Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/9956d50e-8c5c-39a6-a679-bfb09b3987d5.roa
File: 9956d50e-8c5c-39a6-a679-bfb09b3987d5.roa (raw, json)
Hash identifier: yI3VMvFirjFpu4Di82eC4z5Uqsq3JWFLntX/l3s6rO8=
Subject key identifier: B9:1C:4C:CF:B2:D4:F3:78:6F:84:20:25:47:AF:B4:B9:56:0B:78:E5
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F43285848C577F3053066D87FADD66100
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/9956d50e-8c5c-39a6-a679-bfb09b3987d5.roa
Signing time: Tue 04 Feb 2025 13:42:49 +0000
ROA not before: Tue 04 Feb 2025 13:42:49 +0000
ROA not after: Mon 05 May 2025 12:42:49 +0000
asID: 30036
IP address blocks: 2604:2e8d:1400::/38 maxlen: 38
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:77:f3:05:30:66:d8:7f:ad:d6:61:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Feb 4 13:42:49 2025 GMT
Not After : May 5 12:42:49 2025 GMT
Subject: CN=bdff01b3-2da6-44a0-b122-f787fdd8bdc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ab:ff:39:54:3c:ad:14:9a:b3:74:44:f5:6c:
44:12:6f:1d:9f:fe:4d:2b:00:c8:14:04:a6:a8:fc:
f9:6f:23:02:e9:6e:e2:0a:ad:0d:7b:22:b5:42:05:
5b:3f:d3:00:89:48:d0:ac:95:7a:20:95:0a:d9:da:
86:94:9b:da:0a:88:b9:59:71:4f:88:4c:0f:af:42:
8d:ed:84:db:45:d7:2f:18:d7:dd:37:6c:64:89:16:
b6:fc:2d:ba:dc:4c:8e:83:6f:b1:9a:49:b1:12:c8:
03:e6:d7:98:da:32:d2:3c:fb:a0:18:b2:f1:fb:2e:
46:c5:de:5c:57:22:76:d6:d4:96:46:10:16:c1:00:
9d:ea:21:06:cf:42:4c:a0:3b:87:30:2f:d3:bc:ae:
72:c0:c6:1f:b3:2e:69:9c:8a:95:e8:6f:fe:f7:28:
c8:ce:08:62:e7:dc:3c:cd:65:e8:29:fd:12:2e:5e:
bb:97:a8:b2:84:64:a8:88:b2:86:c6:97:41:da:09:
09:17:55:7e:62:ed:49:c6:e8:17:94:8a:a0:ab:2e:
77:2e:ae:b4:fb:ef:40:a1:8f:84:85:2b:54:be:98:
3e:4a:78:cc:46:a1:db:66:7b:ef:61:54:e1:1b:9c:
e1:48:55:73:26:1e:56:00:6c:06:a4:d3:91:62:4b:
0b:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:1C:4C:CF:B2:D4:F3:78:6F:84:20:25:47:AF:B4:B9:56:0B:78:E5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/9956d50e-8c5c-39a6-a679-bfb09b3987d5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2e8d:1400::/38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a1:dd:95:4a:79:73:db:dc:b3:75:fe:76:0b:81:34:bb:50:6f:
e2:52:eb:95:79:ba:ea:6c:f8:c4:d5:52:0c:54:30:2c:87:7e:
bf:d1:61:c9:da:7e:92:e8:f4:f6:e3:61:1a:dd:3e:c1:2b:a3:
c6:4f:21:6a:bd:ea:0d:9f:5e:61:b5:06:aa:b2:11:3a:90:47:
36:43:c3:5a:f8:2f:c9:96:b8:2a:7c:da:cc:3a:ea:be:b5:62:
f9:a2:4c:3c:0a:da:43:7d:05:ba:cc:66:97:1f:db:7d:b5:e6:
89:f3:d4:18:f4:5e:7e:2c:12:42:7f:0c:42:ad:4e:c1:25:96:
42:64:68:30:a2:28:f9:4e:62:fd:72:7b:80:3a:a4:d4:cd:19:
2e:0f:52:8d:b1:43:4b:cf:81:de:60:96:08:c9:8e:e1:c0:a2:
2e:24:2d:c3:73:80:41:9f:ac:57:97:af:a9:c1:c9:ed:9b:9b:
c4:07:9e:79:dd:97:d0:48:3e:60:20:d5:ec:14:c0:49:9b:02:
37:44:8c:e7:c6:42:ef:80:78:fb:ea:9c:6d:c6:20:aa:13:b5:
78:76:21:eb:54:81:35:be:aa:57:7e:3b:25:5d:dd:1f:7b:f7:
c6:90:94:5f:55:13:73:85:d7:94:1f:cc:f1:d2:df:a1:2b:84:
b5:8b:1f:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 23:56:17 2025 by rpki-client