Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/9d508d26-8873-3b65-9bae-b4fed39f3880.roa
File: 9d508d26-8873-3b65-9bae-b4fed39f3880.roa (raw, json)
Hash identifier: MKBMN6WENQznD6IyEAaoZ+yYSz6T98K0gY2Q3eAiPxg=
Subject key identifier: EC:17:9C:69:3D:2B:D4:C7:4A:F3:3D:B3:EB:8E:7F:7A:D2:CA:35:78
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F43285848C7FE1D31B53A521DBC3B6280
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/9d508d26-8873-3b65-9bae-b4fed39f3880.roa
Signing time: Wed 05 Feb 2025 11:24:45 +0000
ROA not before: Wed 05 Feb 2025 11:24:45 +0000
ROA not after: Tue 06 May 2025 10:24:45 +0000
asID: 30036
IP address blocks: 2604:2e88:3400::/38 maxlen: 38
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c7:fe:1d:31:b5:3a:52:1d:bc:3b:62:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Feb 5 11:24:45 2025 GMT
Not After : May 6 10:24:45 2025 GMT
Subject: CN=cefc994e-5604-47e3-8cc8-9958fc5de902
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:22:eb:eb:a5:ac:6f:1f:c0:57:c8:d6:3e:46:
af:2e:98:b1:71:fa:50:b8:ce:a7:ca:88:1e:7b:d2:
1d:11:86:bf:17:dd:05:ae:f8:e8:da:1d:cd:73:0b:
34:61:01:41:21:cb:44:97:3f:c3:b2:6c:41:22:4a:
7d:3d:23:03:bc:a4:ec:26:0b:43:fe:45:db:5c:7b:
e9:80:c3:81:75:5e:74:3d:68:ea:28:f1:31:3b:4a:
c7:0f:05:6c:2a:d9:44:22:f6:99:3c:bc:77:57:4e:
10:e6:4a:07:47:c0:d9:56:ad:79:01:e5:8a:29:6c:
69:a0:cb:b6:c5:4b:58:de:f3:ce:6c:b4:5c:48:a5:
1f:03:63:b5:18:24:27:11:74:19:94:78:23:ae:17:
49:25:2f:1f:31:bf:90:79:58:e7:c8:14:6f:a5:6e:
21:e2:25:a4:7a:4d:3a:0b:2d:f1:0e:f3:c9:aa:6d:
c4:ad:02:0e:56:04:e5:1f:7e:ea:c1:1b:00:2c:1f:
40:c2:06:4b:68:2c:27:d6:c9:f2:f1:43:b7:b6:e0:
80:98:a0:49:1b:82:f1:d3:35:cd:cb:9c:d9:ce:58:
4e:ed:3f:69:5a:b8:f0:48:96:36:b6:c8:8e:13:cb:
a1:87:a1:5c:3f:bc:3c:c5:26:66:db:58:28:aa:10:
c7:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:17:9C:69:3D:2B:D4:C7:4A:F3:3D:B3:EB:8E:7F:7A:D2:CA:35:78
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/9d508d26-8873-3b65-9bae-b4fed39f3880.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2e88:3400::/38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
63:58:44:d8:a6:b6:f8:a1:db:68:a0:63:03:a9:49:d7:4e:de:
e5:52:b6:3c:fd:72:01:2a:1a:5e:cd:2c:cc:a3:8e:8e:05:a0:
ba:d5:36:0f:89:17:2f:f6:25:2d:85:23:2f:c8:50:78:95:78:
e1:02:33:cc:ba:9e:f4:62:d5:7d:e2:4c:1c:c6:0d:8d:b5:84:
dd:16:2e:10:82:f2:7b:6c:3f:c0:d7:c3:ad:ac:b2:ea:6c:29:
ec:5e:cd:95:ad:83:25:ba:9e:2d:20:27:f0:1d:75:f0:5c:3b:
1a:07:12:e8:67:b7:60:21:a2:a8:4c:40:1d:ab:d4:fc:dc:9f:
52:a0:c3:f3:87:13:99:13:04:16:a2:9c:60:39:6a:e9:14:63:
d5:cd:f5:3e:41:c2:86:75:ae:52:31:79:66:3b:48:79:f8:63:
00:5f:68:ae:7d:94:ad:e9:0d:23:59:f3:1f:31:0f:f6:75:72:
22:20:dc:40:b1:e1:95:43:cf:ec:80:2f:f8:cf:41:b0:02:0c:
c3:68:a9:04:29:d4:ab:b8:88:2a:5d:de:c5:46:85:99:3f:3a:
20:0d:65:fa:a8:32:53:40:c5:76:26:1f:4e:a4:87:90:93:2d:
b0:76:7f:2d:1e:91:cc:64:30:01:d9:35:93:ed:04:f2:81:bb:
d0:74:55:77
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEjH/h0xtTpSHbw7YoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5
YTE1MB4XDTI1MDIwNTExMjQ0NVoXDTI1MDUwNjEwMjQ0NVowLzEtMCsGA1UEAxMk
Y2VmYzk5NGUtNTYwNC00N2UzLThjYzgtOTk1OGZjNWRlOTAyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgyLr66Wsbx/AV8jWPkavLpixcfpQuM6nyoge
e9IdEYa/F90Frvjo2h3Ncws0YQFBIctElz/DsmxBIkp9PSMDvKTsJgtD/kXbXHvp
gMOBdV50PWjqKPExO0rHDwVsKtlEIvaZPLx3V04Q5koHR8DZVq15AeWKKWxpoMu2
xUtY3vPObLRcSKUfA2O1GCQnEXQZlHgjrhdJJS8fMb+QeVjnyBRvpW4h4iWkek06
Cy3xDvPJqm3ErQIOVgTlH37qwRsALB9AwgZLaCwn1sny8UO3tuCAmKBJG4Lx0zXN
y5zZzlhO7T9pWrjwSJY2tsiOE8uhh6FcP7w8xSZm21goqhDHkQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFOwXnGk9K9THSvM9s+uOf3rSyjV4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw
Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvOWQ1MDhkMjYtODg3My0z
YjY1LTliYWUtYjRmZWQzOWYzODgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi
OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4
OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3
NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuiDQw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAY1hE2Ka2+KHbaKBjA6lJ107e5VK2PP1yASoaXs0szKOOjgWgutU2
D4kXL/YlLYUjL8hQeJV44QIzzLqe9GLVfeJMHMYNjbWE3RYuEILye2w/wNfDrayy
6mwp7F7Nla2DJbqeLSAn8B118Fw7GgcS6Ge3YCGiqExAHavU/NyfUqDD84cTmRME
FqKcYDlq6RRj1c31PkHChnWuUjF5ZjtIefhjAF9orn2UrekNI1nzHzEP9nVyIiDc
QLHhlUPP7IAv+M9BsAIMw2ipBCnUq7iIKl3exUaFmT86IA1l+qgyU0DFdiYfTqSH
kJMtsHZ/LR6RzGQwAdk1k+0E8oG70HRVdw==
-----END CERTIFICATE-----
Generated at Wed Apr 9 00:08:51 2025 by rpki-client