Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/9d23743a-b916-3509-ac6e-63615d63d932.roa
File: 9d23743a-b916-3509-ac6e-63615d63d932.roa (raw, json)
Hash identifier: d6MtLg7M/OqioQr33yOW3s54P+qLgXYNrB5j3XvT7/w=
Subject key identifier: BA:65:B0:A9:99:82:E0:71:B7:D3:18:F5:CA:7A:BC:B7:E1:E1:F6:C2
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F43285848C58061AAAF4048ED61266BE0
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/9d23743a-b916-3509-ac6e-63615d63d932.roa
Signing time: Tue 04 Feb 2025 13:59:48 +0000
ROA not before: Tue 04 Feb 2025 13:59:48 +0000
ROA not after: Mon 05 May 2025 12:59:48 +0000
asID: 30036
IP address blocks: 2604:2e8d:7c00::/38 maxlen: 38
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:80:61:aa:af:40:48:ed:61:26:6b:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Feb 4 13:59:48 2025 GMT
Not After : May 5 12:59:48 2025 GMT
Subject: CN=86151776-834d-4a7b-9a80-388d4ee78caa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:71:9a:18:fe:db:70:b4:d6:da:62:81:63:36:
d0:b4:4f:55:ac:06:b5:91:e6:69:98:60:ae:4f:87:
5e:78:7e:77:b8:3f:12:8a:27:95:ea:66:2c:35:50:
ba:95:83:2b:27:03:2e:c9:e1:e0:83:1d:90:b1:a7:
b0:6e:5a:b6:f2:3f:52:57:28:c4:b5:12:ba:e5:f1:
c6:e4:96:0c:9f:cc:26:fd:b9:33:37:ad:b1:55:d1:
be:53:a7:58:88:aa:db:a5:75:56:e9:62:dc:eb:1e:
83:0d:71:c3:8e:31:f6:e7:67:cc:a7:da:41:49:9a:
db:58:c6:c5:59:18:15:ff:c8:3b:75:62:a1:ab:80:
e0:61:b9:91:c8:ac:34:23:27:be:4b:fb:cc:0f:1a:
d3:ac:bf:ff:12:95:5f:3c:3c:45:0a:33:a7:9a:8f:
ed:a1:64:b2:79:55:f2:05:53:80:50:b7:96:5f:42:
a5:30:ac:08:6e:eb:08:ca:4d:ae:a1:3f:6e:49:41:
75:83:2f:7f:81:d2:37:7d:4c:0c:13:eb:01:83:45:
8f:6d:a9:f0:c2:f6:84:08:1a:75:39:ac:93:07:e2:
7b:87:aa:ce:ae:c5:2d:8d:13:6b:cd:e9:90:59:1d:
4b:23:ae:84:6f:7c:1a:8e:1c:b4:a6:db:9c:f7:2b:
29:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:65:B0:A9:99:82:E0:71:B7:D3:18:F5:CA:7A:BC:B7:E1:E1:F6:C2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/9d23743a-b916-3509-ac6e-63615d63d932.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2e8d:7c00::/38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
26:ac:12:86:95:aa:ab:e7:2c:d8:36:79:2d:5d:51:32:72:66:
1e:85:e1:f0:69:67:e4:29:62:3a:96:40:29:14:a0:c2:c7:e7:
64:6d:cd:6d:58:78:e9:cc:5b:7c:81:e5:7e:3d:74:30:01:09:
c9:8b:07:fe:b6:6a:3b:35:9c:97:ae:62:66:10:c3:d7:6a:30:
13:97:a4:c2:cb:68:98:d3:e5:8f:8f:6a:96:f2:ad:30:81:78:
ef:ff:29:c1:e9:19:41:df:92:29:15:84:f1:c3:ef:c4:a4:ea:
7c:7c:c6:c0:43:a4:0f:1c:11:75:2d:49:ef:41:06:a8:91:88:
9f:dc:18:af:37:51:a5:50:16:9e:00:00:b0:ed:d6:fd:62:2c:
38:39:12:8c:1d:2c:28:42:a7:42:e7:58:07:09:e8:eb:59:da:
91:55:70:7f:8c:d8:1e:11:d8:e9:11:41:40:57:cb:e8:f9:9e:
54:b1:5c:46:f2:a2:30:43:f2:6c:85:1d:2f:47:ad:ae:3a:41:
58:e5:76:21:ec:6e:4d:e6:3a:ca:49:03:d9:a4:26:f4:8e:80:
8a:c8:30:fb:c7:fd:24:df:59:15:34:88:8d:4e:d1:d6:35:93:
3f:64:ec:6c:3b:f8:f8:9d:5d:32:96:4a:59:16:fb:db:bf:aa:
68:3c:4b:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 02:00:41 2025 by rpki-client