Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a2f09972-83a4-3240-871a-2619e0b0b11e.roa
File: a2f09972-83a4-3240-871a-2619e0b0b11e.roa (raw, json)
Hash identifier: Qi2dcViautMjGhDHtMtHtrpLBcLPSiWVhfBubmmn6Ho=
Subject key identifier: 49:44:35:14:74:5F:3E:14:E5:BE:05:04:BC:FC:CD:F1:A7:E8:F1:DF
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F43285848C7F82A5B257713157038A280
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a2f09972-83a4-3240-871a-2619e0b0b11e.roa
Signing time: Wed 05 Feb 2025 11:12:46 +0000
ROA not before: Wed 05 Feb 2025 11:12:46 +0000
ROA not after: Tue 06 May 2025 10:12:46 +0000
asID: 30036
IP address blocks: 2604:2e8c:4400::/38 maxlen: 38
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c7:f8:2a:5b:25:77:13:15:70:38:a2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Feb 5 11:12:46 2025 GMT
Not After : May 6 10:12:46 2025 GMT
Subject: CN=ca6076d4-04b1-4260-82b4-fa941911777f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:0f:80:da:51:f6:de:ef:1c:cf:3d:73:b4:ec:
b8:ce:ee:1f:84:28:70:f1:89:e9:05:cd:0f:a2:86:
62:59:b2:3e:50:e5:93:b2:88:39:08:aa:85:29:f6:
4a:5a:9a:7b:1e:13:38:01:b4:44:6e:75:74:24:ad:
27:75:15:6a:57:c0:2f:69:3b:a6:60:20:b4:cc:29:
b4:c1:e1:56:fc:3b:6f:af:a7:4f:a9:f0:bc:4e:22:
55:dc:72:5e:89:83:91:ab:fe:35:9d:6f:ff:98:8a:
16:f9:80:86:ad:6a:7e:85:8c:a3:05:01:f9:15:5a:
14:a5:d3:f6:84:94:e9:39:42:78:32:62:5d:b7:c0:
cd:71:2e:be:33:6a:48:72:68:b8:1e:9b:38:46:7f:
8a:cd:3c:e8:c4:ae:b9:20:bc:d0:19:89:65:dd:5c:
02:f3:b7:a0:c7:30:80:7d:6e:5c:79:b4:02:27:ba:
4a:54:6f:b0:ee:bc:83:4c:fe:c3:fb:9f:af:53:1c:
45:1c:b1:a5:a6:7c:52:1b:2d:dc:66:fe:4e:fe:3f:
2f:66:f7:76:7d:c3:18:9b:64:1c:cb:18:0f:37:62:
19:f1:3d:b5:fe:95:b6:42:5f:d4:58:a3:b6:30:72:
0f:42:09:13:09:ab:12:d7:df:94:21:1e:66:30:7a:
fa:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:44:35:14:74:5F:3E:14:E5:BE:05:04:BC:FC:CD:F1:A7:E8:F1:DF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a2f09972-83a4-3240-871a-2619e0b0b11e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2e8c:4400::/38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
42:8f:f7:5d:34:36:62:a2:55:7b:fc:52:e4:d5:d9:09:3d:a3:
7d:62:47:57:cf:3c:cc:22:61:9e:3a:16:fa:b1:5e:73:8a:9c:
58:80:7f:c3:b3:c9:db:74:d7:20:b7:33:13:a4:3c:0b:ac:02:
54:f1:4b:78:8a:d8:0c:e3:06:58:d7:af:c2:51:cb:63:32:dc:
97:59:3b:53:a5:e8:08:6f:a3:37:f3:10:1c:33:8d:fa:f0:d8:
68:e8:91:b8:f7:49:5c:c3:9a:ac:12:9e:bd:a0:3b:61:c1:c8:
e6:ab:88:8b:d2:37:55:f9:dc:ba:bb:82:52:63:04:db:e9:fd:
60:30:ce:a3:95:e3:e4:d5:40:2d:87:b7:67:4b:9c:b3:6b:ed:
7c:55:05:b5:b0:3a:c9:db:65:92:1d:19:97:77:c5:3f:5d:59:
29:bb:fb:35:c0:a0:36:41:fa:cb:08:0c:14:fa:97:91:2b:f2:
91:65:10:70:7c:f1:df:17:36:f9:e4:c8:e1:4b:ba:db:06:cf:
ea:fc:98:8d:3a:54:fc:2a:0e:e7:c2:01:8a:06:69:8e:a3:4f:
b4:26:c5:1c:b5:59:6a:09:06:d4:fb:93:92:65:6c:1a:67:39:
ae:ee:38:90:85:7d:7c:84:f7:0f:15:03:61:43:9b:ea:5d:da:
a3:34:0d:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 00:08:52 2025 by rpki-client