.roa (raw, json)
Hash identifier: n/U8lhAiIxgXman4+zgTf5U+jNSTpUIhXQCmr+bDU50=
Subject key identifier: 26:C7:22:D7:66:85:C3:5C:AC:C7:AE:5B:32:9B:66:D9:18:84:FA:C7
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F43285848C26472BD42F0A8BA362C6480
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/87ba9799-00ce-307b-99a3-aef0fd849c5c.roa
Signing time: Mon 03 Feb 2025 11:16:06 +0000
ROA not before: Mon 03 Feb 2025 11:16:06 +0000
ROA not after: Sun 04 May 2025 10:16:06 +0000
asID: 30036
IP address blocks: 2604:2e88:6000::/38 maxlen: 38
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c2:64:72:bd:42:f0:a8:ba:36:2c:64:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Feb 3 11:16:06 2025 GMT
Not After : May 4 10:16:06 2025 GMT
Subject: CN=b4a53941-ecdd-4d42-ad09-3463c6d44d3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c9:ae:5f:41:6e:68:99:4a:83:92:18:a0:22:
f6:fc:11:8b:fb:5a:06:e3:bf:62:a9:cc:89:d3:c7:
48:bf:a8:d4:2b:e7:09:4b:4a:2c:8a:a5:af:23:56:
f3:03:29:c3:f9:23:47:d3:c0:66:d2:06:8f:56:ac:
5d:eb:0f:25:65:83:74:a4:13:cc:df:ef:ea:ca:22:
79:50:52:3d:b1:c9:ec:42:10:e9:67:b1:77:f7:75:
43:ba:b8:70:16:04:4b:6a:54:4a:02:06:91:b3:9e:
9c:11:ec:1f:54:65:7b:e0:ce:69:26:46:8b:ef:e6:
ba:be:f0:9c:90:07:d3:7f:a7:56:1f:32:b9:8c:3e:
d6:98:cb:a2:3d:04:57:61:54:2b:fc:56:9a:35:02:
18:bf:5d:7f:8e:ae:9a:84:97:c5:61:3c:67:67:8b:
3b:f6:f3:55:a5:67:db:e9:82:da:37:b8:9d:19:e4:
d9:b6:34:1f:4f:b3:07:49:f6:2b:7a:66:e3:4a:59:
4a:86:b1:2f:42:84:34:96:c2:f5:1a:56:e4:a1:d9:
68:a0:4b:78:4c:3b:e0:74:d0:19:3c:da:b6:88:80:
bc:e4:30:e0:b3:7a:b3:3d:c5:00:65:75:dd:b0:be:
92:62:8b:78:09:59:0f:39:0e:e6:04:ee:f4:13:c0:
bd:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:C7:22:D7:66:85:C3:5C:AC:C7:AE:5B:32:9B:66:D9:18:84:FA:C7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/87ba9799-00ce-307b-99a3-aef0fd849c5c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2e88:6000::/38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1c:98:d6:e9:13:fe:76:97:72:c2:a4:68:fe:f5:e5:e2:4d:2d:
12:2b:c7:c6:46:0a:92:50:c3:d8:8d:ec:92:9c:c2:b4:08:8d:
e4:ea:2f:c5:c4:f2:4b:84:48:3b:21:0f:51:f0:c9:dd:9e:34:
ec:c3:43:b8:e4:b5:be:74:3c:39:1a:39:0b:de:3b:74:62:e0:
06:5c:8d:b3:9c:c5:a5:80:b7:0b:20:c2:09:81:17:32:f3:cf:
d8:24:23:0f:3f:76:56:70:2c:c8:14:84:b7:61:ae:b0:c4:86:
f9:c7:de:3c:68:ed:ed:8e:60:5d:c3:f4:41:d6:d9:57:99:a8:
a2:cd:0d:d1:c0:15:01:8b:2b:ca:74:ae:d5:95:dd:67:5f:7e:
19:19:d8:51:f6:9f:a0:b8:fe:e7:73:35:87:d9:ad:ad:13:ee:
84:72:d1:ce:01:99:ae:80:44:25:11:4d:f1:4b:e0:01:69:a6:
f9:50:9c:55:3d:82:28:51:13:1d:f4:97:8e:94:33:5b:7b:3e:
41:51:ba:fc:1b:c9:5f:23:8c:aa:48:e8:bf:0f:bb:18:1b:6b:
8e:17:9d:f7:69:25:9f:03:c1:ed:ea:30:20:8c:52:5d:af:01:
d6:4e:36:8c:f4:65:bc:d7:78:30:5c:a9:64:be:cf:a4:9c:eb:
d1:79:f6:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 00:01:10 2025 by rpki-client