Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/b54aff74-14f0-3bd2-9926-5516c6566542.roa
File: b54aff74-14f0-3bd2-9926-5516c6566542.roa (raw, json)
Hash identifier: gYJ0v/r06Qgm/AfVh9sIl4+E+56Dr9RTj+jkbi5VrFM=
Subject key identifier: F8:91:8A:EF:23:04:DD:74:0F:C2:C6:3D:04:C9:95:7C:EC:EB:B1:BC
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F43285849134FD5EFCDB699448FF6E900
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/b54aff74-14f0-3bd2-9926-5516c6566542.roa
Signing time: Tue 04 Mar 2025 10:55:03 +0000
ROA not before: Tue 04 Mar 2025 10:55:03 +0000
ROA not after: Mon 02 Jun 2025 09:55:03 +0000
asID: 30036
IP address blocks: 2604:2e8c:cc00::/38 maxlen: 38
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:13:4f:d5:ef:cd:b6:99:44:8f:f6:e9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Mar 4 10:55:03 2025 GMT
Not After : Jun 2 09:55:03 2025 GMT
Subject: CN=7821a9f2-42bc-4eb9-be04-62ef3a8d02d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:14:b3:3a:59:c1:88:99:9d:82:c9:dd:51:33:
97:01:6d:fc:bd:7e:1d:ae:fd:54:2a:b7:d0:3e:3c:
ab:6e:3b:70:89:f4:c6:97:84:9b:3f:64:9a:21:62:
b0:ce:3c:a0:27:2a:ea:ee:07:39:6a:32:1a:44:b3:
86:d4:a7:ef:ec:43:47:66:76:5a:d7:75:55:a5:76:
1f:10:29:1f:50:6f:37:27:eb:f7:7b:d1:a3:e7:26:
5a:51:24:59:ff:e7:a1:0a:9f:70:28:bd:d7:f2:2d:
d3:a4:d5:c8:a8:29:ca:74:39:40:d7:7a:cd:02:46:
ac:4d:40:20:66:83:e1:a9:98:4e:56:4f:11:cd:a4:
f0:73:95:e5:63:f0:7e:11:c0:c1:af:d7:27:bf:d8:
c9:38:f3:1b:6f:4e:f2:a5:78:21:68:06:3c:10:9f:
19:b9:ee:f2:4c:02:13:da:d6:53:b0:ab:5a:77:e1:
f3:e3:1a:90:22:d8:f3:d5:22:bb:fc:e5:a1:32:fb:
dd:0b:6e:74:65:0d:57:4e:40:ed:74:50:b9:31:fc:
05:89:6f:15:02:f9:49:d5:06:33:cb:d7:8a:57:1b:
bc:0a:4d:f9:13:3a:fb:19:e7:c6:44:81:01:be:93:
2c:f3:7e:06:ea:86:fd:a6:1a:99:07:69:7d:05:b1:
49:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:91:8A:EF:23:04:DD:74:0F:C2:C6:3D:04:C9:95:7C:EC:EB:B1:BC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/b54aff74-14f0-3bd2-9926-5516c6566542.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2e8c:cc00::/38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
93:8a:d0:13:11:e8:4f:9f:9b:96:1d:5e:6b:09:6b:1e:b5:0c:
1b:48:f0:d8:e7:28:f4:24:37:98:88:fc:d3:8e:62:d2:13:cb:
62:1e:4c:69:af:e1:17:92:a1:8d:6a:c5:ab:7e:4e:e1:5a:9f:
86:b6:16:72:dc:7b:10:1b:bc:ce:1a:c2:7b:1d:ac:a7:37:d5:
fe:68:24:44:73:73:bd:c6:cb:13:58:f1:83:35:1d:a6:2d:65:
5e:6f:27:ae:86:2b:5d:75:30:c7:70:31:61:90:79:77:24:e9:
95:99:a8:86:24:00:84:05:0b:14:85:58:d7:1d:e7:0c:05:ce:
17:1d:ca:48:d3:23:79:a4:37:4f:0e:c4:e1:63:e8:fe:e6:a5:
26:5d:15:a8:aa:e3:77:ea:88:55:10:45:8c:48:93:99:3d:59:
a4:65:db:34:3d:7b:40:5b:5b:5d:61:e8:9e:32:2b:2a:27:86:
90:28:11:44:a0:4e:90:ed:70:81:89:dc:7b:63:d4:cb:32:15:
cb:67:47:93:13:e6:12:54:75:09:f1:bf:f5:b0:9f:6c:75:d3:
e1:5e:db:d5:ef:38:53:39:2f:7a:c2:93:74:96:a6:a1:bc:2c:
8e:eb:74:2e:c0:aa:a5:26:f5:6f:c9:1a:f6:ee:7b:79:c2:f2:
cc:5b:44:ea
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEkTT9XvzbaZRI/26QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5
YTE1MB4XDTI1MDMwNDEwNTUwM1oXDTI1MDYwMjA5NTUwM1owLzEtMCsGA1UEAxMk
NzgyMWE5ZjItNDJiYy00ZWI5LWJlMDQtNjJlZjNhOGQwMmQ5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgxSzOlnBiJmdgsndUTOXAW38vX4drv1UKrfQ
PjyrbjtwifTGl4SbP2SaIWKwzjygJyrq7gc5ajIaRLOG1Kfv7ENHZnZa13VVpXYf
ECkfUG83J+v3e9Gj5yZaUSRZ/+ehCp9wKL3X8i3TpNXIqCnKdDlA13rNAkasTUAg
ZoPhqZhOVk8RzaTwc5XlY/B+EcDBr9cnv9jJOPMbb07ypXghaAY8EJ8Zue7yTAIT
2tZTsKtad+Hz4xqQItjz1SK7/OWhMvvdC250ZQ1XTkDtdFC5MfwFiW8VAvlJ1QYz
y9eKVxu8Ck35Ezr7GefGRIEBvpMs834G6ob9phqZB2l9BbFJaQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFPiRiu8jBN10D8LGPQTJlXzs67G8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw
Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvYjU0YWZmNzQtMTRmMC0z
YmQyLTk5MjYtNTUxNmM2NTY2NTQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi
OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4
OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3
NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQujMww
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAk4rQExHoT5+blh1eawlrHrUMG0jw2Oco9CQ3mIj8045i0hPLYh5M
aa/hF5KhjWrFq35O4VqfhrYWctx7EBu8zhrCex2spzfV/mgkRHNzvcbLE1jxgzUd
pi1lXm8nroYrXXUwx3AxYZB5dyTplZmohiQAhAULFIVY1x3nDAXOFx3KSNMjeaQ3
Tw7E4WPo/ualJl0VqKrjd+qIVRBFjEiTmT1ZpGXbND17QFtbXWHonjIrKieGkCgR
RKBOkO1wgYnce2PUyzIVy2dHkxPmElR1CfG/9bCfbHXT4V7b1e84UzkvesKTdJam
obwsjut0LsCqpSb1b8ka9u57ecLyzFtE6g==
-----END CERTIFICATE-----
Generated at Wed Apr 9 00:24:16 2025 by rpki-client