Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/9c419b6c-581e-35a2-8d24-0644f4416207.roa
File: 9c419b6c-581e-35a2-8d24-0644f4416207.roa (raw, json)
Hash identifier: PxFFMRGDhMsnLXeoZJrOSg5/rgPRmZhReT6pOll119A=
Subject key identifier: B8:5B:37:26:33:B0:50:4A:3F:40:B7:D3:4D:B5:7E:8F:9D:45:4F:ED
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F43285848C577A840B45C87697BFD1800
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/9c419b6c-581e-35a2-8d24-0644f4416207.roa
Signing time: Tue 04 Feb 2025 13:42:14 +0000
ROA not before: Tue 04 Feb 2025 13:42:14 +0000
ROA not after: Mon 05 May 2025 12:42:14 +0000
asID: 30036
IP address blocks: 2604:2e89:400::/38 maxlen: 38
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:77:a8:40:b4:5c:87:69:7b:fd:18:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Feb 4 13:42:14 2025 GMT
Not After : May 5 12:42:14 2025 GMT
Subject: CN=bd776e7d-f0b3-4f43-b5c0-b170d4ba5bf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:5e:0c:ec:f4:78:fa:63:12:45:53:97:60:b1:
45:54:fd:fc:8b:4f:f8:b6:90:ae:a3:64:df:67:b4:
a0:4a:15:d9:d1:0c:55:15:3d:43:60:d6:9b:11:32:
14:cf:15:b1:25:f8:59:8c:a0:b6:41:9a:a9:6d:75:
0b:d4:dc:ab:fc:25:96:e8:32:55:cf:98:57:83:34:
3c:82:c6:18:c1:5d:30:cc:59:46:c4:67:38:01:d6:
02:65:02:df:8a:b0:d9:0b:5b:39:70:e8:ec:84:a8:
5f:d3:43:37:3d:c2:77:08:3b:e7:ac:e0:2c:75:52:
e3:15:98:cc:63:99:20:b4:f8:fa:fc:02:10:e3:46:
9c:00:35:19:67:54:76:6e:9c:dd:88:56:cd:4d:97:
25:0e:58:6f:b2:81:25:58:36:81:f9:a4:9f:e1:a2:
86:65:3c:98:50:df:d7:cf:3e:fb:3f:9b:03:3c:ba:
a6:05:99:ac:d1:66:16:48:41:a2:46:10:5c:ac:d3:
cc:36:6a:71:0f:51:8f:f7:ab:a8:e8:cb:da:53:bc:
cf:d0:43:33:b8:5a:23:88:dd:33:61:03:ef:bb:ea:
c4:fd:f5:ab:6e:1e:e3:cf:73:11:14:2c:4f:c8:f8:
59:76:bd:b5:f0:fe:f5:8c:01:5e:63:fb:87:58:46:
25:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:5B:37:26:33:B0:50:4A:3F:40:B7:D3:4D:B5:7E:8F:9D:45:4F:ED
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/9c419b6c-581e-35a2-8d24-0644f4416207.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2e89:400::/38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
43:88:3f:8d:c6:b6:5e:37:18:8a:05:e9:60:9b:a8:9e:da:14:
67:17:ca:22:89:62:39:9c:2c:a5:ef:3e:b1:9d:bd:f6:80:ab:
b5:70:eb:a5:36:a4:e3:6d:8d:f6:56:4c:ad:f6:24:94:bc:2e:
1a:db:ec:52:c8:fe:3f:2c:be:d9:e7:94:34:2d:ab:3e:ac:c6:
d6:0c:17:81:e3:6f:30:cf:c2:89:fb:73:04:91:c5:74:eb:be:
28:32:01:eb:c6:a9:5e:74:06:09:69:9f:f7:05:bd:e3:77:54:
53:61:1c:ae:96:b3:9b:d7:0a:ff:30:05:fe:b9:37:0f:d7:d9:
ac:b6:73:e4:a9:23:36:76:47:1f:a9:e0:92:4f:9b:85:95:cd:
7b:70:7e:e2:b0:a0:46:4e:08:8c:ef:f9:42:b0:3a:eb:89:57:
9f:d9:2d:f1:2c:7d:b2:63:f6:8a:57:2a:ce:5a:be:c4:99:ca:
6a:c4:7e:68:09:ab:4e:99:fa:30:d0:26:da:a8:18:bb:83:6c:
85:ed:e8:08:67:ce:33:46:44:35:39:6f:7e:6a:d0:97:dc:dd:
c7:2a:f0:d0:c4:34:9e:5e:94:2d:79:ea:61:9e:52:2c:08:cd:
3c:cd:59:c1:33:e9:b9:35:48:8b:05:c4:8f:cd:49:52:47:39:
97:32:60:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 23:58:38 2025 by rpki-client