Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/bf00ff42-1d72-33fe-afc2-42837b116524.roa
File: bf00ff42-1d72-33fe-afc2-42837b116524.roa (raw, json)
Hash identifier: Rd/zkOgvWFNfABZxDBkj54ZSaUINs9RVDMkFdv8NnI0=
Subject key identifier: 67:26:0C:CA:10:0B:A8:AB:97:47:8C:4C:D7:A4:70:68:7E:F4:BB:29
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F43285848C55FE6570EFA3F4FAC6EC580
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/bf00ff42-1d72-33fe-afc2-42837b116524.roa
Signing time: Tue 04 Feb 2025 12:54:21 +0000
ROA not before: Tue 04 Feb 2025 12:54:21 +0000
ROA not after: Mon 05 May 2025 11:54:21 +0000
asID: 30036
IP address blocks: 2604:2e8c:9400::/38 maxlen: 38
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:5f:e6:57:0e:fa:3f:4f:ac:6e:c5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Feb 4 12:54:21 2025 GMT
Not After : May 5 11:54:21 2025 GMT
Subject: CN=4e42525e-56e8-49c5-8b78-d99f0e95eec2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:0b:de:f8:f4:ed:58:9c:7e:9e:49:60:44:09:
e2:a5:e4:b1:28:20:51:28:a3:c0:7b:ce:08:76:59:
17:b6:ad:34:8d:c2:a3:36:96:91:70:c8:7d:20:65:
35:6a:16:23:b6:48:06:7e:35:55:4f:9a:c5:9f:9c:
bb:ba:67:69:d3:57:57:0b:93:69:87:78:e4:69:2f:
5a:d4:aa:b5:7f:c6:c4:7c:f1:89:73:e9:ec:e3:5f:
7f:07:d6:97:e9:ae:33:13:f2:db:ed:e5:63:ea:c0:
d1:97:f1:d1:64:7e:0e:95:62:87:b9:8c:12:b3:43:
75:e9:1b:ec:07:f1:35:7a:eb:64:48:33:36:51:6f:
9c:a4:53:21:f5:18:9c:00:84:f5:34:a9:7b:ad:ae:
fe:14:86:8d:4a:75:86:b6:a1:e0:99:4e:80:b2:f1:
12:97:d0:6d:c2:b4:ed:d3:32:48:f6:9c:8a:e3:fd:
f9:a1:69:73:f6:6e:74:ce:d5:4d:18:ec:0d:6b:ce:
e0:39:d4:44:2f:29:42:e6:ed:ed:b7:4b:41:c4:69:
95:3f:ab:8d:41:ea:bc:72:8b:b5:c9:1d:39:7a:32:
11:b4:41:09:de:fc:ed:7a:e6:96:e2:94:53:a3:d2:
0b:d0:2c:cf:97:10:d9:33:ad:6c:0a:4a:83:e0:a4:
73:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:26:0C:CA:10:0B:A8:AB:97:47:8C:4C:D7:A4:70:68:7E:F4:BB:29
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/bf00ff42-1d72-33fe-afc2-42837b116524.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2e8c:9400::/38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
86:1c:38:f9:31:91:82:47:42:ac:2e:cb:76:f9:83:cc:39:0d:
84:e0:68:fc:62:9e:fa:bb:16:cb:84:c6:d9:4e:10:e7:f1:06:
55:21:f3:18:df:c0:ab:4e:e1:81:0e:7a:30:57:57:be:c7:c7:
8f:28:3e:9c:ac:6b:42:f4:cc:5e:63:91:d7:f4:51:4e:79:04:
31:30:6b:01:28:46:e4:6a:b8:db:8a:7c:88:eb:20:7e:e3:42:
fb:3b:3f:93:9c:04:a2:b3:0d:cc:98:c0:33:33:0f:14:96:65:
57:80:e5:5e:61:d1:43:17:1f:df:d9:6f:1c:39:ff:dd:56:60:
2b:c0:cd:2a:d0:04:21:d0:7f:88:29:06:b5:3a:2b:0c:37:6c:
86:b5:27:b5:56:7c:fc:42:e0:95:c2:24:82:4d:b2:70:54:fa:
44:6f:1c:f2:79:65:16:f2:8c:04:1c:b9:39:1c:bf:22:99:56:
7a:db:35:e4:d9:b5:ce:97:0b:c4:66:63:b0:6e:19:7f:6d:5b:
7a:f1:43:0a:7c:14:01:5c:43:a8:26:36:20:3e:04:1b:22:a1:
26:16:77:b4:ef:71:d6:e7:d7:0c:b3:34:d8:45:66:0c:f3:a7:
2a:5b:10:5c:b6:71:02:0a:e3:cb:e6:9a:da:31:d7:37:71:00:
6e:04:c3:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 00:21:36 2025 by rpki-client