
Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/bf68f4c6-8b76-3744-99bf-a0c5b4b38f3a.roa
File: bf68f4c6-8b76-3744-99bf-a0c5b4b38f3a.roa (raw, json)
Hash identifier: GJN0yxP0yI4715i3UJ3IWxVioTTY2lKHRlc008pQW9E=
Subject key identifier: E5:2F:CD:EB:89:71:1C:32:8C:38:12:7E:A0:13:86:4B:1B:17:65:89
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F43285849134FFBC35A9E43B2FB748C80
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/bf68f4c6-8b76-3744-99bf-a0c5b4b38f3a.roa
Signing time: Tue 04 Mar 2025 10:55:20 +0000
ROA not before: Tue 04 Mar 2025 10:55:20 +0000
ROA not after: Mon 02 Jun 2025 09:55:20 +0000
asID: 30036
IP address blocks: 2604:2e8e:a800::/38 maxlen: 38
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:13:4f:fb:c3:5a:9e:43:b2:fb:74:8c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Mar 4 10:55:20 2025 GMT
Not After : Jun 2 09:55:20 2025 GMT
Subject: CN=80544753-b238-49df-bf56-9135b60cb715
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a5:aa:df:e4:df:24:50:a2:b8:58:77:30:99:
06:c6:df:e4:e6:98:68:f9:95:e9:8e:08:3e:6e:35:
6e:58:89:28:17:29:dc:58:aa:b2:7e:ad:9d:15:eb:
84:f5:62:e9:36:4b:e2:54:39:d5:7a:35:7c:81:b1:
e2:21:2f:1c:3a:53:de:ad:70:3b:77:f0:9d:f1:40:
8c:da:8a:97:70:64:97:4d:68:a0:59:e1:24:a3:b7:
5b:a8:32:a3:84:2d:5e:78:1c:de:a8:b4:0a:2f:70:
2a:e7:b2:0f:5a:f9:7e:09:84:ea:00:bf:c8:90:3b:
40:c4:61:bb:1c:b5:d8:43:dc:6c:fd:b9:fa:a4:d5:
a3:3e:4f:c1:46:d2:09:74:08:3e:10:c3:64:79:be:
6a:41:42:6a:73:d1:76:14:bf:df:3c:89:bf:b0:ed:
15:7f:9f:6c:20:37:9a:92:1e:3e:99:63:03:19:0c:
74:bf:fd:c3:dd:00:f3:06:d0:2b:39:6d:0a:a8:09:
9a:d6:7f:41:be:04:98:03:60:16:3c:4e:e8:ae:3c:
83:7c:0a:b1:8d:72:e5:0f:f0:80:56:26:ad:2f:fa:
2a:3e:56:2a:dc:bb:fc:84:2e:65:18:ee:d4:6c:7d:
2b:fe:7d:96:4a:6b:68:b7:f0:5f:73:0e:69:16:5d:
a4:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:2F:CD:EB:89:71:1C:32:8C:38:12:7E:A0:13:86:4B:1B:17:65:89
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/bf68f4c6-8b76-3744-99bf-a0c5b4b38f3a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2e8e:a800::/38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
76:22:ab:39:55:b0:bc:a7:60:b1:7d:b7:04:7c:70:65:d9:be:
c7:ed:3a:65:49:61:20:27:9e:79:b4:ed:de:ad:53:28:e4:b0:
ee:1b:f2:da:f2:8e:45:59:73:0c:f0:93:e3:ec:52:b7:83:43:
1e:78:eb:a7:3a:8d:29:ec:86:e3:00:07:0d:12:e5:22:54:da:
72:58:10:66:9a:fe:b3:f9:12:c9:da:f2:e6:66:1b:92:78:01:
c8:c2:17:b7:f3:18:11:0f:45:b3:25:d7:bd:ec:52:d3:85:15:
48:3b:65:4e:ab:b1:ea:59:e7:5a:b0:07:0e:f3:82:3a:a8:5f:
ee:9d:3b:a7:bc:f1:3b:a4:93:81:0e:38:b6:c4:07:8e:95:d0:
71:f4:bd:f2:df:20:b7:d7:ca:90:ad:4f:f9:7f:66:ca:7c:6d:
2c:66:85:69:7a:02:75:45:e8:cf:db:90:4e:6b:e7:1e:7c:90:
4f:67:75:53:b6:63:92:a8:23:ff:b8:ea:7b:37:0d:e2:40:72:
c5:b6:86:59:53:21:24:8e:f2:b4:35:32:e2:4e:27:60:56:da:
77:f2:b3:f8:fe:55:ba:92:bb:68:ba:24:4f:ad:1d:d8:b6:1c:
60:47:fb:20:c5:8a:5f:22:a7:d6:f3:5b:5f:50:16:3d:ef:23:
2f:5a:79:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 00:06:28 2025 by rpki-client