Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/b38de647-501d-397c-bfa1-f0f2ba6b6022.roa
File: b38de647-501d-397c-bfa1-f0f2ba6b6022.roa (raw, json)
Hash identifier: w6teVGKXHW+kBpan/6aIJSIRg+R9nW2FW1V0eOIdxps=
Subject key identifier: AA:DA:81:B7:DE:37:D7:EC:4B:02:63:1E:D0:FA:68:A6:73:F6:40:61
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F43285848C5801D0FB82AD5C10FD0FC80
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/b38de647-501d-397c-bfa1-f0f2ba6b6022.roa
Signing time: Tue 04 Feb 2025 13:59:16 +0000
ROA not before: Tue 04 Feb 2025 13:59:16 +0000
ROA not after: Mon 05 May 2025 12:59:16 +0000
asID: 30036
IP address blocks: 2604:2e89:bc00::/38 maxlen: 38
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:80:1d:0f:b8:2a:d5:c1:0f:d0:fc:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Feb 4 13:59:16 2025 GMT
Not After : May 5 12:59:16 2025 GMT
Subject: CN=ecd3a109-3460-4cf0-86a2-5146dd65b1d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:07:7c:c4:79:83:1a:77:90:eb:93:81:2f:52:
e2:15:7d:41:15:2f:01:f6:47:6f:d7:56:f1:e2:7f:
42:31:d2:76:be:1a:e4:7d:89:a4:b3:73:cd:53:07:
d7:8b:69:d8:42:5b:b0:8e:9f:53:ad:01:bc:51:c8:
81:6a:1e:a4:f2:08:15:28:46:bf:fc:a4:42:eb:56:
8c:d1:98:4d:50:a3:21:d7:0c:79:16:5e:de:e1:07:
e8:e8:b2:2f:a9:46:d5:ac:74:27:93:88:bf:b1:ca:
77:1c:62:b9:98:65:a4:f6:82:e5:eb:83:ab:87:75:
67:fe:d9:4a:c6:51:4f:04:79:3c:5e:05:ea:ba:13:
6e:14:47:77:d2:77:07:88:4f:63:ba:98:f2:42:60:
68:e4:8e:1e:de:33:23:46:64:a0:60:b0:c9:d0:26:
92:e9:81:a5:52:98:8a:c5:e3:5c:17:59:70:65:9e:
c8:a9:eb:d9:f2:3d:70:cd:39:d3:d5:d1:21:19:3d:
88:d7:41:45:9d:69:ac:16:f7:77:bc:d6:69:53:d7:
44:a0:08:b5:a9:32:e0:73:63:ea:21:39:6c:fa:d2:
24:7e:bf:e1:a7:73:31:0c:02:92:fb:1d:6f:37:3c:
47:7d:aa:c2:e1:40:64:20:bb:17:9e:eb:8c:5a:95:
d1:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:DA:81:B7:DE:37:D7:EC:4B:02:63:1E:D0:FA:68:A6:73:F6:40:61
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/b38de647-501d-397c-bfa1-f0f2ba6b6022.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2e89:bc00::/38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
05:ab:8e:54:6d:63:2a:f1:36:83:25:db:b9:1d:a9:8d:03:9f:
2c:cf:e4:2e:4e:10:28:bf:c0:6e:f3:f1:90:52:f2:7d:b3:9e:
58:29:25:b2:23:af:ca:b3:d6:3e:16:2e:fc:1b:c8:eb:8d:91:
b6:e1:7f:8b:d0:23:25:30:e6:9f:a2:94:a9:21:7c:1a:d4:10:
65:8b:0c:1d:8a:d9:86:01:16:64:75:ae:f1:08:2b:26:e1:ee:
84:78:45:d6:72:1e:da:de:f0:90:bb:c2:c1:12:0a:4d:b7:3c:
eb:2b:83:d1:7c:8b:a3:e6:5f:47:1c:49:f1:50:19:24:c2:32:
b3:d5:45:6c:ba:a4:23:b9:e3:a3:9c:29:7a:ac:4a:6b:14:87:
fd:fb:f9:60:14:8e:57:c4:bb:26:a8:7a:93:aa:bb:c1:0c:e6:
3a:e1:6c:1c:8c:37:50:38:41:2e:f8:b9:7b:10:00:7a:d8:7f:
c2:c6:ab:43:05:3a:16:1b:0a:44:cf:bb:bb:2a:35:3a:f2:9e:
3a:df:02:1f:d2:5c:d9:c0:63:da:c4:ad:53:c4:bc:64:95:cb:
a0:6b:32:32:fa:00:56:14:3f:f0:34:ef:2c:09:d1:3b:77:3e:
ca:e8:1a:37:76:6c:97:8a:a2:50:12:77:32:cf:05:63:e7:1a:
21:fc:5a:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 00:06:29 2025 by rpki-client