Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/bebf59f2-bf90-3175-91dd-9fac1578d048.roa
File: bebf59f2-bf90-3175-91dd-9fac1578d048.roa (raw, json)
Hash identifier: smAeKwRYX5ibKAsGk1HrW/36vpOM1r77yiwTzFSVc0s=
Subject key identifier: D1:7A:63:A9:60:19:97:56:E5:68:92:8B:8D:8A:A0:ED:30:6A:9A:61
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F43285848C264CCFF330594E19697ACB0
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/bebf59f2-bf90-3175-91dd-9fac1578d048.roa
Signing time: Mon 03 Feb 2025 11:16:48 +0000
ROA not before: Mon 03 Feb 2025 11:16:48 +0000
ROA not after: Sun 04 May 2025 10:16:48 +0000
asID: 30036
IP address blocks: 2604:2e89:8800::/38 maxlen: 38
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c2:64:cc:ff:33:05:94:e1:96:97:ac:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Feb 3 11:16:48 2025 GMT
Not After : May 4 10:16:48 2025 GMT
Subject: CN=da727df6-5cfd-40bd-8dd9-4e01b2b6193f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:33:5d:aa:91:1d:4b:2d:50:b5:0c:d1:eb:b8:
59:90:61:2a:1d:c9:26:13:eb:93:b6:65:fb:7b:89:
31:85:f7:39:1a:a4:49:e2:d2:63:89:c9:9d:9f:2e:
a6:f5:49:34:4a:02:22:2e:9a:e7:13:5b:ac:37:e0:
b6:1c:59:4e:30:fe:0b:4a:e7:cf:0c:1b:cb:ff:56:
b6:02:3c:d4:ec:53:a0:8e:51:e3:44:42:25:57:6f:
74:0b:29:fd:88:66:f8:2d:fd:19:64:21:db:8c:a5:
31:4a:c0:15:cb:b8:82:45:76:bd:cb:b8:30:88:58:
e8:fc:bf:cf:b6:bf:b0:e2:8c:3f:3f:b5:e9:32:5b:
1c:4c:59:dd:1d:16:57:c4:09:e6:fb:c8:aa:55:ca:
ff:cd:db:3b:99:64:55:47:4e:5b:3f:fc:2d:07:a3:
df:59:b1:d9:87:62:f3:d6:37:f7:1c:fe:e1:12:8a:
d5:8c:3a:61:9d:d2:2f:44:2c:7f:05:d0:26:94:fa:
cf:a9:dd:7f:b0:3e:cc:d7:86:25:62:ca:d0:10:e7:
8d:6b:e9:e4:93:e6:94:7b:11:4f:81:05:5d:1a:04:
4f:5a:4f:3e:2d:87:c8:f1:f5:e1:f1:d3:d3:ef:42:
87:d8:6e:21:0f:85:04:7d:5f:f3:93:19:97:2c:3a:
6c:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:7A:63:A9:60:19:97:56:E5:68:92:8B:8D:8A:A0:ED:30:6A:9A:61
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/bebf59f2-bf90-3175-91dd-9fac1578d048.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2e89:8800::/38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
26:46:23:6d:49:ad:95:0f:80:4f:8c:33:24:5e:c4:be:cb:b6:
8c:2e:13:68:c1:d7:8b:f4:84:51:0d:92:f5:78:32:c8:bc:7b:
5e:3a:66:05:a8:a0:d5:3f:9f:21:20:01:33:ca:26:84:90:7c:
70:ab:5b:52:38:da:e7:5e:f1:f9:32:71:78:21:95:eb:22:67:
38:6f:81:c2:4e:2e:0a:66:8f:1a:0b:8f:2b:f1:51:e5:a2:81:
a8:6d:30:35:1f:88:35:c9:fd:45:e1:63:f9:b4:38:09:4a:47:
9c:09:17:6d:df:37:aa:dd:db:c0:b5:b9:98:07:24:b6:c8:99:
50:4c:7b:24:c6:a8:c9:cc:1c:be:5a:41:a8:12:8f:20:f9:41:
96:02:4f:b6:8d:32:d5:7c:38:5e:60:3b:74:6b:31:fd:c7:30:
e1:ce:d9:c1:05:64:0e:ea:1c:69:b6:a4:2b:4c:f0:0f:ab:d1:
e6:23:cf:f0:83:ab:41:a3:49:0a:ab:94:34:ee:88:7d:90:f9:
a7:5c:f3:41:29:f9:83:7a:c2:e7:a8:95:c2:98:f5:c0:d1:35:
4b:1e:f3:de:d6:ef:e0:55:4a:38:97:d1:06:72:2a:6a:8c:ff:
09:47:10:af:17:6c:1d:3c:a0:3b:76:70:ec:af:f5:bd:8d:cc:
9f:3d:f0:e3
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEjCZMz/MwWU4ZaXrLAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5
YTE1MB4XDTI1MDIwMzExMTY0OFoXDTI1MDUwNDEwMTY0OFowLzEtMCsGA1UEAxMk
ZGE3MjdkZjYtNWNmZC00MGJkLThkZDktNGUwMWIyYjYxOTNmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiTNdqpEdSy1QtQzR67hZkGEqHckmE+uTtmX7
e4kxhfc5GqRJ4tJjicmdny6m9Uk0SgIiLprnE1usN+C2HFlOMP4LSufPDBvL/1a2
AjzU7FOgjlHjREIlV290Cyn9iGb4Lf0ZZCHbjKUxSsAVy7iCRXa9y7gwiFjo/L/P
tr+w4ow/P7XpMlscTFndHRZXxAnm+8iqVcr/zds7mWRVR05bP/wtB6PfWbHZh2Lz
1jf3HP7hEorVjDphndIvRCx/BdAmlPrPqd1/sD7M14YlYsrQEOeNa+nkk+aUexFP
gQVdGgRPWk8+LYfI8fXh8dPT70KH2G4hD4UEfV/zkxmXLDpstQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFNF6Y6lgGZdW5WiSi42KoO0wapphMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw
Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvYmViZjU5ZjItYmY5MC0z
MTc1LTkxZGQtOWZhYzE1NzhkMDQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi
OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4
OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3
NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuiYgw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAJkYjbUmtlQ+AT4wzJF7Evsu2jC4TaMHXi/SEUQ2S9XgyyLx7Xjpm
Baig1T+fISABM8omhJB8cKtbUjja517x+TJxeCGV6yJnOG+Bwk4uCmaPGguPK/FR
5aKBqG0wNR+INcn9ReFj+bQ4CUpHnAkXbd83qt3bwLW5mAcktsiZUEx7JMaoycwc
vlpBqBKPIPlBlgJPto0y1Xw4XmA7dGsx/ccw4c7ZwQVkDuocabakK0zwD6vR5iPP
8IOrQaNJCquUNO6IfZD5p1zzQSn5g3rC56iVwpj1wNE1Sx7z3tbv4FVKOJfRBnIq
aoz/CUcQrxdsHTygO3Zw7K/1vY3Mnz3w4w==
-----END CERTIFICATE-----
Generated at Wed Apr 9 01:58:16 2025 by rpki-client