Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/90502b83-521d-302e-9013-fa4078bdf306.roa
File: 90502b83-521d-302e-9013-fa4078bdf306.roa (raw, json)
Hash identifier: 670olBXQLZKRCHFCWGaHPgkcF9IqWAgRCsXwVWbB2iA=
Subject key identifier: 92:7F:D9:0F:28:0C:13:4A:84:7C:B3:78:1D:E0:F9:AD:41:81:9B:B7
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F43285849134FCC2B190227E4CB29C900
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/90502b83-521d-302e-9013-fa4078bdf306.roa
Signing time: Tue 04 Mar 2025 10:54:58 +0000
ROA not before: Tue 04 Mar 2025 10:54:58 +0000
ROA not after: Mon 02 Jun 2025 09:54:58 +0000
asID: 30036
IP address blocks: 2604:2e8c:2400::/38 maxlen: 38
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:13:4f:cc:2b:19:02:27:e4:cb:29:c9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Mar 4 10:54:58 2025 GMT
Not After : Jun 2 09:54:58 2025 GMT
Subject: CN=4af1a079-7aab-4aca-9b18-b5757453cc0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:b1:7a:30:67:6a:04:f1:21:17:7e:e6:0e:aa:
38:fa:3b:ea:61:d2:3c:f6:cb:ea:2e:c1:04:d3:2f:
dd:fd:4d:c7:99:34:fe:99:64:01:22:7a:73:31:71:
33:86:d8:ff:5d:0e:c0:41:5d:2f:9b:d5:46:af:02:
6a:71:2e:c1:d7:eb:1e:d0:5f:31:b3:78:c9:82:f9:
bc:2d:b2:cf:bb:69:9b:5c:75:c0:34:fc:84:9b:f1:
03:10:ab:1c:79:3b:48:08:70:40:b9:ff:55:cc:98:
dd:b6:07:34:10:63:fc:93:a8:6d:a5:08:89:32:49:
ca:6c:9b:e1:46:be:01:b7:3d:1d:28:7f:18:ce:23:
fa:d2:69:94:6c:22:a4:7e:9a:98:ed:c4:40:f4:b8:
c9:57:86:50:11:17:d3:fb:20:75:5c:34:0e:3f:3e:
fd:35:43:37:73:5d:94:f2:46:b1:d5:f0:e6:52:8d:
95:1c:6a:55:7d:28:4c:36:8b:9c:56:af:65:08:ad:
25:77:9b:49:00:f1:fd:b4:ce:f8:b3:11:25:72:10:
69:85:93:f5:fd:f2:09:42:5f:3c:b3:14:b9:a8:e7:
5c:fc:f5:73:b5:e9:03:53:76:40:69:bf:78:b5:b9:
64:21:53:36:dc:36:d9:2d:1a:16:cd:23:14:ae:5f:
dc:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:7F:D9:0F:28:0C:13:4A:84:7C:B3:78:1D:E0:F9:AD:41:81:9B:B7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/90502b83-521d-302e-9013-fa4078bdf306.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2e8c:2400::/38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
74:a8:18:43:3a:c3:72:63:6e:23:05:33:00:61:a6:b4:88:49:
f1:20:0d:ed:22:36:4f:ec:24:5c:15:d3:33:bb:6c:78:ef:ee:
35:63:01:71:c6:04:15:b6:4e:3a:35:ba:3f:e5:94:cf:a6:97:
c6:a8:5f:be:da:b3:95:ff:0e:3e:76:92:2d:ab:ec:0f:1e:4c:
e3:19:c9:d8:8e:05:14:64:96:94:a5:bf:03:63:70:e0:e7:39:
ca:c8:fe:ff:fe:52:c6:1e:3b:4f:75:ae:c8:06:99:e6:bc:09:
4d:0e:a6:34:45:38:ff:c1:0d:01:28:f4:89:bf:c1:41:42:3a:
db:ef:f8:3a:bf:56:e0:e2:90:35:e4:4d:98:23:4d:72:d8:b7:
33:86:5b:b1:a9:da:6c:38:fc:08:d9:70:4f:0a:3c:ec:88:f7:
ad:ab:d5:b5:de:6f:d5:81:0b:66:01:cc:d8:6a:0a:fe:9d:7f:
cf:20:7e:c9:23:fe:21:d5:a2:24:b5:2d:09:d9:a6:ed:bb:78:
58:92:8e:ed:41:a7:d5:74:05:78:67:ae:8e:c0:96:6b:a7:3a:
5d:bd:14:49:80:03:74:db:28:0f:e1:f2:f7:f0:7f:25:6b:85:
a7:70:9d:fb:98:5f:dc:a9:b0:e5:88:1d:97:f6:be:0a:ac:05:
fa:7c:21:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 00:03:44 2025 by rpki-client