Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/9ce4bd7e-9635-3901-83b4-b7cde94e403d.roa
File: 9ce4bd7e-9635-3901-83b4-b7cde94e403d.roa (raw, json)
Hash identifier: N2IWfbPEYnRoH2cOqK0mtvfuBOXMZYntMfU/JVAarlE=
Subject key identifier: 30:A0:E5:5E:41:D2:0B:AA:C5:C2:F7:F8:49:F1:DE:85:C6:1F:F7:1A
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F43285848C534396410949B0356C77D80
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/9ce4bd7e-9635-3901-83b4-b7cde94e403d.roa
Signing time: Tue 04 Feb 2025 11:26:21 +0000
ROA not before: Tue 04 Feb 2025 11:26:21 +0000
ROA not after: Mon 05 May 2025 10:26:21 +0000
asID: 30036
IP address blocks: 2604:2e8a:a800::/38 maxlen: 38
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:34:39:64:10:94:9b:03:56:c7:7d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Feb 4 11:26:21 2025 GMT
Not After : May 5 10:26:21 2025 GMT
Subject: CN=2cf1aa72-417d-451e-b834-1f12948712df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:63:8b:43:00:6e:89:b0:2c:46:3b:fb:1a:c3:
e7:b5:fd:d0:7a:a5:fc:1f:52:47:39:c7:9b:70:c0:
eb:de:70:49:5b:6d:1f:a1:1f:1d:b4:98:f1:41:15:
e5:8e:db:e8:24:b1:08:84:20:1a:0c:04:cc:c1:d0:
3b:b7:f7:e3:08:de:92:6e:f4:3c:f5:2a:bc:4c:49:
82:9d:00:8e:67:27:ab:e1:55:23:47:3f:59:35:6d:
e0:b9:d8:31:ac:9b:64:06:5d:bf:aa:62:c6:a9:91:
d7:c1:d3:72:5a:d9:e8:8b:b0:51:3f:49:eb:71:17:
d5:e3:f8:37:a5:79:97:75:fe:ff:8c:f7:c2:f0:79:
9d:86:18:4a:06:f1:7c:fc:58:dd:dd:c6:d9:74:ca:
78:af:2c:1f:86:b9:48:13:26:ef:76:34:61:25:5c:
97:a2:0e:75:9c:e3:29:de:ea:15:97:1e:37:71:81:
1c:34:d7:3a:ac:03:68:5c:2a:2a:be:ca:2d:e4:65:
a6:f6:ae:33:25:d5:e1:ce:bc:56:7e:13:92:98:72:
49:93:95:0f:60:bd:67:77:d8:f4:fb:36:03:3f:c8:
b8:06:0c:d7:b1:15:a2:85:21:70:89:f6:2b:09:99:
05:49:68:9c:4a:a5:ad:be:a0:f4:76:74:9a:3d:5f:
90:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:A0:E5:5E:41:D2:0B:AA:C5:C2:F7:F8:49:F1:DE:85:C6:1F:F7:1A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/9ce4bd7e-9635-3901-83b4-b7cde94e403d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2e8a:a800::/38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2b:56:50:93:5c:c1:36:0c:b5:a2:40:b6:5f:ec:3c:54:7b:b7:
54:e1:df:16:00:ce:44:af:81:92:6e:4a:e8:22:17:09:b4:c6:
7b:3a:08:92:b6:be:7d:eb:5f:64:71:63:d7:3e:f2:c8:f7:24:
47:df:ea:89:79:d8:b4:5b:0c:69:a8:86:e5:a9:bc:76:5e:cf:
9f:41:4c:36:0d:f5:ce:c5:3b:6b:ab:33:6b:ae:56:01:04:08:
13:fe:99:8b:7d:f5:84:7c:87:71:6a:10:ac:63:b4:af:e6:33:
83:d2:d0:75:df:65:b3:42:ab:f6:94:64:0a:06:ca:bc:d3:04:
c8:79:ca:45:28:de:8d:59:32:c5:a0:ca:5f:6a:f5:58:9d:29:
4e:db:9b:0c:dc:00:95:7c:57:3d:5f:24:f9:e7:c3:0f:b1:00:
74:84:b5:b8:73:1f:22:00:21:08:14:94:23:5b:c0:44:af:9d:
56:d3:e4:7a:22:3f:1d:8f:23:3c:b7:a9:b8:76:b9:a2:00:1a:
0f:d8:d2:f7:b0:e6:44:1f:b8:a7:3a:10:3b:e2:fc:7a:b6:17:
f2:72:47:d8:ce:f0:bf:a7:c6:f1:a2:b5:c6:f4:05:59:6f:12:
d8:2f:a1:5a:65:3d:04:9a:c6:4d:4f:2c:7d:38:a5:8f:ac:ea:
af:be:1c:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 23:53:48 2025 by rpki-client