Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/9acc50a4-6e45-334f-a366-718af3497a8b.roa
File: 9acc50a4-6e45-334f-a366-718af3497a8b.roa (raw, json)
Hash identifier: OIgFwaUHeabYQeYFZtnQQ0EC5iRyogedSDUCYZvJmdw=
Subject key identifier: 9D:A2:BF:16:86:4A:01:28:E2:4D:0A:5A:A8:FE:5A:E2:27:CD:4C:8A
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F43285848D960D97B4BF629C49B5FD980
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/9acc50a4-6e45-334f-a366-718af3497a8b.roa
Signing time: Tue 11 Feb 2025 16:52:26 +0000
ROA not before: Tue 11 Feb 2025 16:52:26 +0000
ROA not after: Mon 12 May 2025 15:52:26 +0000
asID: 30036
IP address blocks: 2604:2e8d:bc00::/38 maxlen: 38
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d9:60:d9:7b:4b:f6:29:c4:9b:5f:d9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Feb 11 16:52:26 2025 GMT
Not After : May 12 15:52:26 2025 GMT
Subject: CN=59d3731b-6a14-4053-9cbd-762610e64bc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:6e:b6:26:26:3f:21:af:db:1a:5c:a5:f9:1f:
a1:f3:96:25:17:39:01:4f:9c:8c:75:55:95:74:4e:
b7:ca:ba:9b:30:9c:54:0a:f0:23:9f:38:c6:89:37:
be:6c:c4:22:63:86:9e:94:54:0b:cd:07:bf:af:f1:
57:ab:20:e5:c8:3d:74:fa:31:5b:44:59:db:d5:27:
88:be:20:ed:91:2e:a1:0c:dd:b4:6a:96:90:6a:b5:
89:2d:f1:2b:cc:df:db:0b:94:eb:15:cd:b5:14:0b:
bc:c0:84:88:5e:f5:81:f6:d4:c9:8a:5b:fd:b0:22:
32:ff:cc:c5:8b:0b:70:b1:50:e8:9c:82:f2:a3:80:
f4:f8:65:78:1c:c3:2b:95:ca:3d:bc:13:b4:5e:9d:
cf:e9:4e:fa:14:2a:17:c2:ea:a4:1c:28:88:53:05:
d5:ef:e4:b0:24:bc:c5:1d:37:e9:ca:30:b6:24:71:
e2:89:6b:ba:9e:d3:b5:ad:bb:50:b9:8e:56:34:e8:
09:54:6e:0c:e2:49:33:32:d8:65:9c:2e:35:d6:d7:
d4:c0:f9:9a:8d:04:df:3c:60:b7:9d:c0:99:02:e1:
dc:3e:96:34:a8:f3:7a:97:80:d3:b8:c9:a9:63:6c:
3c:3e:44:27:c9:bb:9b:df:af:fa:28:04:bf:a7:36:
2a:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:A2:BF:16:86:4A:01:28:E2:4D:0A:5A:A8:FE:5A:E2:27:CD:4C:8A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/9acc50a4-6e45-334f-a366-718af3497a8b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2e8d:bc00::/38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
22:27:8a:ea:e2:51:0e:e8:31:21:b2:05:ae:a2:a7:b5:55:22:
4f:92:e8:f1:0c:64:2d:d3:49:eb:99:e7:a3:0f:d2:42:85:58:
df:ea:ec:a5:16:ba:d2:2d:e7:e5:e8:5c:05:b3:c3:26:11:57:
6b:a3:14:b6:4a:0d:4f:d6:f8:af:f8:ca:a0:b7:49:71:b9:d9:
3c:e4:b5:31:6c:15:90:49:1e:5c:88:94:f3:10:18:46:e6:92:
7a:82:3e:b0:36:c5:f2:29:3b:49:b8:b0:bc:82:1c:86:85:d7:
a9:d1:98:dd:84:7c:be:c4:74:04:0e:c2:d3:1a:92:dd:ea:a5:
b2:28:4e:2a:c5:55:24:fe:9e:e2:25:bb:54:08:46:2a:81:5f:
59:64:ce:7b:39:7f:af:39:9f:cc:01:ac:fc:9f:fa:2d:9a:2e:
4f:22:aa:77:22:0d:19:ff:c8:2c:9a:27:c3:0a:47:21:6d:48:
e8:b5:be:c2:1d:46:52:31:80:5d:90:13:48:35:fb:d0:94:75:
b6:df:56:17:b1:df:17:b4:d5:ec:0b:8e:76:f2:c8:9a:1d:dd:
b6:f5:68:b5:2e:c4:b7:94:80:b6:be:5e:0d:e3:19:ea:dc:a6:
85:5a:c4:12:79:72:56:e3:83:42:da:52:1f:d0:40:3f:04:36:
f9:75:1b:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 00:09:01 2025 by rpki-client